how-to · machine Open this in the console

Put a machine in a role.

Work › actions, identity. A role is a group, the same kind of path as a site. The first word is the dimension.

A machine can sit in a site and a role at once. Ticking role/DC does not remove a site you add later.

Groups start empty

Open Spare laptop, then work › actions, and open identity. Groups is the box under tags. Spare laptop has none, which is why Fleet pins it under Onboarding. Accounts server is already role/DC, so that path is in the list. Lab host is role/hypervisor.

Identity panel on Spare laptop with an empty groups box — Spare laptop. No group chip. Save has not been pressed.

Pick role / DC

Open the list and pick DC under role. A chip says role › DC, and that row shows a tick and 1 — Accounts server, the machine already in that role. Spare laptop is not in the 1 until you save. Press save at the bottom of actions and an alert rule or a roll-out on role/DC then covers it. A site chip can sit beside this one. This shot stops before save, so the machine stays in Onboarding. The last step removes the chip.

Identity panel with a role DC group chip and save not pressed — role › DC is a chip. Save has not been pressed.

A site is Put a machine in a site. A plain word such as vip is not a role — Mark a machine VIP. An alert rule on that role is Limit an alert rule to one role. Onboarding is where a machine with no group sits — See a machine that is not in a group.