> This page is for Itential Platform On-Prem, version 6 (default). > For other versions, use one of these documentation indexes: > - 6 (default): https://docs-test.itntl.com/itential-platform/6/llms.txt > - 2023.2: https://docs-test.itntl.com/itential-platform/2023-2/llms.txt > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs-test.itntl.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs-test.itntl.com/_mcp/server. # Create a compliance plan > Create and configure a compliance plan to run scheduled compliance checks against your devices A compliance plan defines which Golden Configuration trees to check, which devices to check them against, and when to run those checks. Configuration Manager provides two ways to create a compliance plan: a new creation form introduced in Platform 6.4, and the Compliance Plan create dialog available in all Platform 6 versions. ## Before you begin Before creating a compliance plan, confirm that you have: * At least one Golden Configuration tree with nodes defined. See [Golden Configuration overview](../golden-configurations/overview). * Access to the devices you want to include. Your RBAC permissions in Inventory Manager determine which devices are available to you. ## Create a new compliance plan Platform 6.4+ The compliance plan creation form is a single-page form that lets you define plan details and select Golden Configurations, nodes, and devices before creating the plan. > **Note** > > The creation form is only available after enabling **useNewComplianceView** for Configuration Manager in Admin Essentials. #### Open the creation form In Configuration Manager, navigate to **Compliance Plans** and click **+ New Compliance Plan**. The **Create a new compliance plan** page opens. #### Enter plan details Enter the following: | Field | Required | Description | | --------------- | -------- | --------------------------------------- | | **Name** | Yes | A unique, descriptive name for the plan | | **Description** | No | The plan's purpose or scope | #### Select Golden Configurations and nodes Select one or more Golden Configuration trees. After selecting a tree, choose which nodes to include. You can select individual nodes or include the entire tree. If a node uses variables, the form prompts you to provide values for each required variable. Repeat this process for each additional Golden Configuration tree you add. > **Note** > > The same Golden Configuration tree can be used with different variable values across different compliance plans. Variable values are configured per plan, not per tree. #### Select devices Select devices using the following methods: **Individual devices tab**: Browse and select devices directly. To filter the list, enter a regex pattern in the filter field and click **Apply Filter**. Use **Select All** to select all devices across all pages. **Device groups tab**: Select pre-defined device groups for bulk selection. If a device appears in both an individual selection and a group selection, the system deduplicates automatically. You can deselect individual devices after adding them via a group. The following filter attributes are always available, regardless of inventory source: | Attribute | Notes | | --------- | ----------------------------------- | | Name | Required field in Inventory Manager | | Host | Required field in Inventory Manager | | Device OS | | | Port | | > **Note** > > The device filter in compliance plans is managed by Compliance Manager, not Inventory Manager. This makes device selection agnostic to the inventory source (for example, NSO, Gateway, or Inventory Manager). #### Create the plan Click **Create Plan** to save and activate the plan. Schedule when a compliance plan runs in Operations Manager. For more information, see [Use compliance reports](/operations-manager/compliance-reports). --- ## Use the Compliance Plan create dialog The Compliance Plan create dialog is available in all Platform 6 versions. #### Open the Create dialog In Configuration Manager, click the **Create (+)** button in the top toolbar. #### Select Compliance Plan In the **Create** dialog, select **Compliance Plan** from the dropdown. #### Configure basic settings Enter the following: * **Name**: A unique name for the plan (required) * **Description**: An optional description * **Plan owner**: The user responsible for the plan #### Create Click **Create** to open the compliance plan editor. ### Configure compliance plan scope Define which Golden Configurations and device groups the plan checks. **Add Golden Configurations:** #### Open the Scope tab Navigate to the **Scope** section in the compliance plan editor. #### Add a Golden Configuration Click **Add Golden Configuration** and select one or more trees. #### Specify nodes Select specific nodes to include, or include the entire tree. #### Save Click **Save** to add the selection to the plan. **Add device groups:** #### Navigate to device groups In the **Scope** tab, go to the device groups section. #### Add a device group Click **Add Device Group** and select one or more groups. #### Save Click **Save** to add the selection to the plan. ### Set a schedule Configure when compliance checks run. #### Open the Schedule tab Navigate to the **Schedule** section. #### Select a frequency Choose a schedule type: | Schedule type | When to use | | ------------- | ------------------------------ | | Daily | Regular ongoing monitoring | | Weekly | Less frequent periodic checks | | Monthly | Monthly audit cycles | | Quarterly | Regulatory compliance periods | | On-demand | Ad-hoc compliance verification | #### Set the time Define when checks should run. Consider maintenance windows and device load. #### Configure additional options Set the timezone, retry behavior, and timeout limits as needed. #### Save Click **Save** to apply the schedule. > **Note** > > Platform 6.4+ > > If you enabled the new Compliance Plans view in Admin Essentials, schedule compliance plans in Operations Manager instead. See [Use compliance reports](/operations-manager/compliance-reports). ### Configure compliance reports #### Open the Reports tab Navigate to the **Reports** section. #### Select a report format Choose PDF, CSV, JSON, or HTML. #### Configure content Select the content to include: summary statistics, detailed device results, configuration diffs, or trend analysis. #### Set retention Define how long to store reports. #### Save Click **Save** to apply the report configuration. ### Configure report distribution #### Open the Distribution section Navigate to report distribution settings. #### Add recipients Enter email addresses for report recipients. #### Configure delivery Set delivery time, format preferences per recipient, and notification preferences. #### Save Click **Save** to apply distribution settings. ### Manage compliance exceptions Some devices may have approved deviations from Golden Configurations. **Add an exception:** #### Open the Exceptions section Navigate to **Exceptions** in the compliance plan. #### Add an exception Click **Add Exception**. #### Define the exception Select the device or device group, specify the Golden Configuration node, describe the approved deviation, set an expiration date if applicable, and add approval documentation. #### Save Click **Save** to record the exception. **Review exceptions:** #### Open the Exceptions tab View all current exceptions. #### Check expiration dates Identify expired or expiring exceptions. #### Update or remove Renew, modify, or remove exceptions as needed. ## Learn more #### [Compliance Plan Reporting](./reporting) View and interpret compliance results #### [Connection error reporting](./connection-errors) Understand how connection failures are reported #### [View compliance plan details](./plan-details) Review compliance status and execution history for a specific plan