Skip to main content
Audience: MSP staff with the relevant Compliance settings access. This tenant library is shared across companies; Company users do not configure it. Viewing settings and writing assessment content are separate permissions, and access to one tab does not guarantee access to all of them. Compliance Settings curates the checks, groups and templates your team uses to assess clients. Available tabs include Checks, Playbooks, Metrics, Groups, Runs, Schedule, Scoring and Risk. Their visibility depends on permissions and features; Metrics additionally requires Liongard. Runs here means reusable run templates, not the history of completed company assessments. Use Schedule to configure future automated runs from an active template.

​
Accessing Compliance Settings

  1. Click Settings in the sidebar
  2. Select Compliance
  3. Choose the task-specific tab. Checks, Groups and Runs use split-pane library editors; Schedule, Scoring and Risk have different controls.
The Checks, Groups and Runs library tabs use a split-pane layout: the list on the left, the detail on the right. You can collapse the left sidebar with the panel-close button at the top of the list to make more room for the detail view.

​
Checks Tab

The Checks tab manages every compliance question your tenant can ask. Checks are organized in folders, and each check can be wired up to auto-populate notes when an assessor picks a particular answer.

​
Layout

  • Left sidebar - Folder tree, an Uncategorized bucket at the bottom, and a search box. Click the panel icon at the top to collapse the sidebar.
  • Right pane - Details for the selected check: title, description, guidance, criticality, priority, frequency, status list, compliance type, group assignments, and per-status note template links.

​
Folders

Folders are a settings-only organizational tool. They do not change how checks behave during a run, they just make a large check library easier to browse.
1

Create a folder

Click the folder-plus icon at the top of the sidebar to create a root folder, or open the menu on any folder row and choose New subfolder to nest inside it.
2

Name it

Give the folder a descriptive name like “Microsoft 365” or “CIS Controls v8” and click Create.
3

Add checks

Create a new check inside the folder with the New check here menu item, or move existing checks in using drag and drop.
Deleting a folder removes its subfolders, but any checks in it move to Uncategorized. No check data is lost.

​
Moving checks with drag and drop

1

Select one or many checks

Click any check row to open it on the right. Hold Cmd (macOS) or Ctrl (Windows) and click additional rows to add them to a multi-select. Hold Shift and click to range-select between two rows. Selected rows get a teal ring and the sidebar shows “N selected”.
2

Drag to a folder

Click and drag any selected row onto a folder. The target folder highlights in teal while you hover. Drop to move every selected check into that folder at once.
3

Drop on Uncategorized

To take a check out of its current folder without picking a new one, drag it onto the Uncategorized row at the bottom of the sidebar.
If you drag a check that isn’t in the current multi-select, only that one check is moved. The multi-select set is preserved so you can keep selecting and moving in batches.
Type in the sidebar search box to filter. Folders that contain a matching check auto-expand in place, and clearing the search restores your previous expanded/collapsed state.

​
Editing a check

Click any check to open it in the detail pane. The form covers everything about the check: Click Save to persist the check fields and its Applies to conditions. Changes to note-template links and group membership save separately and immediately; cancelling the main editor does not undo those changes. Save the status-list choice before editing its note-template links. Custom-field values are a separate save operation within the overall save flow: if that section fails, verify the already-saved check before retrying. The Improve with AI button in the header uses AI to suggest a better description, how-to-check, remediation, and references based on the title.

​
Linking note templates to statuses

Each check uses a status list that defines its answer choices (for example, Pass / Fail / Needs review). You can link a different note template to each answer, and that template’s content will be auto-applied to the assessor’s public notes when they pick that answer.
1

Assign a status list

In the check detail pane, pick a Status list from the dropdown. This reveals the Note templates by status section.
2

Pick a template for each status

Every status option in the list gets a template picker. Choose a note template for any status where you want auto-population. Leave others as No template. Choosing or clearing a template immediately saves that link; it does not wait for the check header Save.
3

Assessor picks the status

In the check dialog during a run, when the assessor picks a status that has a linked template, that template’s content is appended to their Public notes. If the notes already have content, the template goes underneath it with a blank line in between.
Only templates categorized as Compliance Check Note appear in the picker. Create those under Settings > Templated Notes first. Auto-apply runs once per (status, template) pair in a single dialog session, so toggling between statuses does not duplicate the template text.

​
Choosing which companies and devices get a check

By default a check is assigned to every company, location or device a run covers. Add conditions under Applies to to narrow that. For example, a FileVault check can go only to Macs, and a HIPAA policy check only to healthcare clients.
1

Add a condition

Open the check, scroll to Applies to and select Add condition. Choose what to test, a comparison such as is any of, and the values.
2

Combine conditions

With two or more conditions, choose whether the check applies when all conditions match or when any condition matches.
3

Save

Select Save in the check header. New runs, and checks added to runs, use the conditions. Existing assignments stay as they are.
Device conditions apply only to checks with the Device compliance type. Company, location and control checks use their company conditions and skip device conditions.
A company or device with no value for a condition still gets the check, so missing data never hides a check. To target records with no value, use is empty or is not empty. For example, add Operating system is not empty to skip devices whose OS is unknown.

​
Creating checks

Click the + icon on the checks tab header (or New check here on a folder’s menu) to open the new-check form. New checks default to the currently selected folder, or Uncategorized if none is selected. The Bulk generate option is also available from the page header if you want AI to draft multiple checks at once.

​
Deleting checks

Open the three-dot menu on any check row in the sidebar and choose Delete. Delete requires the manage_compliance permission. Deletion is permanent — the check is removed from every group it was in.

​
Groups Tab

Groups bundle related checks together so you can assign a whole category (for example, “Microsoft 365 security baseline”) to a run with one action. A check can belong to any number of groups.

​
Layout

  • Left sidebar - List of every group. Search by name or description, filter by compliance type, collapse the sidebar with the panel icon.
  • Right pane - Group metadata header and two transfer columns: Available checks (left) and Members (right).

​
Creating a group

1

Click New

Select Add Group in the header or the + icon at the top of the groups sidebar.
2

Fill in the details

Enter a Name, an optional Description, and pick a Compliance type. For a Device group, also review offered device-type associations. These affect which devices receive the group during assignment. The compliance type is important: if you pick one, only checks that match that type can be added to the group. Leave it as None to allow any check.
3

Save

Click Create. The new group appears at the top of the sidebar and is selected in the detail pane.
New group dialog with name, description and compliance type fields and Cancel/Create controls.

New group is an unsaved metadata draft. Choose the compliance type before creating it; membership transfers are separate saved actions.

A group save persists its metadata before updating device-type associations. If a later association update fails, reopen the group and verify what saved before creating another group or retrying.

​
Adding and removing checks

The right pane shows two columns — Available checks on the left and Members on the right. Drag checks between them to change membership. Each completed transfer saves immediately; there is no later page Save. Wait for the result before making another change.
1

Search and select

Each column has its own search box. Click any check to select it. Hold Cmd/Ctrl to multi-select, or Shift to range-select.
2

Drag across

Drag from Available checks onto Members to add them to the group. Drag from Members onto Available checks to remove them. The target column gets a colored glow as you hover and the number badge at the top updates when you drop.
Dropping a check back onto the same column is a no-op, so you don’t have to be precise — the system only counts the items that actually cross over.

​
Compliance-type filtering

If the group has a compliance type set, only checks with a matching type appear in Available checks. This prevents mismatched checks from being added. If you later clear the compliance type (by editing the group), every check becomes available.

​
Editing or deleting a group

Use the three-dot menu on a sidebar row, or the Edit and Delete buttons in the detail pane header. Deleting a group does not delete its checks — it only removes the group itself.

​
Runs Tab

Run templates bundle groups and individual checks into reusable assessment packages. When you run a template against a company, every check in every member group (plus every individually-added check) gets assigned as a compliance run.

​
Layout

  • Left sidebar - List of every template. Each row shows the group count and individual-check count at a glance. Search, filter by active/inactive, collapse the sidebar.
  • Right pane - Template metadata header with an Active toggle, and two tabs: Groups and Individual checks. Each tab is its own two-column transfer.

​
Creating a template

1

Click New

Select Add New Template in the header or the + icon at the top of the templates sidebar.
2

Fill in the basics

Enter a Name (for example, “Quarterly security review”), an optional Description, and the Active toggle. Inactive templates remain visible here but are omitted from the active-template schedule picker.
3

Save

Click Create. The new template opens on the right with empty Groups and Individual Checks tabs.
New template dialog with name, description, Active switch and Cancel/Create controls.

New template starts with Active enabled. Create saves the template; the group and check memberships are added separately afterward.

​
Adding groups to a template

1

Open the Groups tab

On the detail pane, click the Groups tab. It shows Available groups on the left and Groups in this template on the right.
2

Drag to add

Drag one or more groups from Available onto Groups in this template. Every check inside those groups will run whenever this template is used.
3

Drag back to remove

Drag a group from the members column back to Available to remove it. Cmd/Ctrl-click and Shift-click work the same way as in Checks and Groups.

​
Adding individual checks

Switch to the Individual checks tab for one-off checks that aren’t part of a group. These run in addition to any group membership. The same drag-and-drop transfer UI applies. Group and individual-check transfers save immediately; Cancel in the template metadata dialog does not undo them.
Groups and individual checks are independent. You can use either, both, or neither. Many teams use groups for the bulk of a template and drop in a few individual checks for unusual one-off requirements.

​
Activating, editing, and deleting

  • Active toggle - Each template has an Active switch in the header that saves immediately. Inactive templates remain in settings and are omitted from the active-template schedule picker. Review existing schedules separately before retiring a template.
  • Edit - Opens the name/description/active dialog.
  • Delete - Removes the template. Runs already created from the template are not affected — they keep their original check assignments.
Deleting a run template does not stop or modify in-flight runs. It only prevents new runs from being created from that template.

​
Schedule, scoring and risk

  • Schedule assessments: select an active run template, target companies and a recurrence. All companies is the new schedule’s default target.
  • Configure Compliance Scoring: edit weights and grade thresholds, then Save Changes. Confirmed Reset to Defaults immediately changes saved configuration.
  • Configure risk tracking: enable the register and maintain categories. Reordering, archiving and disabling are immediate changes.
  • Playbooks: import selected library content before assigning it to companies.
  • Liongard Metrics: review the provider-backed metrics path when available.
Scope Weights card in Compliance Scoring.

Scope weight settings have their own save controls; they are separate from check and template editing.

​
Permissions

Opening a tab requires the relevant settings read access and feature availability. The table below describes the library editor’s content permissions; schedule writes and scoring/risk administration use their own Compliance settings permissions.

​
Keyboard and mouse reference

​
Best practices

  • Start with folders - Organize your check library by framework (CIS, NIST, SOC 2) or by domain (Microsoft 365, networking, physical security) before you have a lot of checks.
  • Use note templates for repetitive findings - If most “Fail” answers on a given check need the same remediation write-up, link a template to that status once instead of typing it every assessment.
  • Keep groups compliance-type-aware - Set a compliance type on groups whose checks all target the same scope (device, location, company). This prevents accidentally adding mismatched checks.
  • Build templates around groups, not individual checks - Groups are easier to maintain than long flat lists of checks in a template.
  • Disable instead of delete - Use the Active toggle on run templates rather than deleting them. Keeps the history without cluttering pickers.

​
FAQs

No. Settings > Compliance > Runs contains reusable templates. Review actual company runs in the Compliance workspace.
No. Additional tabs include Playbooks, provider-dependent Metrics, Schedule, Scoring and Risk, subject to permissions and features.
No. Dragging checks or groups between membership columns saves that transfer immediately.
Do not assume it does. Review saved schedules separately; inactive templates are omitted from the active-template picker.
Yes. Type compatibility determines eligible checks, and Device groups also have device-type associations. Review affected memberships and assignments.
No. Custom-field persistence can fail after the main check saves. Inspect section errors and reopen before retrying.
No. Create an assessment or an explicit schedule using the template.