Sophos Cloud Endpoint Grouping

Hi Brian,

Thanks for reaching out to the Sophos Community Forum. 

It's possible to do this on installation for device groups by using the --devicegroup switch.

If you are trying to place the user into a specific group instead, I would suggest using ADSync. Once the groups have been synchronized to Sophos Central, you can navigate to the "Groups" tab when you have the policy open to associate policies to groups as desired.

Let me know if this helps. 

I am aware of this command line switch, that is what we currently do, hence I already said that in my first post. What I want to know is if it is possible to do it after it it installed? Outside of Central

What I found out via direct testing is that you will need to disable Tamper Protection for each device that you want to move to a different group via CLI AFTER the install.  I have 600+ devices in my org that I need to move into groups, and was told to disable TP on a global level to use the CLI to move them... I wasn't about to disable TP on a global level, so am stuck using the web interface, which is clunky and slow to do for a large number of machines.

I have a feature request in to allow group modification via CSV import, so maybe, one day, it'll get easier and better.  For now, your options will be to disable TP for each machine, or on a global level, to use CLI, or use the web interface to update those machines.  Pick your poison ;) .

Thanks Paul, yeah I was afraid of that. I also added a feature request last year to allow us to check some boxes on the dashboard and move multiples at once. Again maybe one day.

Thanks for clarifying. 

It is possible to do this via API if you wish. You'll find the relevant parameters to use in our API documentation under the following section: 
- /endpoint-groups/ > {groupid}/ > endpoints (POST)

Thank you sir, I will look it over and see what I can do.

Thank you sir, I will look it over and see what I can do.