> For the complete documentation index, see [llms.txt](https://docs.cipp.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cipp.app/user-documentation/tenant/manage/drift.md). # Manage Drift This page and the other tabs are a way for you to manage your tenants and their drift away from the desired settings in your Drift Management template. ## Manage Drift Overview {% @storylane/embed subdomain="app" url="" linkValue="cqb21ohc9fgp" %} The Manage Drift page shows how a tenant's live configuration compares with the drift template applied to it, and lets you decide what to do about each difference. A deviation is a setting that no longer matches the template. For each one you can accept it, leaving the tenant as it is; accept it as specific to that customer; or deny it, either by deleting the offending policy or by remediating the tenant back to the template. A drift template and a tenant must both be selected before any results are shown. ## Page Actions | Action | Description | | ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Refresh Data | Reloads the drift results for the selected tenant and template. | | Generate Report | Produces an executive report of the current drift results as a PDF. | | Run Standard Now | Forces an immediate run of the standard rather than waiting for its schedule. You choose which tenant to run against. Available once a template is selected. | ## Breakdown A summary panel counts the deviations by how they have been handled. | Figure | Description | | -------------------- | ------------------------------------------------------------------------------------- | | Aligned | Standards where the tenant matches the template. | | Current | Deviations that have not yet been accepted or denied. | | Accepted | Deviations that have been accepted and left in place. | | Customer Specific | Deviations accepted as specific to this customer. | | Denied | Deviations that have been denied, whether by deletion or remediation. | | Skipped (No License) | Standards that could not be evaluated because the tenant lacks the required licences. | | Total | The total number of standards evaluated. | ## Filters | Control | Description | | --------------------- | ------------------------------------------------------------------------------------------------------------ | | Select Drift Template | The drift template to evaluate the tenant against. | | Search deviations | Narrows the list to deviations matching the text entered. | | Status | Restricts the list to All Deviations, Current Deviations, Accepted, Customer Specific, Denied, or Compliant. | | Sort by | Orders the results by Name, Status, or Category. | ## Deviations Results are presented as cards grouped into sections, each showing what the template expects and what the tenant currently has. | Section | Contains | | --------------------------------------- | ------------------------------------------------------------------------------------- | | New Deviations | Differences that have not yet been actioned. These are the items awaiting a decision. | | Accepted Deviations | Differences that have been accepted and will remain in place. | | Accepted Deviations - Customer Specific | Differences accepted as specific to this customer. | | Denied Deviations | Differences that have been denied and either removed or remediated. | | Compliant Standards | Standards where the tenant already matches the template. | | Skipped - No License Available | Standards that could not be evaluated because the tenant lacks the required licences. | ### Actions on a Deviation Each card carries an **Actions** menu. Which options appear depends on what the deviation is: deletion only applies where a policy exists in the tenant but not in the template, and remediation only applies where the policy exists in the template. | Action | Description | | ------------------------------------------------- | ------------------------------------------------------------------------------------------------- | | Accept Deviation - Customer Specific | Accepts the difference and records it as specific to this customer, leaving the tenant unchanged. | | Accept Deviation | Accepts the difference and leaves the tenant unchanged. | | Deny Deviation - Delete Policy | Denies the difference and deletes the policy from the tenant. | | Deny Deviation - Remediate to align with template | Denies the difference and changes the tenant back to match the template. | Cards for Intune template standards also carry a **Compare** button, described below. ### Bulk Actions Selecting one or more deviations reveals a **Bulk Actions** button showing how many are selected. The same accept and deny options are offered, applied to every selected deviation at once. The delete and remediate options only appear when all of the selected deviations support them. An additional **Remove Drift Customization** option clears the recorded decisions, returning the selected deviations to an unactioned state. ### Confirming a Decision Accepting or denying a deviation opens a confirmation dialog. A **Reason for change** must be entered and is mandatory, so that decisions carry an audit trail. When denying with remediation, a **Permanently deny - Reset every 12 hours** option is also offered, which re-applies the remediation on a recurring basis rather than only once. ## Comparing Against the Baseline For deviations that come from an Intune template standard, a **Compare** button opens a comparison of the template baseline against the policy as it exists in the tenant. | Element | Description | | ------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- | | Not deployed notice | Shown where the policy does not exist in the tenant at all, naming the policy that is missing. | | Summary | States whether the two are identical, or how many differences were found. | | Differences table | Lists each differing property with its Baseline and Tenant values, and whether the values differ or the setting exists on only one side. | | Full settings | The complete configuration of both the baseline and the tenant policy, for reviewing settings the comparison treated as matching. | *** ## Feature Requests / Ideas We value your feedback and ideas. Please raise any [feature requests](https://github.com/CyberDrain/CIPP/issues/new?template=feature.yml) on GitHub. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.cipp.app/user-documentation/tenant/manage/drift.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.