Nerdio Manager allows you to group your policies into a single baseline and specify the desired state for simplified initial deployment and more consistency across all your customer accounts.
Nerdio Manager allows you to group your policies into a single baseline and specify the desired state for simplified initial deployment and more consistency across all your customer accounts.
To create a policy baseline at the MSP level:
-
In Nerdio Manager, at the MSP level, navigate to Baselines > Policy Baselines.
-
Select Add Baseline.
-
Enter the following information:
-
Name: Type the name of the policy baseline.
-
Description: Type the description.
-
Tags: Type or select the desired tag(s).
-
Logo: Select MSP to use the MSP logo, which is the default, or select Custom and upload a logo from a file or a URL. The recommended size is 35 x 35 pixels. Supported file types are JPG, SVG, and PNG, up to 2 MB. The logo helps you tell baselines apart in the list. The Logo field is not shown for CIS baselines, which have their own logo.
-
-
Once you have entered all the desired information, select Save.
Nerdio Manager allows you to change the priority of a policy baseline.
Multiple policy baselines can apply to an account. The priority impacts how the policies in the baselines are processed.
-
Baselines are processed from top to bottom as they are displayed.
-
If the baseline is in Enforced state, the policies are assigned to the customer accounts and published if the sync type set to Auto.
-
If the baseline is in Report-only, Nerdio Manager evaluates if the actual state at the customer level aligns with the desired state as set in the baseline.
-
For any policy that has been processed (evaluated or published) by a higher priority baseline, enforcement by lower priority baselines is skipped. This prevents earlier high priority evaluations from becoming outdated.
-
Enforcing a policy includes the policy assignment to the customer, the sync type (manual/automatic), and desired version. Optionally, Nerdio Manager also evaluates if the policy has been assigned at the customer level.
Tip
You should try to avoid creating overlapping baselines. Any potential conflicts should be removed.
To change priority of a policy baseline:
-
In Nerdio Manager, at the MSP level, navigate to Baselines > Policy Baselines.
-
Select and hold the policy baseline's
.
-
Drag and drop the policy baseline to the desired location to change the priority.
Nerdio Manager allows you to add policies to a policy baseline.
To assign policies to a policy baseline:
-
In Nerdio Manager, at the MSP level, navigate to Baselines > Policy Baselines.
-
Locate the policy baseline you wish to work with.
-
From the action menu, select Edit policies.
-
Select Add policies.
-
Select the desired policies and then select Add.
-
Review all the policies and select Apply and Close.
-
When prompted, select Confirm.
The confirmation dialog asks Are you sure you want to apply the following changes to this baseline's policies? and lists the changes with the Name, Direct Assign, Version, Sync Mode, and Evaluate Assignments of each policy. It can also include these options:
-
Remove policies (that were removed from this baseline) from accounts: Cleared by default. When it is cleared, a policy that you removed from the baseline is removed only from the baseline, and the customer tenants are not touched. When you select it, the applied policies are also removed from the customer tenants, but only if they have no other assignments. A tooltip lists the policies that were removed from the baseline.
-
Re-publish for manual sync type assignments: Select this option to republish policies that use manual sync.
-
Remove group assignments at customer level: Selected by default. When the direct assignment is cleaned up, it also clears the group assignments for these policies in the customer tenant. The policies themselves remain in the tenant.
To add policies to a policy baseline from a policy page:
-
In Nerdio Manager, at the MSP level, expand Policies, and select the policy type that contains the policies.
-
To add one policy, select Add to baseline in its row. To add several policies, select them and use the bulk action Add to baseline.
-
Select Existing and choose a Policy Baseline, or select New and enter a Name to create a new baseline that contains the selected policies.
-
Confirm the dialog.
Policies that are already in the baseline are not modified.
Nerdio Manager allows you to add accounts to a policy baseline.
To assign accounts to a policy baseline:
-
In Nerdio Manager, at the MSP level, navigate to Baselines > Policy Baselines.
-
Locate the policy baseline you wish to work with.
-
From the action menu, select Assign.
-
Select Add assignments.
-
Enter the following information:
-
Select assignments: From the drop-down list, select the account(s).
-
Enforced/Report-only: Select whether to force policies in this baseline be applied to the account or not.
-
Add/Overwrite: Select whether to add the selected accounts to the existing assignments or overwrite the existing assignments.
-
-
Once you have entered the desired information, select Confirm.
-
Review all the accounts and select Apply and Close.
-
When prompted, select Confirm.
Note
The assignments of accounts that come from a Solution Baseline are listed as Inherited. They are read-only, they show the Solution Baseline that they come from, and you cannot remove them here.
Nerdio Manager allows you to manage policy baselines.
To manage policy baselines:
-
In Nerdio Manager, at the MSP level, navigate to Baselines > Policy Baselines.
-
Locate the policy baseline you wish to work with.
-
From the action menu, select any of the following options:
-
Assign: Manage the accounts that are assigned to the policy baseline.
-
Edit policies: Manage the policies that are assigned to the policy baseline.
-
Re-publish: Republish the assigned policies to the assigned accounts.
-
Clone: Clone the policy baseline.
-
Edit: Edit the policy baseline.
-
Remove: Remove the policy baseline.
-
Status: View the status of the policy baseline.
-
Comments (0 comments)