Smart Device Groups help you efficiently manage your devices by dynamically grouping them based on predefined conditions. Automatically categorize devices to streamline policy deployment, software installations, and compliance monitoring.
Benefits of Smart Device Groups
Automated Management: Devices automatically join or leave groups as they meet or fail to meet the defined criteria.
Simplified Administration: Quickly deploy policies, software, and compliance rules to specific groups.
Flexible and Scalable: Easily manage devices at any scale by creating customized conditions.
Creating a Smart Device Group
Log into your Swif Console.
Navigate to Device Management > Device Groups.
Click Create Group, and select Smart Group.
Enter a descriptive Name for your group and add an optional Description.
Define group membership criteria by specifying one or more conditions. Common examples include:
Operating System (e.g., macOS, Windows, Linux)
OS Version (e.g., less than, equal to, greater than a specific version)
Device Name
Installed Software
Enrollment Status
Ownership Type (e.g., BYOD, Corporate)
Last Check-in Date
Device Inactivity ≥ N days
Click Save to create your Smart Device Group.
Example Use Cases
Outdated macOS Devices:
OS:
macOSOS Version:
< 14.0
Devices Missing Antivirus:
Installed Software: Does NOT include
Antivirus App
Corporate-owned Windows Devices:
Platform:
WindowsOwnership Type:
Corporate
Managing Smart Device Groups
Editing Groups: Click on an existing group, update your criteria, and save changes.
Deleting Groups: Select a group and click Delete. Devices are unaffected; only the grouping is removed.
Here are small, scannable sections you can append to the bottom of the article:
Advanced Smart Device Group Capabilities
Use Device Specs and Extension Attributes
You can create more advanced smart device groups using detailed device properties and custom attributes.
This allows you to:
Target devices based on hardware, OS version, or custom signals
Build dynamic groups for compliance, testing, or staged rollouts
Use extension attributes for organization-specific logic
Automate Account Provisioning by Device Group
Smart device groups can be used to automatically provision accounts when devices enter a group.
This helps:
Ensure users get access to required systems immediately
Reduce manual onboarding steps
Maintain consistency across teams
👉 Learn more: Automate Account Provisioning by Device Group
Sync User Account Permissions by Device Group
You can also use device groups to enforce and synchronize user permissions.
This ensures:
Users have the correct access levels based on their device group
Permissions stay aligned as devices move between groups
Reduced risk of over-permissioned accounts
👉 Learn more: User Account Permission Sync at Device Group
Automatically Rename Devices by Smart Group
You can automatically rename devices based on the smart group they belong to.
This helps:
Standardize device naming conventions across your organization
Improve visibility and organization in the dashboard
Quickly identify device ownership, role, or department
👉 Learn more: Device Name Auto‑Renaming for Smart Groups
Automate Command Execution on Device Join
You can configure specific commands or scripts to execute automatically when a device joins a Smart Device Group. This "Run Once" capability ensures that new devices are immediately operational with the necessary configurations, software, or security scripts without manual intervention.
How to Configure Run-on-Join Commands
During Group Creation: In the Select Commands step (Step 5), use the Run on device join column to toggle which commands should trigger automatically.
For Existing Groups: Navigate to Device Group Details > Commands tab. You can update the Run on device join settings for any assigned command.
Key Behaviors and Guardrails
Execution Frequency: Commands are triggered once per device per group. If a device leaves and later rejoins the same group, the "Run Once" logic will re-evaluate based on the group's current configuration.
Sequential Execution: If multiple commands are selected, they will execute in the order they appear in the configuration array.
Edge Case Handling:
Device Moves: When a device moves from Group A to Group B, any commands configured for Group B will trigger upon entry.
Existing Members: When you enable this feature for an existing group, the UI provides clear indicators on how the commands apply to current members.
Visibility and Audit: Admins can monitor execution status through the Device Status/History view. The system surfaces success, partial failure, and error states consistent with standard command history patterns.
Common Use Cases
Initial Provisioning: Automatically run a script to clear local caches or set specific environment variables as soon as a device is enrolled and categorized.
Security Hardening: Trigger a security scan or install a specific monitoring agent the moment a device enters a high-security group.
Software Deployment: Ensure that department-specific tools are installed immediately when a device is assigned to a functional group (e.g., Engineering or Sales).
Why This Matters
Smart device groups are not just for organization—they are a core mechanism for automating security, access control, and compliance workflows at scale.
By combining grouping logic with automation:
Policies are applied consistently
Access is controlled dynamically
Compliance is enforced continuously
This aligns with Swif’s approach to centralized, automated device management and compliance enforcement
FAQs
Can a device be part of multiple Smart Device Groups?
Yes. Devices join every Smart Group whose criteria they meet.How frequently are Smart Groups updated?
Swif updates Smart Group memberships dynamically as device conditions change (e.g., after a check-in).What happens if a Smart Group is deleted?
Deleting a Smart Group only removes the group itself. Devices remain unaffected and continue to be managed individually or by other existing groups.How Policy, Software, and Command Assignments Are Retried
If a policy, software, or command assignment to a device fails, Swif will automatically retry the assignment every 10 minutes, up to 3 times. If the assignment is still unsuccessful after 3 retries, it will not be retried further. This ensures that temporary issues are handled automatically, while preventing excessive system load.
Need Further Assistance?
Visit our Swif Help Center or contact Swif Support for additional help.
