> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.itential.com/itential-platform/6/configuration-manager/compliance-plans/create/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server. # Create a compliance plan > Create and configure a compliance plan to run scheduled compliance checks against your devices A compliance plan defines which Golden Configuration trees to check, which devices to check them against, and when to run those checks. Configuration Manager provides two ways to create a compliance plan: a new creation form introduced in Platform 6.4, and the Compliance Plan create dialog available in all Platform 6 versions. ## Before you begin Before creating a compliance plan, confirm that you have: * At least one Golden Configuration tree with nodes defined. See [Golden Configuration overview](../golden-configurations/overview). * Access to the devices you want to include. Your RBAC permissions in Inventory Manager determine which devices are available to you. ## Create a new compliance plan Platform 6.4+ The compliance plan creation form is a single-page form that lets you define plan details and select Golden Configurations, nodes, and devices before creating the plan. The creation form is only available after enabling **useNewComplianceView** for Configuration Manager in Admin Essentials. #### Open the creation form In Configuration Manager, navigate to **Compliance Plans** and click **+ New Compliance Plan**. The **Create a new compliance plan** page opens. #### Enter plan details Enter the following: | Field | Required | Description | | --------------- | -------- | --------------------------------------- | | **Name** | Yes | A unique, descriptive name for the plan | | **Description** | No | The plan's purpose or scope | #### Select Golden Configurations and nodes Select one or more Golden Configuration trees. After selecting a tree, choose which nodes to include. You can select individual nodes or include the entire tree. If a node uses variables, the form prompts you to provide values for each required variable. Repeat this process for each additional Golden Configuration tree you add. The same Golden Configuration tree can be used with different variable values across different compliance plans. Variable values are configured per plan, not per tree. #### Select devices Select devices using the following methods: **Individual devices tab**: Browse and select devices directly. To filter the list, enter a regex pattern in the filter field and click **Apply Filter**. Use **Select All** to select all devices across all pages. **Device groups tab**: Select pre-defined device groups for bulk selection. If a device appears in both an individual selection and a group selection, the system deduplicates automatically. You can deselect individual devices after adding them via a group. The following filter attributes are always available, regardless of inventory source: | Attribute | Notes | | --------- | ----------------------------------- | | Name | Required field in Inventory Manager | | Host | Required field in Inventory Manager | | Device OS | | | Port | | The device filter in compliance plans is managed by Compliance Manager, not Inventory Manager. This makes device selection agnostic to the inventory source (for example, NSO, Gateway, or Inventory Manager). #### Create the plan Click **Create Plan** to save and activate the plan. Schedule when a compliance plan runs in Operations Manager. For more information, see [Use compliance reports](/operations-manager/compliance-reports). --- ## Use the Compliance Plan create dialog The Compliance Plan create dialog is available in all Platform 6 versions. #### Open the Create dialog In Configuration Manager, click the **Create (+)** button in the top toolbar. #### Select Compliance Plan In the **Create** dialog, select **Compliance Plan** from the dropdown. #### Configure basic settings Enter the following: * **Name**: A unique name for the plan (required) * **Description**: An optional description * **Plan owner**: The user responsible for the plan #### Create Click **Create** to open the compliance plan editor. ### Configure compliance plan scope Define which Golden Configurations and device groups the plan checks. **Add Golden Configurations:** #### Open the Scope tab Navigate to the **Scope** section in the compliance plan editor. #### Add a Golden Configuration Click **Add Golden Configuration** and select one or more trees. #### Specify nodes Select specific nodes to include, or include the entire tree. #### Save Click **Save** to add the selection to the plan. **Add device groups:** #### Navigate to device groups In the **Scope** tab, go to the device groups section. #### Add a device group Click **Add Device Group** and select one or more groups. #### Save Click **Save** to add the selection to the plan. ### Set a schedule Configure when compliance checks run. #### Open the Schedule tab Navigate to the **Schedule** section. #### Select a frequency Choose a schedule type: | Schedule type | When to use | | ------------- | ------------------------------ | | Daily | Regular ongoing monitoring | | Weekly | Less frequent periodic checks | | Monthly | Monthly audit cycles | | Quarterly | Regulatory compliance periods | | On-demand | Ad-hoc compliance verification | #### Set the time Define when checks should run. Consider maintenance windows and device load. #### Configure additional options Set the timezone, retry behavior, and timeout limits as needed. #### Save Click **Save** to apply the schedule. Platform 6.4+ If you enabled the new Compliance Plans view in Admin Essentials, schedule compliance plans in Operations Manager instead. See [Use compliance reports](/operations-manager/compliance-reports). ### Configure compliance reports #### Open the Reports tab Navigate to the **Reports** section. #### Select a report format Choose PDF, CSV, JSON, or HTML. #### Configure content Select the content to include: summary statistics, detailed device results, configuration diffs, or trend analysis. #### Set retention Define how long to store reports. #### Save Click **Save** to apply the report configuration. ### Configure report distribution #### Open the Distribution section Navigate to report distribution settings. #### Add recipients Enter email addresses for report recipients. #### Configure delivery Set delivery time, format preferences per recipient, and notification preferences. #### Save Click **Save** to apply distribution settings. ### Manage compliance exceptions Some devices may have approved deviations from Golden Configurations. **Add an exception:** #### Open the Exceptions section Navigate to **Exceptions** in the compliance plan. #### Add an exception Click **Add Exception**. #### Define the exception Select the device or device group, specify the Golden Configuration node, describe the approved deviation, set an expiration date if applicable, and add approval documentation. #### Save Click **Save** to record the exception. **Review exceptions:** #### Open the Exceptions tab View all current exceptions. #### Check expiration dates Identify expired or expiring exceptions. #### Update or remove Renew, modify, or remove exceptions as needed. ## Learn more #### [Compliance Plan Reporting](./reporting) View and interpret compliance results #### [Connection error reporting](./connection-errors) Understand how connection failures are reported #### [View compliance plan details](./plan-details) Review compliance status and execution history for a specific plan > Create and configure a compliance plan to run scheduled compliance checks against your devices