how-to · A machine Open this in the console

Put a machine in a role.

Work › actions, identity. A role is a group, the same kind of path as a site. The first word is the dimension.

A machine can sit in a site and a role at once. Ticking role/DC does not remove a site you add later.
01

Groups start empty

Open Spare laptop, then work › actions, and open identity. Groups is the box under tags. Spare laptop has none, which is why Fleet pins it under Onboarding. Accounts server is already role/DC, so that path is in the list. Lab host is role/hypervisor.

Identity panel on Spare laptop with an empty groups box Identity panel on Spare laptop with an empty groups box
Spare laptop. No group chip. Save has not been pressed.
02

Pick role / DC

Open the list and pick DC under role. A chip says role › DC, and that row shows a tick and 1 — Accounts server, the machine already in that role. Spare laptop is not in the 1 until you save. Press save at the bottom of actions and an alert rule or a roll-out on role/DC then covers it. A site chip can sit beside this one. This shot stops before save, so the machine stays in Onboarding. The last step removes the chip.

Identity panel with a role DC group chip and save not pressed Identity panel with a role DC group chip and save not pressed
role › DC is a chip. Save has not been pressed.

A site is Put a machine in a site. A plain word such as vip is not a role — Mark a machine VIP. An alert rule on that role is Limit an alert rule to one role. Onboarding is where a machine with no group sits — See a machine that is not in a group.