Skip to main content

Creating Smart Device Groups in Swif

Smart Device Groups help you efficiently manage your devices by dynamically grouping them based on predefined conditions. Automatically categorize devices to streamline policy deployment, software installations, and compliance monitoring.


Benefits of Smart Device Groups

  • Automated Management: Devices automatically join or leave groups as they meet or fail to meet the defined criteria.

  • Simplified Administration: Quickly deploy policies, software, and compliance rules to specific groups.

  • Flexible and Scalable: Easily manage devices at any scale by creating customized conditions.


Creating a Smart Device Group

  1. Log into your Swif Console.

  2. Navigate to Device Management > Device Groups.

  3. Click Create Group, and select Smart Group.

  4. Enter a descriptive Name for your group and add an optional Description.

  5. Define group membership criteria by specifying one or more conditions. Common examples include:

    • Operating System (e.g., macOS, Windows, Linux)

    • OS Version (e.g., less than, equal to, greater than a specific version)

    • Device Name

    • Installed Software

    • Enrollment Status

    • Ownership Type (e.g., BYOD, Corporate)

    • Last Check-in Date

    • Device Inactivity ≥ N days

  6. Click Save to create your Smart Device Group.


Example Use Cases

  • Outdated macOS Devices:

    • OS: macOS

    • OS Version: < 14.0

  • Devices Missing Antivirus:

    • Installed Software: Does NOT include Antivirus App

  • Corporate-owned Windows Devices:

    • Platform: Windows

    • Ownership Type: Corporate


Managing Smart Device Groups

  • Editing Groups: Click on an existing group, update your criteria, and save changes.

  • Deleting Groups: Select a group and click Delete. Devices are unaffected; only the grouping is removed.

Here are small, scannable sections you can append to the bottom of the article:


Advanced Smart Device Group Capabilities

Use Device Specs and Extension Attributes

You can create more advanced smart device groups using detailed device properties and custom attributes.

This allows you to:

  • Target devices based on hardware, OS version, or custom signals

  • Build dynamic groups for compliance, testing, or staged rollouts

  • Use extension attributes for organization-specific logic


Automate Account Provisioning by Device Group

Smart device groups can be used to automatically provision accounts when devices enter a group.

This helps:

  • Ensure users get access to required systems immediately

  • Reduce manual onboarding steps

  • Maintain consistency across teams


Sync User Account Permissions by Device Group

You can also use device groups to enforce and synchronize user permissions.

This ensures:

  • Users have the correct access levels based on their device group

  • Permissions stay aligned as devices move between groups

  • Reduced risk of over-permissioned accounts


Automatically Rename Devices by Smart Group

You can automatically rename devices based on the smart group they belong to.

This helps:

  • Standardize device naming conventions across your organization

  • Improve visibility and organization in the dashboard

  • Quickly identify device ownership, role, or department


Automate Command Execution on Device Join

You can configure specific commands or scripts to execute automatically when a device joins a Smart Device Group. This "Run Once" capability ensures that new devices are immediately operational with the necessary configurations, software, or security scripts without manual intervention.

How to Configure Run-on-Join Commands

  • During Group Creation: In the Select Commands step (Step 5), use the Run on device join column to toggle which commands should trigger automatically.

  • For Existing Groups: Navigate to Device Group Details > Commands tab. You can update the Run on device join settings for any assigned command.

Key Behaviors and Guardrails

  • Execution Frequency: Commands are triggered once per device per group. If a device leaves and later rejoins the same group, the "Run Once" logic will re-evaluate based on the group's current configuration.

  • Sequential Execution: If multiple commands are selected, they will execute in the order they appear in the configuration array.

  • Edge Case Handling:

    • Device Moves: When a device moves from Group A to Group B, any commands configured for Group B will trigger upon entry.

    • Existing Members: When you enable this feature for an existing group, the UI provides clear indicators on how the commands apply to current members.

  • Visibility and Audit: Admins can monitor execution status through the Device Status/History view. The system surfaces success, partial failure, and error states consistent with standard command history patterns.

Common Use Cases

  • Initial Provisioning: Automatically run a script to clear local caches or set specific environment variables as soon as a device is enrolled and categorized.

  • Security Hardening: Trigger a security scan or install a specific monitoring agent the moment a device enters a high-security group.

  • Software Deployment: Ensure that department-specific tools are installed immediately when a device is assigned to a functional group (e.g., Engineering or Sales).


Why This Matters

Smart device groups are not just for organization—they are a core mechanism for automating security, access control, and compliance workflows at scale.

By combining grouping logic with automation:

  • Policies are applied consistently

  • Access is controlled dynamically

  • Compliance is enforced continuously

This aligns with Swif’s approach to centralized, automated device management and compliance enforcement


FAQs

  • Can a device be part of multiple Smart Device Groups?
    Yes. Devices join every Smart Group whose criteria they meet.

  • How frequently are Smart Groups updated?
    Swif updates Smart Group memberships dynamically as device conditions change (e.g., after a check-in).

  • What happens if a Smart Group is deleted?
    Deleting a Smart Group only removes the group itself. Devices remain unaffected and continue to be managed individually or by other existing groups.

  • How Policy, Software, and Command Assignments Are Retried
    If a policy, software, or command assignment to a device fails, Swif will automatically retry the assignment every 10 minutes, up to 3 times. If the assignment is still unsuccessful after 3 retries, it will not be retried further. This ensures that temporary issues are handled automatically, while preventing excessive system load.


Need Further Assistance?

Visit our Swif Help Center or contact Swif Support for additional help.


Did this answer your question?