Administration Guide

How to create an audit schedule

This guide shows you how to create an Audit schedule that runs a device audit on a recurring cadence, then how to assign it to one or more devices.

Audit schedules are cataloged separately from Scan schedules and are assigned to devices, not to Segments. A device may hold at most one Audit schedule at a time.

Prerequisites

  • You are signed in as a Site Administrator. Only an administrator can create or delete schedule definitions; ordinary Site Users can only assign or unassign existing schedules to devices they have access to.
  • The devices you intend to audit are already in the inventory.

Create the schedule

  1. Navigate to Admin Center > Settings > Audit schedules.
  2. Click + New schedule.
  3. Fill in the fields:
    • Name — a human-readable label that identifies the schedule in the catalog and in the Audit log.
    • Granularity — Daily, Weekly, or Monthly. Complete the time, day-of-week, or day-of-month fields that appear for the selected cadence.
    • Cloud start window (minutes) — for cloud-hosted resources, set the allowed start window after the scheduled time. See Cloud start window.
  4. Click Save.

The new schedule appears in the Audit schedules grid with Name, Type = Audit, Created at, Last execution (empty), and Next execution.

Assign the schedule to a device

  1. Open the device you want to audit on this schedule (Inventory > Devices > (device)).
  2. Switch to the Audit tab.
  3. Click Assign schedule and pick the schedule from the catalog.

The device's Audit tab now shows the schedule name in place of UNASSIGNED.

Important: A device may hold at most one Audit schedule. Picking a different schedule on a device that already has one replaces the existing assignment; there is no second slot. If you need different cadences for different device groups, create one schedule per group and assign accordingly.

Cloud start window

For cloud-hosted resources, use Cloud start window (minutes) to allow a task to start within a window after its scheduled time. The default is 240 minutes; enter a whole number from 15 to 1440. The window controls when work may start, not how long it may run.

When an audit schedule includes both local and cloud-hosted resources, local work starts at the scheduled time and cloud work starts within the window. An all-local schedule is not delayed by this setting.

Verify

After the Next execution time has passed, an audit row appears in the Audit log with Initiator = Schedule and the schedule's name. The device's Last audit timestamp updates.

RBAC summary

  • Create / delete a schedule definition — Site Administrator only.
  • Assign / unassign a schedule to a device — Site Administrator and Site User.