Creating Accounts, Sites and Groups

Creating Accounts, Sites and Groups

Creating an Account

Global Administrator Access: How to Check and Create Accounts

In some deployments, end users don’t have Global Admin access, and accounts are managed by SentinelOne. To check if you have Global Admin access, follow these steps:
  1. Check Your Username: If "(Admin)" appears next to your username, you have Admin access.
  2. Check the Hierarchy menu: Open the side menu and choose Hierarchy. If you see the Global option, it confirms your Global Admin access.

Creating a New Account

To create a new account, select the + icon next to Global in the Hierarchy menu, or go to Settings (side menu, bottom) > Accounts > Create Account.
Steps:
  1. Account Name: Choose a unique name for the account.
  2. Account Settings:
    1. Trial or Paid: Select whether the account is a trial or a paid version.
    2. Expiration Date: Set the expiration date or select Non-Expire if you don't want an expiration.
      1. Warning: ACCOUNTS CANNOT BE DELETED, so ensure all details are correct.
    3. Select SKUs for Agents:
      1. Complete
      2. Control
      3. Core
    4. Surfaces:
      1. Pick the total number of Agents.
      2. You can also choose Unlimited Licenses.
    5. Add-ons: Add any additional features or tools.
  3. Policy: Set the policy for the account.
  4. Summary: Review all the details before finalizing.

Creating a Site

You need access at the Account level to create sites. Ensure you're in the correct account where you want to add the site.
To create a new site, click the + button next to the account (side menu) or go to Settings > Site > New Site.
Steps:
  1. Site Name: Choose a unique name for the site.
  2. Site Settings:
    1. Trial or Paid: Select the type of site.
    2. Expiration Date: Set the expiration date (it cannot exceed the account's expiration date) or choose non-expire.
    3. SKU: Choose the same SKU as in the Account.
    4. Total Agents: Specify the number of agents or choose Unlimited (limited to the number of agents in the account).
    5. Add-ons: Add any additional features.
  3. Policies: Set the policies for the site.
  4. Summary: Review all details before finalizing.

Creating Manual Groups

When you create a Site, a default Group is automatically created. While you can rename this Group, it cannot be deleted. You can also create additional Groups to customize policies, blacklists, and exclusions for specific endpoints.
Notes
To create a Group, you must have at least Site-level access.
Locate the Site: click on the Site where you want to create Groups. If it’s your first time, you’ll see the default Group.
To create a new Group, click the + button or select New Group on the dropdown Group menu:
Steps:
  1. Enter a Name and Description for the Group.
  2. Choose Group Type: Select Manual Group as the type.
  3. Select a Policy: Choose the policy for the group, then click the Create Group button at the bottom.
  4. Assign Endpoints: On the summary page, either select the endpoints you want to assign to the group or click Done to finish.
After creating the group, you'll be automatically directed to it. To add devices, navigate back to the Site where the group is located:
Check the boxes next to the devices you want to add to the Group:
To Move an Endpoint to a Different Group:
  1. Navigate to Group.
  2. Select Move to Group.
  3. Choose the Group you want to move the endpoint to.
  4. Click Move.
Deleting a Group
Go to Group > Delete Group.

Creating Pinned Groups

Pinned Groups are useful for keeping a specific set of endpoints in a Group, even if they match a filter.
To create a Pinned group, click the + button or go to Group > New Group:
Steps:
  1. Group Name: Enter the name for the new Pinned Group.
  2. Select Group Type: Choose Pinned.
  3. Select Group Policies: Choose the appropriate policies for the group.
  4. Summary: Review your selections and click Next.
After creation, you will be automatically directed to the new group. You can add endpoints to this group just like in the previous unit.

Deleting a Group
Go to Group > Delete Group. Deleting a Group will not remove the endpoints; instead, they will be returned to the default Group.

Creating Dynamic Groups

Endpoint Filters
To view the available filters, go to Endpoints and click on Select filters…
By selecting Endpoint Name, you can explore various endpoint-related items. 
Additionally, you can filter by Tags, OS, Version, Type, Domain, Memory, and more.
If you go to the right and click on View More Filters, you’ll get this more complete menu:
An easy filter you can create is by selecting, for example, Windows, and then clicking Save Filter.
Write a name:
Notes
You can also create filters at the Account level, but for Dynamic Groups you must create them at the Site level. Otherwise, they will not work and will cause an error.
Steps:
  1. Navigate to a Site.
  2. Click the + button and select New Group.
  3. Enter a Group Name.
  4. Set Type to Dynamic.
  5. Choose from the following options: 
    1. Save and use the current query: Uses the currently selected filter.
    2. Choose an existing filter set.
  6. Set Group Policy.
  7. Review the Summary and click Done.
If you create a Dynamic Group and it’s blank, the ranking system might be preventing endpoints from appearing. To access the ranking system, go to:
There, you can arrange the ranking system for groups. If an endpoint fits into two groups, it will be assigned to the highest-ranked one.
If you delete a Dynamic Group, the endpoints will move to the next group in the ranking. If all Dynamic Groups are deleted, the endpoints will go to the Default Group. However, if an endpoint was previously in a Manual Group before being assigned to a Dynamic Group, it won’t automatically return to the Manual Group—you’ll need to move it manually.

Important Points

  1. Global scope: The Global scope includes all levels of the Singularity deployment, encompassing all accounts within it.
  2. Account: An Account is a logical segment within the deployment that holds permissions to configure features for specific Sites. Accounts are useful for managing multiple organizations, such as MSSPs with several customers.
  3. Site: A Site is a segment within an Account, with its own settings and policies, which can be either specific to the Site or inherited from the parent Account. A Site can belong to only one Account and contains one or more Groups, which are logical groupings of SentinelOne Agents.
  4. Permissions: Global Administrator access is required to create Accounts.
  5. SentinelOne Agents: Agents are linked to Sites, and each Agent can only belong to one Site.
  6. Endpoints - Manual Groups: Endpoints are manually placed in a Manual Group. If an endpoint matches a Dynamic Group filter, it automatically moves from the Manual Group to the Dynamic Group.
  7. Endpoints - Dynamic Groups: Endpoints automatically join a Dynamic Group if they match the filter criteria you define, except for endpoints in Pinned Groups.
  8. Endpoints - Pinned Groups: Endpoints placed in a Pinned Group are fixed there and do not automatically move to other Groups.

    • Related Articles

    • Creating and Managing User Groups

      Grouping users is helpful for managing a large number of users - typically by geography, department, or role. Creating User Groups Navigate to User Management > User Groups. Click ✚ Create Group button. In the Add group screen, fill in the group ...

    • Creating Users

      Profiles define how users access views and data, as well as what actions they can perform within the platform. When creating a user, you assign a profile to them. After logging into Sepio for the first time, you can create a user profile for each new ...

    • URL Exception List and Certificate Verification Sites

      Purpose This tip provides a list of web addresses that may be required to download catalogs, updates, or content when using Lenovo Patch. Description URLs for Lenovo Patch functionality and to access content from the Lenovo Updates Catalog. ...

    • Creating the Automation Scheduler Task to Synchronize Applications - Intune

      Purpose Guide customers through the process of creating an Automation Scheduler task to publish selected application installers to Intune. Process In the Configuration Manager console, navigate to Software Library > Overview > Software Updates > ...

    • Managing Devices within TSFA

      To access devices within your organization's portal, navigate to Devices Manager > Devices. Device Table The Device Table provides regular information pertaining to each device, such as Device Name and Type, Serial Number, License, etc. It also ...