Create an Asset Group

Asset groups let you organize assets into logical collections. Groups are used for bulk policy assignment, scoped reporting, and structured asset management.

INFO

Requires Posture Manager role or higher.

Why Use Asset Groups?

Asset groups solve several common operational needs:

• Policy assignment at scale: Assign a policy to a group and it automatically applies to every asset in that group. When you add or remove assets from the group, the policy scope updates accordingly.
• Organizational structure: Mirror your infrastructure topology (by region, team, function, or environment) so teams can focus on the assets they own.
• Focused reporting: View posture scores, findings, and compliance breakdowns scoped to a specific group rather than the entire inventory.
• Hierarchical nesting: Groups support parent-child relationships, allowing you to build a tree structure (e.g., "EMEA" > "Germany" > "Frankfurt DC").

Use Cases

Group Name	Purpose	Example Assets
Production Servers	All production compute assets	prod-web-01, prod-api-02, prod-db-master
PCI Scope	Assets in scope for PCI DSS compliance	Payment processing servers, card data databases
Team Platform	Assets owned by the platform engineering team	Kubernetes clusters, CI/CD infrastructure, container registries
AWS US-East	All assets discovered from the US-East AWS region	EC2 instances, RDS databases, S3 buckets in us-east-1
Critical Infrastructure	High and critical criticality assets	Domain controllers, key vaults, production databases

Step-by-Step

1. Open the Create Group Form

Navigate to Assets > Asset Groups in the sidebar and click the Create Group button.

2. Enter Group Name

Provide a Name for the group. Choose a name that clearly communicates the group's purpose:

• Production Databases
• EMEA Region
• SOC2 Scope

WARNING

The name field is required. The form will not submit without it.

3. Add a Description (Optional)

Enter a Description to explain the group's purpose, membership criteria, or any relevant context. This helps team members understand why the group exists and what assets belong in it.

4. Select a Parent Group (Optional)

If you want this group to be a child of an existing group, select the Parent Group from the dropdown. This creates a hierarchical relationship:

EMEA (parent)
  ├── Germany (child)
  │   ├── Frankfurt DC (grandchild)
  │   └── Munich Office (grandchild)
  └── UK (child)
      └── London DC (grandchild)

Leave the parent group empty to create a root-level group.

TIP

Hierarchical groups help you build organizational structures, but policies are applied per group -- not inherited from parent groups. If you assign a policy to "EMEA", it does not automatically apply to "Germany" or "Frankfurt DC". Assign policies at each level as needed.

5. Add Tags (Optional)

Add Tags for additional categorization. Type a tag name and press comma to add it. Tags are free-form and can be used for filtering and organization (e.g., compliance, team-security, region-eu).

6. Set Active Status

The Active toggle controls whether the group is operational. Active groups are included in policy evaluations and reporting. Inactive groups are retained but excluded from active operations.

7. Save

Click Save to create the group. You will be redirected to the group detail page where you can add assets.

Adding Assets to the Group

After creating the group, add assets in one of two ways:

From the Group Detail Page

1. Open the group detail page.
2. Navigate to the Assets tab.
3. Click Add Assets.
4. Search for and select the assets you want to add.
5. Confirm the selection.

From the Asset Edit Form

1. Open the edit form for an individual asset.
2. Select the group from the Group dropdown.
3. Click Update.

INFO

An asset can belong to one group at a time. Assigning an asset to a new group removes it from its current group.

After Creation

Once the group is created and populated with assets, you can:

• Assign policies to the group for bulk evaluation
• View the group dashboard for aggregated posture scores
• Create sub-groups by setting this group as the parent of new groups
• Monitor findings scoped to the group's assets

Related

• Manage Asset Groups -- View, edit, and delete groups
• Understanding Assets -- Asset concepts and lifecycle
• Manage Assets -- Search and filter individual assets