Asset groups let you organize hosts and databases into logical collections so you can grant access to an entire group in one step rather than configuring permissions for each asset individually. For example, you can put all production web servers in one group and all staging databases in another, then assign the right team to each group without touching individual assets.
Prerequisites
Before you begin, ensure that you have:
Hosts or databases already imported into Bastionhost. To import hosts, see Add hosts. To import databases, see Use the database management feature
Create an asset group
Log on to the Bastionhost console. In the top navigation bar, select the region where your bastion host resides.
In the bastion host list, find the bastion host you want to manage and click Manage.
In the left-side navigation pane, choose Assets > Asset Group.
On the Asset Group page, click Create Asset Group.
In the Create Asset Group panel, enter an Asset Group Name and an optional Description, then click Create.
The name must be 1–128 characters and can include letters, digits, periods (.), underscores (\_), hyphens (-), backslashes (\\), and spaces. It cannot start with a special character.
Name groups to reflect their access-control purpose. For example, a policy such as "the operations team manages all production servers, and the dev team has access to staging servers" maps directly to two groups:prod-serversandstaging-servers. Clear names like these make it immediately obvious who should have access and to what, which simplifies ongoing maintenance.
Add assets to an asset group
After creating a group, populate it with hosts or databases.
Log on to the Bastionhost console. In the top navigation bar, select the region where your bastion host resides.
In the bastion host list, find the bastion host you want to manage and click Manage.
In the left-side navigation pane, choose Assets > Asset Group.
On the Asset Group page, click the name of the group you want to update.
In the panel that appears, add the assets you need:
To add hosts: on the Hosts tab, click Add Host, select the hosts, and click Add.
To add databases: on the Databases tab, click Add Database, select the databases, and click Add.
Remove an asset from a group
If an asset no longer belongs to a group — for example, after a team restructure — remove it without deleting the asset itself.
On the Asset Group page, click the group name. On the Hosts or Databases tab, find the asset, click Remove in the Actions column, and confirm by clicking Remove.
Update group name or description
If you reorganize your assets or rename a department, update the group details to keep naming consistent.
On the Asset Group page, click the group name. On the Asset Group Settings tab, update the Asset Group Name or Description and click Update.
Delete an asset group
On the Asset Group page, find the group, click Delete in the Actions column, and confirm by clicking Delete.