Static Groups in SonicWall Endpoint Security let administrators manually organize endpoints into named collections within a Tenant. Unlike the built-in default group, a static group's membership is controlled entirely by the administrator - endpoints are assigned explicitly and do not move in or out automatically. This makes them ideal for grouping endpoints by department, location, function, or security posture.
| Groups live inside a Tenant | Groups can only be created and managed from within the Tenant view. They are not accessible from the global SonicWall account level. |
| Manually assigned | Endpoints are explicitly moved into or out of a static group by an administrator. |
| Single group per endpoint | An endpoint belongs to exactly one group at a time. Moving it to a new group removes it from the previous one. |
All groups created through the Groups page are Static by default. The creation form configures the group's sensor behavior, policy inheritance, and agent deployment version at the same time.
You must be inside a Tenant view to access Groups. The option is not available from the global SonicWall account dashboard.
To create a new static user group
Log into the SES Management Console.
In the Top pane, click the drop-down on SonicWall-managed Account to open a side navigation pane that allows you to view your Main Account and Tenants.
Select the target tenant from the account switcher.
Click the tenant name in the left-hand account panel. The breadcrumb at the top updates to show: Main Account > Tenant.
Click + to Create Group.
Complete the Group Info section
Enter a Group Name and an optional Description in the field provided.
Moving endpoints between groups is supported. For detailed steps, see Moving Endpoints Between Groups.
Review the Sensor Settings section
By default the group inherits sensor settings from its parent. Toggle Inherit Sensor Settings from Parent off to configure individual protection, telemetry, deployment and configuration settings for this group. For more information on the Senor settings, see the section Sensor Settings.
Review the Policy Inheritance Settings
Four toggles control whether the group inherits Exclusion, Blocklist, Device Control, and Custom Rule policies from the parent.
Click Save.
The new group appears immediately at the top of the Groups list with Type set to Static.
In SES, group is Tenant-specific. In the tenant view user have to create a group to add the Endpoints
To view groups
Log into the SES Management Console.
In the Top pane, click the drop-down on SonicWall-managed Account to open a side navigation pane that allows you to view your Main Account and Tenants.
Select the target tenant from the account switcher.
Click the tenant name in the left-hand account panel. The breadcrumb at the top updates to show: Main Account > Tenant.
Click the Groups in the left sidebar.
The Groups list opens, showing all existing groups for this tenant with columns: Tenant, Name, Description, Type, Platform, Updated At, Created At.