Skip to main content
Cisco Meraki Documentation

Tags Management Page for Systems Manager

Tags are a critical component in Meraki Systems Manager, as they are used to logically group devices together and associate them with applications and profiles. The tags management page allows Dashboard admins to holistically create, manage, and delete all their Systems Manager tags on one page. 

Note: For information related to different types of tags, refer to this article. For more information on scoping and configuration, refer to this article.

Adding New Tags

Manual Tags, Security Policy Tags, and Schedule Tags can all be created through Systems manager > Tags > + Add new. At the moment, Geofencing tags and Owner tags still need to be created and defined in Systems manager > Geofencing and Systems manager > Owners respectively.

Screen Shot 2018-07-16 at 11.09.16 AM.png

Manual Tag

Simple admin generated tags are applied statically to devices. They must be manually added/removed, and are always active.

To create a new manual tag:

  1. Navigate to Systems manager > Tags > + Add new
  2. Select Manual Tag.
  3. Enter a tag name without spaces.
  4. Select devices to scope the tag.


Manual Tag.PNG

Security Policy Tag

Security policies in Systems Manager (SM) networks can be used to monitor a number of security-related items on enrolled clients. When creating a security policy tag, there is the option to scope a policy for a specific platform, or apply one to all devices. 

To create a new security policy tag:

  1. Navigate to Systems manager > Tags > + Add new
  2. Select Security Policy Tag.
  3. Choose the corresponding platform settings.
    • Selecting a platform will only display policies related that device type. See below screenshots for examples.
    • Selecting Advanced will display all available security policy checks, and will generate security compliance tags for all devices. We recommend using platform-specific tags when possible, as compliance may be inconsistent if desktop policies are scoped for mobile devices, and vice versa.

  Screen Shot 2018-07-16 at 12.12.27 PM.png


The Advanced option, below, shows all available security policies, and will apply to all enrolled devices.

Advanced Security Policy.PNG

Below is an example of a platform-specific security policy tag. In this case, only iOS compatible settings are available, and the policy scopes only to iOS devices.

iOS Security Policy.png


Schedule Tag

Tags can also be scheduled to give control of when profiles are applied or when applications need to be pushed down. To create a schedule tag:

  1. Navigate to Systems manager > Tags > + Add new
  2. Select Schedule Tag.
  3. Create New Schedule.
  4. Input Schedule name.
  5. Select a specific day to create/edit timeframes. Drag the slider to expand or decrease the time.

List of Schedule Tag.PNGNew Schedule Tag.PNG

Managing and Deleting Tags

The tags management page allows Dashboard admins to view all tags in the organization, edit specific tags, scope devices with tags, and delete unwanted tags.

Editing Tags

Manual, security policy and schedule tags can all be edited in the tags management page. Choose the tag from the list of tags and select Edit. Renaming tags will instantly modify the tag's name on all assigned devices.

Managing Tag Scope

For Manual and Device Type tags, scoping can be done on the tag management page. 

  1. Navigate to Systems manager > Tags.
  2. Select Manual/Device tag.
  3. Navigate to Devices > Edit.
  4. Scope tag to desired devices and hit Update.

Edit Tag Scope.PNG

Deleting Tags

Deleting a tag will un-scope the tag from all the devices it is currently scoped to.

  1. Navigate to Systems manager > Tags.
  2. Select the tag and navigate to  Delete > Delete this tag.
  3. Once the tag has been marked for deletion, save changes.

Delete Tag.PNG


Adding New Target Groups


Scope Systems Manager apps and settings to frequently used combinations of tags using named Target Groups.


To create a named Target Group:  

  1. Navigate to Systems Manager > Tags 
  2. On the Target groups tab, navigate to +Add target group
  3. Name a name for the Target Group
  4. Select a type of Target group
    • Select Device Scoping to scope combinations of Manual Tags, Security Policy tags, Geofencing tags, Schedule tags or User tags.
    • Select User Scoping to scope based on Owner tags
  5. Scope tags based on preference and save the configuration


Managing Target Group Scope


To scope an app or setting to a Target Group:

  1. Navigate to the Apps (Systems Manager > Apps) or Settings (Systems Manager > Settings) pages.
  2. Select the setting you would like to scope.
  3. Scroll to Targets and toggle the Group Type to "Named".
  4. Select the desired Target Group.  Dashboard will display the individually scoped tags and devices.
  5. Save the configuration



  • Was this article helpful?