> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.itential.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server.

# Create a compliance plan

> Create and configure a compliance plan to run scheduled compliance checks against your devices

A compliance plan defines which Golden Configuration trees to check, which devices to check them against, and when to run those checks. Configuration Manager provides two ways to create a compliance plan: a new creation form introduced in Platform 6.4, and the Compliance Plan create dialog available in all Platform 6 versions.

## Before you begin

Before creating a compliance plan, confirm that you have:

* At least one Golden Configuration tree with nodes defined. See [Golden Configuration overview](../golden-configurations/overview).
* Access to the devices you want to include. Your RBAC permissions in Inventory Manager determine which devices are available to you.

## Create a new compliance plan

Platform 6.4+

The compliance plan creation form is a single-page form that lets you define plan details and select Golden Configurations, nodes, and devices before creating the plan.

The creation form is only available after enabling **useNewComplianceView** for Configuration Manager in Admin Essentials.

#### Open the creation form

In Configuration Manager, navigate to **Compliance Plans** and click **+ New Compliance Plan**. The **Create a new compliance plan** page opens.

#### Enter plan details

Enter the following:

| Field           | Required | Description                             |
| --------------- | -------- | --------------------------------------- |
| **Name**        | Yes      | A unique, descriptive name for the plan |
| **Description** | No       | The plan's purpose or scope             |

#### Select Golden Configurations and nodes

Select one or more Golden Configuration trees. After selecting a tree, choose which nodes to include. You can select individual nodes or include the entire tree.

If a node uses variables, the form prompts you to provide values for each required variable. Repeat this process for each additional Golden Configuration tree you add.

The same Golden Configuration tree can be used with different variable values across different compliance plans. Variable values are configured per plan, not per tree.

#### Select devices

Select devices using the following methods:

**Individual devices tab**: Browse and select devices directly. To filter the list, enter a regex pattern in the filter field and click **Apply Filter**. Use **Select All** to select all devices across all pages.

**Device groups tab**: Select pre-defined device groups for bulk selection. If a device appears in both an individual selection and a group selection, the system deduplicates automatically. You can deselect individual devices after adding them via a group.

The following filter attributes are always available, regardless of inventory source:

| Attribute | Notes                               |
| --------- | ----------------------------------- |
| Name      | Required field in Inventory Manager |
| Host      | Required field in Inventory Manager |
| Device OS |                                     |
| Port      |                                     |

The device filter in compliance plans is managed by Compliance Manager, not Inventory Manager. This makes device selection agnostic to the inventory source (for example, NSO, Gateway, or Inventory Manager).

#### Create the plan

Click **Create Plan** to save and activate the plan.

Schedule when a compliance plan runs in Operations Manager. For more information, see [Use compliance reports](/operations-manager/compliance-reports).

---

## Use the Compliance Plan create dialog

The Compliance Plan create dialog is available in all Platform 6 versions.

#### Open the Create dialog

In Configuration Manager, click the **Create (+)** button in the top toolbar.

#### Select Compliance Plan

In the **Create** dialog, select **Compliance Plan** from the dropdown.

#### Configure basic settings

Enter the following:

* **Name**: A unique name for the plan (required)
* **Description**: An optional description
* **Plan owner**: The user responsible for the plan

#### Create

Click **Create** to open the compliance plan editor.

### Configure compliance plan scope

Define which Golden Configurations and device groups the plan checks.

**Add Golden Configurations:**

#### Open the Scope tab

Navigate to the **Scope** section in the compliance plan editor.

#### Add a Golden Configuration

Click **Add Golden Configuration** and select one or more trees.

#### Specify nodes

Select specific nodes to include, or include the entire tree.

#### Save

Click **Save** to add the selection to the plan.

**Add device groups:**

#### Navigate to device groups

In the **Scope** tab, go to the device groups section.

#### Add a device group

Click **Add Device Group** and select one or more groups.

#### Save

Click **Save** to add the selection to the plan.

### Set a schedule

Configure when compliance checks run.

#### Open the Schedule tab

Navigate to the **Schedule** section.

#### Select a frequency

Choose a schedule type:

| Schedule type | When to use                    |
| ------------- | ------------------------------ |
| Daily         | Regular ongoing monitoring     |
| Weekly        | Less frequent periodic checks  |
| Monthly       | Monthly audit cycles           |
| Quarterly     | Regulatory compliance periods  |
| On-demand     | Ad-hoc compliance verification |

#### Set the time

Define when checks should run. Consider maintenance windows and device load.

#### Configure additional options

Set the timezone, retry behavior, and timeout limits as needed.

#### Save

Click **Save** to apply the schedule.

Platform 6.4+

If you enabled the new Compliance Plans view in Admin Essentials, schedule compliance plans in Operations Manager instead. See [Use compliance reports](/operations-manager/compliance-reports).

### Configure compliance reports

#### Open the Reports tab

Navigate to the **Reports** section.

#### Select a report format

Choose PDF, CSV, JSON, or HTML.

#### Configure content

Select the content to include: summary statistics, detailed device results, configuration diffs, or trend analysis.

#### Set retention

Define how long to store reports.

#### Save

Click **Save** to apply the report configuration.

### Configure report distribution

#### Open the Distribution section

Navigate to report distribution settings.

#### Add recipients

Enter email addresses for report recipients.

#### Configure delivery

Set delivery time, format preferences per recipient, and notification preferences.

#### Save

Click **Save** to apply distribution settings.

### Manage compliance exceptions

Some devices may have approved deviations from Golden Configurations.

**Add an exception:**

#### Open the Exceptions section

Navigate to **Exceptions** in the compliance plan.

#### Add an exception

Click **Add Exception**.

#### Define the exception

Select the device or device group, specify the Golden Configuration node, describe the approved deviation, set an expiration date if applicable, and add approval documentation.

#### Save

Click **Save** to record the exception.

**Review exceptions:**

#### Open the Exceptions tab

View all current exceptions.

#### Check expiration dates

Identify expired or expiring exceptions.

#### Update or remove

Renew, modify, or remove exceptions as needed.

## Learn more

#### [Compliance Plan Reporting](./reporting)

View and interpret compliance results

#### [Connection error reporting](./connection-errors)

Understand how connection failures are reported

#### [View compliance plan details](./plan-details)

Review compliance status and execution history for a specific plan