Overview

The SentinelOne node's 'Move between Sites' action allows users with appropriate permissions to move agents from one site to another within the SentinelOne Management Console. This is useful for managing agent assignments across different sites, especially when organizational changes or reassignments occur. For example, if an agent was initially assigned to Site A but needs to be managed under Site B, this action facilitates that transfer, ensuring the agent is moved to the best matching dynamic group or the default group if no match is found.

Use Case Examples

1. Move agents from one site to another to reorganize endpoint management.
2. Reassign agents to a different site after a company merger or restructuring.

Properties

Output

JSON

• json
  • debug - Debug information including URL, query parameters, headers, and body sent with the API request (if debug is enabled)

Dependencies

• An API key credential for SentinelOne Management Console API

Troubleshooting

• Ensure the user has Account or Global level access and the necessary role permissions (SOC role does not allow this action).
• Verify permissions for both source and target sites before attempting to move agents.
• Check for unresolved threats or local configurations on agents that might prevent moving.
• If the API returns permission errors, confirm the API key credentials and user roles are correctly configured.

Links

• SentinelOne API Documentation - Move Agents Between Sites - Official API documentation for moving agents between sites in SentinelOne Management Console.