Entra Policy Suite settings · Settings > Device tagging
Device tagging mode (scheduled runs)
| Key | DeviceTagging.Mode |
|---|---|
| Where | Settings > Device tagging |
| Type | Choice |
| Default | Preview |
| Feature | Device tagging · Community |
| Confirmation | Entra Policy Suite asks you to confirm before it is switched on. |
What it does
What a SCHEDULED device tagging run does. A Run now request says its own mode.
When set
Apply: the run writes every planned change (unless the guard holds it) and records each one on the Tag changes page.
When blank or default
Preview (the default): the run computes and records every change and writes none.
Risk and how to reverse it
Apply changes the devices in Entra ID. Prove new or changed rules with a preview and a scoped Apply first. Reversible from the next run; written tags are not rolled back.
Requires
Admin. 'Device tagging' switched on.
Recommended
Preview until the rules are proven, then Apply.
Related settings
- Device tagging DeviceTagging.Enabled
- Also tag a device at once when it changes DeviceTagging.RunOnDirectoryChange
- Never tag these devices DeviceTagging.ExcludeObjects
Documented for Entra Policy Suite 2.0.107. Written by the Entra Policy Suite team; Invardia publishes it. · All settings · Security review pack