Managing Assets

The platform's inventory provides an asset-centric view of all discovered computers and other assets. From the Inventory page, you can manage assets.

Inventory is available only for Platform instances connected to Secret Server Cloud. It is not available for customers using the Platform with Secret Server On-Premises.

To display the Inventory page, choose Inventory in the left navigation of your platform instance, or use the Search bar to find it.

Tagging Assets

This feature is currently available only to customers participating in a Private Preview. If you'd like to participate and be among the first to try this feature, ask our support or account team for details.

In addition to the static attributes that are retrieved for each asset during discovery, you can define your own custom tags for assets in Shared Inventory. Tags are flexible labels used to group, filter, and build collections beyond the static attributes discovery provides. (To learn more about the discovery service, see Discovery.)

You can do the following tasks related to tags:

Create tags by assigning them to an asset. For example, you might define tags like prod, eu-west, pci, or business-critical. See Adding a New Tag to an Asset.
Assign one or more existing tags to any asset.
Filter and search inventory by tag. For information about filtering the inventory view, see Your Computers Inventory. For information about searching inventory, see Inventory Search.
Build collections using tags as criteria. For information about how to create a collection, see Grouping with Collections.
Remove tags from individual assets. See Removing a Tag From an Asset.
Delete a tag entirely.

Permissions Required for Asset Tagging

To assign and remove tags, you need the permission Manage Inventory.
In addition, to view and work with the inventory (which gives you access to the tagging functionality), you need the permissions listed in Computer Inventory Permissions.

Considerations and Limitations for Asset Tags

When creating and using asset tags, keep the following in mind:

A single tag can be used by more than one type of asset. A tag named prod on a computer is the same tag as prod on any other asset type. Because of this, you can build heterogeneous collections like "all assets with the prod tag."
Tags must start with a letter. The maximum length of a tag is 128 characters. If you try to define a tag that does not meet the naming rules, the platform displays an error message.
Tags can not be renamed. If you want to change a tag, delete it and create a new one.
When deleting a tag, you must remove it from all assets that it is assigned to. If a tag is in use, it can not be deleted.
When you create, assign, remove assignment, or delete a tag, the event is recorded in the audit log. The audit is useful because tags are used to define collections, and collections can be used to control access, so the effects of tag changes are worth tracking.
Limitation: Key-value tagging is not supported. To approximate key-value semantics, use two values separated by a colon; for example, environment:prod.

Adding a New Tag to an Asset

To create a new asset tag or assign an existing tag to an asset:

In the platform tenant, open the page that lists the type of asset to which you want to add a tag; for example, Computers. Use the Search bar to find the page.
Find the asset in the list and open its Details page. You can do this by clicking the three dots and choosing Details from the menu, or by clicking the asset name. For some asset types, a Preview pane appears; click Details.
In the Overview tab, in the Tags section, click Add tag.
Do one of the following:
- If the tag you want already appears in the dropdown list, choose it.
- If the tag is not already in the list, type the new tag name, then click Create new tag named 'xxxx'. For the tag name, follow the guidelines in Considerations and Limitations for Asset Tags.
If this is a new tag, click Save. If the tag was already in the list, you don't have to do this step.

Removing a Tag From an Asset

In the platform tenant, open the page that lists the type of asset from which you want to remove a tag; for example, Computers. Use the Search bar to find the page.
Find the asset in the list and open its Details page. You can do this by clicking the three dots and choosing Details from the menu, or by clicking the asset name. For some asset types, a Preview pane appears; click Details.
In the Overview tab, in the Tags section, click the X at the end of the tag name. The tag should immediately disappear from the list of tags.
Click Save, then click Remove to confirm.

Deleting Asset Tags

To delete a tag completely, remove it from all assets it was assigned to. Use the steps in Removing a Tag From an Asset. When you remove the last assignment of the tag, it is automatically deleted. The tag no longer appears in the dropdown list of tags.

Manually Deleting Computer Assets

Normally, computers are added and removed automatically through the discovery process; see Discovery. However, you can manually delete a computer from inventory.

Permissions Required to Manually Delete Computers

To manually delete computers, you need the permission Manage Inventory.
In addition, to view and work with the inventory (which gives you access to the asset deletion functionality), you need the permissions listed in Computer Inventory Permissions.

Considerations and Limitations for Deleting Computers

Deletion is permanent (except as noted in the next bullet item). The computer's record is removed from inventory. There is no recycle bin or undo. Use care and confirm before deleting.
The discovery process might reintroduce the computer. If the computer can still be reached in a discovery source, it will reappear as a new record in the inventory the next time discovery runs. There are several ways to prevent a manually deleted computer from being rediscovered: disable discovery on the source where the computer exists; decommission the computer; or use discovery rules to place the computer outside the scope of discovery.
The computer is removed from any collections to which it belonged, and the count of computers in the collection is updated. Trendlines and dashboards show the new count.
If the computer being deleted is assigned to a policy, deleting the computer removes the it from that policy. Depending on the policy, this could make the computer inaccessible. Before deleting a computer, find out whether it is assigned to any policies and confirm that removing it is safe.
When you manually delete a computer, the event is recorded in the audit log. The account that deleted the computer, timestamp, and identity of the computer are included in the audit record.

Manually Deleting a Computer Asset

In the platform tenant, open the Computers page. Use the Search bar to find the page.
Find the computer in the list, click the three dots to open its dropdown menu, and choose Delete.

A confirmation dialog appears.
Click Delete.