Lesson 1 (Optional): Creating computer groups in the BigFix console

Available from 9.2.2.

You can divide computers in your infrastructure into BigFix® groups. They are used to manage the infrastructure, and run fixlets against selected computers. They are not automatically copied to License Metric Tool. However, they can be used as the basis for creating computer groups that define the scope of reports in License Metric Tool. If each computer group is managed by a different person, you can additionally create separate sites and operators. However, these steps are optional.

About this task

  • This lesson is optional. If you do not want to create separate scan schedules for each computer group, skip this lesson and proceed to the next one. If you want to create separate scan schedules, but a single user manages all computer groups, you can skip creating dedicated sites and operators.
  • This lesson is based on the example of creating computer groups that reflect organizational business units: HR and IT.

Procedure

  1. Log in to the BigFix console.
  2. Optional: Create a custom site that is dedicated to the HR department.
    1. In the top navigation bar, click Tools > Create Custom Site.
    2. Provide the name of the custom site. For example, HR. Then, click OK.
    3. Optional: On the Details tab, provide the description of the site.
    4. On the Computer Subscriptions tab, select Computers which match the condition below. Specify the condition that must be met by the computers that belong to this group.
      For example, choose all computers whose subnet address contains a particular string.
    5. Click Save Changes.
  3. Optional: Create a custom site that is dedicated to the IT department.
  4. Create a computer group that contains all computers that are used by the HR department.
    1. In the top navigation bar, click Tools > Create New Automatic Computer Group.
    2. Provide the name of the computer group. For example, HR.
    3. Select the site and domain in which you want to create the computer group. If you created a custom site in step 2, select that site.
    4. Specify criteria that must be met by the computers that belong to this group. If you created a custom site in step 2, choose the same criteria. Otherwise, choose criteria that meet your needs. For example, add all computers whose DNS name contains .us.
    5. To save the group, click Create.
  5. Create a computer group for the IT department.
  6. Optional: Create a BigFix operator that is dedicated to the HR department. The operator has access only to computers on which the software that is used in this department is installed.
    1. In the top navigation bar, click Tools > Create Operator.
    2. Provide the user name. For example, HR_user.
    3. Provide a password and confirm it. Then, click OK.
    4. On the Sites tab, click Assign Site, and select the site. If you created a custom site in step 2, select that site. Then, click Add.
    5. To make operator the owner of the site, select the site, and click Owner.
    6. Ensure that the user does not have access to the sites dedicated to other departments. To remove access to a site, select the site and click Remove Site. Each user should have access to his dedicated site, the BES Support site, and the License Metric Tool site.
      Tip: If you cannot remove a site from the list of sites to which an operator has access, the site might have the read permission granted globally. To change the setting, open the site, go to the Operator Permissions tab, and clear the Grant read permission globally check box. Then, click Save Changes.
    7. On the Computer Assignments tab, click Add. Expand the All Computers section. Then, expand the by Group section, and select the computer group that is dedicated to the HR department. Then, click OK.
    8. Click Save Changes.
  7. Optional: Create a BigFix operator for the IT department.
  8. For every computer group, schedule scans and uploads of scan results. For more information, see: Initiating software scans (BigFix scenario) and Uploading software scan results (BigFix scenario).

Results

You created computer groups in the BigFix console. To generate audit snapshots for a subset of computers, create analogical computer groups in License Metric Tool.