Apply a Baseline to a Tenant

    When a baseline is available, you can apply it to a tenant. You can apply multiple baselines to a single tenant and set priority levels, enabling more flexible and tailored configurations across tenants.

    Note the following:

    • A baseline with only a draft version cannot be applied to tenants.

    • If a baseline has multiple published versions, only the latest published version will be applied to tenant.

    If you are on the Baselines page, refer to the following steps to apply a baseline to a tenant:

    1. Select a baseline and click Apply to tenant. Make sure the baseline status is Active, Unused, or Retrieved with exception.

    2. In the pop-up window, tenants displayed on the Tenants page are selectable. Select a tenant.

    3. Select a matching theory method that will be used to match baseline and tenant instances during drift detection.

      • Name-based matching - Matches tenant instances against baseline standards solely based on their names.

      • Similarity-based matching - Initially attempts to match tenant instances against baseline standards by name. If an instance cannot be matched by name, similarity scores will be calculated to identify potential matches. You can manually review and map these similarity-driven instances on the Map similarity-driven instances page for further comparison.

    4. Click Apply.

    If you are on the Tenants page, refer to the following steps to apply one or multiple baselines to a tenant:

    1. Select a tenant and click Apply baseline.

    2. In the pop-up window, baselines with the Unused, Active, and Retrieved with exception status are selectable. Select one or multiple baselines, and click Apply.

    3. If multiple baselines are selected, you need to rank these baselines, so that configurations will be applied following the order to resolve conflicts.

    4. Select a matching theory method that will be used to match baseline and tenant instances during drift detection.

      • Name-based matching - Matches tenant instances against baseline standards solely based on their names.

      • Similarity-based matching - Initially attempts to match tenant instances against baseline standards by name. If an instance cannot be matched by name, similarity scores will be calculated to identify potential matches. You can manually review and map these similarity-driven instances on the Map similarity-driven instances page for further comparison.

    5. Click Apply.

    You can locate the tenant on the Tenants page and find its Status to track the progress:

    • Retrieving settings – During the process of applying a baseline to a tenant, this status appears.

    • Settings retrieval failed (clickable) – If errors occur during the process of applying a baseline to a tenant, this status will appear.

      You can click the status link and then click Export report to export the report to find more details or click Retry to try again.

    • Review deployment – When a baseline is applied to a tenant and a comparison page is generated or when the baseline of the tenant has been changed and a comparison page is generated, this status will appear.

      At this time, the comparison page is created. You can click the status link to open the comparison page where you can review discrepancies between the tenant’s current configurations and the applied baseline, make updates, and deploy the reviewed configurations to the tenant. For detailed instructions, refer to Review Deployment.