Skip to content

Organizational Units

An Organizational Unit (OU) is a logical grouping of devices that share the same security policy. By assigning templates to an OU, every device in that OU automatically inherits those templates’ snippets. Instead of configuring each device individually, you define policies at the OU level and any device placed in that OU gets the full set of rules.

A device can belong to multiple OUs simultaneously. When it does, it receives the combined set of snippets from all templates across all its OUs (see Policy Chain for how the final configuration is assembled).

Each organization also has a default OU that serves as a catch-all for newly approved devices that are not explicitly assigned elsewhere.

List Organizational Units

Section titled “List Organizational Units”

Open Organizational Units in the sidebar. Each card shows an OU’s name, status, device count and creation date; + Create OU adds one. See OUs list.

Describe an Organizational Unit

Section titled “Describe an Organizational Unit”

Click an OU’s card. Its page shows the OU’s devices, its assigned templates and its variable overrides, and Sync OU pushes the current configuration to every device in it. See OU detail.

List Devices in an Organizational Unit

Section titled “List Devices in an Organizational Unit”

Open the OU’s page: Assigned Devices lists every device in it. + Add Device adds one, and the × on a device’s chip takes it out of the OU without removing the device.