Skip to main content
Skyhigh Security

Automatically Add Services to Service Groups

To automatically add services to a Service Group based on inclusion criteria that map against the registry, use Automatic Assignment. With Automatic Assignment, the inclusion criteria are reevaluated each night against all services in the Cloud Registry. Skyhigh CASB removes services that no longer match the criteria, and adds any services that now match the criteria.

Even if Automatic Assignment is enabled, you can manually add Services to the group on the Services page.  

To automatically add services to Service Groups:

  1. Go to Governance > Service Groups New.
  2. Under Actions, click Create Service Groups.
  3. Toggle Auto Assignment on and click Add Rules.
    clipboard_e19e2aba083f0e8603810db3309e0e3d5.png
  4. Add and apply the rules:
    • If you want the rule to match the required rules or conditions, use IF, THEN logic.
    • If you want the rule to match ANY rule, use OR logic.
    • If you want the rule to match ALL rules, use AND logic.
    • If you want the rule to state as not true, use NOT logic.

NOTE: The criteria to add the rule. Any Omnibar search term can be used to build the rule.

  1. Click Plus to add more rules.
  2. Click Minus to remove existing rules.
  3. Once the rules are added, a message displays as "The above rule is now complete" and the Test button is enabled. 
  4. To check your rules against the inclusion criteria, click Test. 
    The Preview returns the list of the new service that matches the inclusion criteria displayed on the new Service Group page.
  5. To reset the rule, click Undo
    NOTE: For the Edit Rule, Undo resets the rules to the last saved version. 
    clipboard_e48ffa2ddb85bbafe01a5c704949a879c.png
  6. To apply the rules, click Apply Rules. The list of services that matches the inclusion criteria with their current group status is displayed on the New Service Group page. 
    clipboard_eec6d8b6d6955a4e5c7ecc0333e41e781.png
  7. Services that match the inclusion criteria for the group you are creating or editing are not added to the group until you save the form. Click Save
    You can view the saved Service Group on the Service Groups page.
    clipboard_e7d5538c362884d16f949b7fde5907eff.png

You can remove the particular services that are not meant to be in the group even though they match the inclusion criteria. Removing a service creates an exception and the removed service appears in the Exception tab. For details, see the Manage Service Groups.

  • Was this article helpful?