Home > Enterprise Mobility Management > Tagging > Using Tags in Systems Manager

Using Tags in Systems Manager

Tags are a powerful tool that can be used to apply profiles, deploy apps, and use with other functions in relation to groups of client devices. This article will cover to how to add and remove tags in Systems Manager under various circumstances.

Types of tags

Before applying tags, this section will provide a brief overview of the different types of tags available. Not all types of tags will be available for selection under all circumstances. If a tag is available and exists already, it will be presented within the appropriate field. 

Note: All admin generated tags must be a contiguous set of characters and not contain spaces. Ex. "example tag" is not acceptable and would be treated as two tags, while "example_tag" would be treated as a single tag.

 

Manual - Simple admin generated tags. Will appear in most lists as simply "Tags". Must be manually added/removed and are always active.

 

Device type - Automatically assigned to devices based on their Operating System (OS) type. Listed under "Auto tags" on client pages.

 

Schedule - Only active during scheduled periods. Also known as time based tags. Configured under Configure > General. Listed under "Auto tags" on client pages.

 

Geofencing - Automatically assigned to relevant devices to indicate whether they are within a designated physical boundary, such as a campus. Configured under Configure  > Geofencing. For more information, refer to the article on Geofencing.

 

Security policy - Automatically assigned to devices based on their compliance (or lack thereof) with configured security policies. Configured under Configure > Policies. For more information, refer to the article on the MDM security policies.

Scope definitions

Scope is used by various features in Systems Manager to determine where a feature or setting should be applied. It combines an operator and then tags relating to that operator. Settings/features can only be pushed to supported devices, even if an unsupported devices is within scope. The potential scope operators are:

All devices - The setting/feature will be applied to all supported devices.

 

with ANY of the following tags - Requires at least one tag. Supported devices matching 1 or more of the tags listed will receive the feature/setting. If 3 tags are defined, clients with 1 or more of those tags will receive the feature/setting.

 

with ALL of the following tags - Requires at least one tag. Supported devices matching all of the tags listed will receive the feature/setting. If 3 tags are defined, clients with all 3 tags will receive the feature/setting.

 

WITHOUT ANY of the following tags - Requires at least one tag. Supported devices that do not have any one or more of the tags listed will receive the feature/setting.   If 3 tags are defined, clients that have 2 or less of them will receive the feature/setting.

 

WITHOUT ALL of the following tags - Requires at least one tag. Supported devices that do not have any of the tags listed will receive the feature/setting. If 3 tags are defined, clients that have 0 of them will receive the feature/setting.

 

Modifying Client Tags

Client devices are tagged from the Monitor > Clients page, and owners from the Configure > Owners page. In both cases, multiple clients/owners can have tags added/removed simultaneously.

  1. Click the checkbox next the owner(s)/client(s) to add/remove tags on.
  2. Click Tag.

In the box that appears, options will be available to add or remove tags. 

Creating a New Tag

To create and add a new tag:

  1. Click in the Add box.
  2. Enter the name of the tag desired.
    Remember that this must not contain spaces.
  3. Click Add option. The tag will appear in the Add box with a bubble around it.
  4. Repeat steps 1-3 as needed. Then click Add.

Adding an Existing Tag

To add an existing tag:

  1. Click in the Add box.
  2. Select the tag from the list suggested. Begin typing to locate a tag within the list.
  3. Once selected, the tag will appear in the Add box with a bubble around it.
  4. Repeat steps 1-3 as needed. Then click Add.

Removing a Tag

To remove an existing tag:

  1. Click in the Remove box.
  2. Select the tag from the list. 
  3. Repeat steps 1-2 as needed. Then click Remove.

Modifying a Specific Client's Tag

Clients can also have tags added and removed from the client details page:

  1. From Monitor > Clients, click on the name of the client to update.
  2. Click Edit details.
  3. Click in Tags.
  4. To remove a tag, click the X in the bubble with it.
    To add an existing tag, select it from the list.
    To add a new tag, type the name of the tag (must not have spaces) and click Add option.
  5. Repeat steps 3-4 as needed to add/remove all desired tags.
  6. Click Save.

Note: Tags will continue to be listed as an option for addition until they are no longer in use anywhere.

Modifying Tags on Apps, Profiles, and Geofences

Scoping is handled very similarly for apps, profiles, and geofences. Begin by navigating to the appropriate page as indicated.

  • Apps: MDM > Apps
  • Profiles: MDM > Profiles
  • Geofences:  Configure > Geofencing

 

Some types of tags can only be used with Systems Manager Enterprise, and may not be available for use with Legacy SM.

To modify the scope for multiple apps/profiles/geofences:

  1. Click the checkbox next to the  apps/profiles/geofences to modify.
  2. Click Edit Scope.

 

In the box that appears, options will be available to define a default scope (only used if the tag being added is its first) ,add or remove tags, and update the scope definition.

To define a default scope, that will be applied only if the tag added to an app/profile/geofence is its first:

  1. Select the desired option under Default scope.
  2. Proceed below and follow the instructions for adding a tag.
    Note: If an app/profile/geofence already has one or more tags, this will not have an effect.

Creating a New Tag

To create and add a new tag:

  1. Click in the Add box.
  2. Enter the name of the tag desired.
    Remember that this must not contain spaces.
  3. Click Add option. The tag will appear in the Add box with a bubble around it.
  4. Repeat steps 1-3 as needed. Then click Add.

Adding an Existing Tag

To add an existing tag:

  1. Click in the Add box.
  2. Select the tag from the list suggested. Begin typing to locate a tag within the list.
  3. Once selected, the tag will appear in the Add box with a bubble around it.
  4. Repeat steps 1-3 as needed. Then click Add.

Removing an Existing Tag

To remove an existing tag:

  1. Click in the Remove box.
  2. Select the tag from the list. 
  3. Repeat steps 1-2 as needed. Then click Remove.

Managing Scopes

To update the scope definition:

  1. Selected the desired option under Update scope.
    Note: If "All devices" is chosen, any existing tags will be removed
  2. Click Update.

 

The scope of an app/profile/geofence can also be updated from the  app/profile/geofence  details page. From the appropriate page (as indicated at the beginning of this section), click on the name of the  app/profile/geofence  to modify.

  1. Under Scope, select the desired behavior.
  2. If the desired scoping option requires tags, continue with the following steps. If "All devices" was chosen, click Save Changes.
  3. Click in the Tags box.
  4. To remove a tag, click the X in the bubble with it.
    To add an existing tag, select it from the list.
    To add a new tag, type the name of the tag (must not have spaces) and click Add option.
  5. Repeat steps 3-4 as needed to add/remove all desired tags.
  6. Click Save Changes.

Checking tag status on clients

At any time, the tags currently active on a device can be seen by navigating to the Monitor > Clients page and clicking on the client in question.

 

Manual tags will appear under the Client details section as Tags. Click any of these tags to get a list of clients with that tag. 

Schedule and device tags will appear under the Client details section as Auto tags.

 

Geofencing and security policy tags will appear under Security as their own respective fields. 

You must to post a comment.
Last modified
16:00, 31 Aug 2015

Tags

Classifications

This page has no classifications.

Article ID

ID: 1271

Contact Support

Most questions can be answered by reviewing our documentation, but if you need more help, Cisco Meraki Support is ready to work with you.

Open a Case