Nerdio Manager allows you to define solution baselines, simplifying initial deployments and maintaining consistent policy states across all customer accounts.
Nerdio Manager allows you to configure solution baselines. See the following for details:
Every solution baseline starts with a Prerequisites action. It replaces the separate license, permission, and service checks that each baseline used to have, and it shows Passed or Not Passed for each account.
-
Point to Not Passed to see a breakdown, per account, of what is missing: licenses, roles, permissions, or enabled services.
-
When the prerequisites are not met, the remaining actions of the baseline are skipped for that account.
-
In Enforce mode, Nerdio Manager tries to fix missing prerequisites, for example by enabling a service or granting permissions, before it continues.
-
The desired state of the action is Passed. In the baseline wizard, the Prerequisites step has a caption and the Enforce, Report-only, and Exclude selector. Point to the action to see the permission set that it requires.
Note
After an upgrade, an existing baseline might need to be reprocessed before the Prerequisites action appears.
The following table lists what each baseline needs. For the directory roles, see Account-level Nerdio Manager service principal permissions.
|
Solution baseline |
License |
Account feature or consent |
Permission set |
|---|---|---|---|
|
Intune |
Intune |
Intune feature and Intune admin consent |
Intune |
|
Entra ID |
Entra |
- |
Entra |
|
Defender for Endpoint |
Defender for Endpoint |
Defender for Endpoint feature |
Defender for Endpoint |
|
Defender for Office 365 |
Defender for Office 365 |
Defender for Office 365 feature |
Defender for Office 365 |
|
Exchange Online |
Exchange Online |
- |
Exchange Online |
|
SharePoint and OneDrive |
SharePoint Online |
- |
SharePoint Online |
|
Teams |
Teams |
- |
Teams |
|
Purview |
Exchange Online |
Purview Management feature |
Purview |
Nerdio Manager allows you to assign accounts to a solution baseline.
To assign accounts to a solution baseline:
-
In Nerdio Manager, at the MSP level, navigate to Solution Baselines.
-
Locate the solution baseline you wish to work with.
-
From the action menu, select Assign.
-
Select Add assignments.
-
Enter the following information:
-
Assignments: From the drop-down list, select the account(s) to assign.
-
Add / Overwrite: Select whether to add the selected accounts to the existing assignments, or replace (overwrite) the existing assignments with the new selections.
-
-
Optionally, select Remove to remove an assignment.
-
Review all the assignments and select Confirm.
-
When you have made all the desired changes, select Apply and close.
-
When prompted, optionally, select Enforce to apply the solution baseline to the assigned accounts.
-
When you have reviewed your changes, select Confirm.
Nerdio Manager allows you to clone solution baselines.
To clone solution baselines at the MSP level:
-
In Nerdio Manager, at the MSP level, navigate to Solution Baselines.
-
Locate the solution baseline(s) you wish work with.
-
From the action menu, select Clone.
-
Enter the following information:
-
Name: Type the new name of the solution baseline.
-
Description: Type the solution baseline's description.
-
Disable cloned solution baseline: Select this option to disable the cloned solution baseline.
-
-
Once you have entered all the desired information, select OK.
Nerdio Manager allows you to view the status of solution baselines and accept drifts.
To view the status of solution baselines and accept drifts:
-
In Nerdio Manager, at the MSP level, navigate to Solution Baselines.
-
Locate the solution baseline you wish work with.
-
From the action menu, select Status overview.
-
Alternatively, select the status overview icon.
-
The Status page shows the state of each setting with an icon and a color. Point to the icon to read the state and what it means. See States and reasons. The colors are:
-
Green: Valid (Satisfied)
-
Red or amber: Mismatch or Unavailable (Drifted). Both are red when the baseline is enforced and amber when it is not.
-
Gray: Excluded
-
-
Optionally select View details to see the details.
-
For any drifted setting, select Accept Drift.
-
Enter the following information:
-
Drift acceptance expires after: From the drop-down list, select the drift expiration. Alternatively, type a date.
-
Description: Optionally, type a description about why this drift was accepted.
-
Allow processing: Select this option for the next republishing to try to sync the policy.
-
-
Once you have entered the desired information, select Accept.
The setting remains in the drifted group and its status is Accepted drift.
-
Hover over Accepted drift to see its details.
-
Select the remove icon
next to Accepted drift to remove the acceptance.
In the View dialog of a status, the header shows the name of the solution baseline and the name of the customer. Point to the state icon of an action to read its state. A setting can be in one of the following states:
|
State |
What it means |
|---|---|
|
Valid |
The current setting matches the configured solution baseline value. |
|
Mismatch |
The current setting differs from the configured solution baseline value. Re-apply the solution baseline to bring it back into compliance. |
|
Excluded |
This action is excluded from the solution baseline for this tenant and is not checked or enforced. |
|
Not Assigned |
The setting has not been assigned to this tenant. |
|
Unavailable |
The state could not be determined or applied. The tooltip names the reason, as described in the next table. |
When a setting is Unavailable, the state line shows one of these reasons. Details from the service can follow the explanation.
|
Reason |
What it means |
|---|---|
|
Loading Failed |
The current setting could not be loaded from the external API. This might be a temporary issue, so try to run the solution baseline again. |
|
Invalid Configuration |
The solution baseline configuration for this action is incomplete or invalid. Review the solution baseline settings before you re-apply it. |
|
Prerequisites Not Met |
One or more prerequisites for this solution baseline are not met. Check the Prerequisites action and resolve any issues before you re-apply the baseline. |
|
API Check Error |
An error occurred while reading the current setting from the external service. |
|
API Apply Error |
An error occurred while applying the setting to the external service. The setting might be partially applied. |
|
Unknown |
The status of this setting could not be determined. |
For a setting with accepted drift, the tooltip also shows Accepted at, Accepted by, Expires at (never if there is no expiry), Re-publishing mode (Skip processing or Allow processing), and the Description.
Nerdio Manager allows you to manage solution baselines.
To manage solution baselines at the MSP level:
-
In Nerdio Manager, at the MSP level, navigate to Solution Baselines.
-
Optionally, in the upper right corner, you can toggle the view from tile to grid.
-
Select the solution baseline you wish work with and from the action menu, select any of the following:
-
Assign: Assign the solution baseline to accounts.
-
Configure baseline: Configure the solution baseline as described above.
-
Reset to default: Reset the solution baseline to its default state.
-
Reprocess: Reprocess the solution baseline.
-
Clone: Clone the solution baseline as described above.
-
Disable: Disable the solution baseline.
-
Enable: Enable the solution baseline.
-
Remove: Remove the solution baseline.
Note
Only solution baselines that are clones may be disabled, enabled, or removed.
-
Status overview: View the solution baseline's status as described above.
-
Comments (0 comments)