Policy membership recalculation

This topic discusses the logic that determines how policy memberships get recalculated.

Target your device

For a policy to be applied to a device, the device needs to be part of a filter or a group that the policy targets. To learn how to add a device to a filter or a group, refer to Filters and Groups in the current UI.

When do policies get refreshed?

  • Every 24 hours, at midnight in your timezone

NOTE  If you click Save Only (current UI) or Save and Deploy Later (New UI) instead of Save and Push Changes (current UI) or Save and Deploy Now (New UI) when creating or updating a policy, the changes will still be deployed at midnight in your timezone because policies are automatically deployed every 24 hours.

  • Immediately after you deploy the policy
  • Every few minutes if a "reassigned" flag had been set on the device

Policies get recalculated every 24 hours, at midnight in your timezone. If any device has been added to or removed from the policy, the new associations will automatically be applied at midnight.

In the current UI, you can expedite this process by turning the policy off and then on again and pushing the changes. In the New UI, the same can be achieved by disabling and then enabling the policy and deploying the changes. This will update the policy memberships immediately. For more information on how to do this, refer to Managing policies in the current UI and Enabling or disabling the policy, sites, or devices in the New UI.

If you add a new device to your account, move a device to another site, or update the device's group membership, the device will be flagged as "reassigned". A job that runs every few minutes will see this flag and perform some basic policy recalculation for the device. The basic policy recalculation is not a full policy refresh, however, it can do the following:

  • Remove any site policies that the device had. (Global policies (formerly account policies) do not get removed when the "reassigned" flag is detected.)
  • Add all site and global policies to the device where it is part of the filter or the group that the policy targets.