You can deploy these features when you save them or you can deploy them at a later time from the list of pending changes:

• Locations
• Policies
• Lists
• Identity providers
• ​ETP Client​ configuration
• Local bypass settings

The Pending Changes tab shows saved changes that are currently pending deployment.

The Pending Changes window includes this information:

• Specific settings that were added or modified. Depending on the modification, the Pending Changes window shows the original and new setting values.

• The user who created or modified the setting.

• Configuration changes that are related to the applied settings. For example, if you modify a policy and associate a new location to the policy, this change also impacts a location configuration. As a result, a change to the specific location is also visible in the list of pending changes.

If you're an ​SIA​ administrator, you can deploy all configuration changes or a specific change. For example, you could deploy changes associated with a component such as locations or you can select a specific change.

If you're a delegated or strict delegated administrator, you can deploy configuration changes related to the locations, policies, and lists that you added or that you have permission to manage.

The deploy operation for a location, policy, list, ​ETP Client​ configuration, or for local bypass settings typically completes in 20-30 seconds. If you are deploying an IdP, the deploy operation for the IdP takes three to five minutes. An administrator can deploy the specific configurations they are allowed to deploy. A progress bar appears when deploying an IdP.

An ​SIA​ administrator can revert changes to return to the settings that were previously deployed. A delegated or strict delegated administrator can revert changes for the locations, policies, and lists they created or are allowed to manage. Keep in mind that if multiple administrators modified the same item, such as a specific policy or location, a revert operation automatically removes all pending changes that are associated with it.

As part of the deployment process, administrators need to confirm their changes. This process involves commenting on the deployed changes. These comments are logged on the Deployment History tab where an administrator and any ​SIA​ user can track the changes that were deployed to the network. The list of changes and the administrators who made them are shown in the deployment history.

Deploy configuration changes

If you do not deploy configuration changes when you save them in ​SIA​, they are in a pending state until you deploy them.

Before you begin

You need to be an ​SIA​ administrator to perform this task. If you are a delegated administrator or tenant administrator, you can only deploy the changes you made or that were applied to the locations, policies, and lists you can manage.

To deploy configuration changes to the ​SIA​ network:

1. From any page, click Pending Changes.

2. Review the changes. If necessary, expand the details for a category of settings to view the associated changes. For example, if locations are listed, you can click the arrow icon to show the specific location changes submitted by you or another administrator.

3. Select the specific changes that you want to deploy.

4. Click Deploy.

5. Enter a comment to describe the changes included in the deployment, and click Deploy. A progress bar in the Pending Changes window shows when the process is complete.

View deployment history

After any deployment, you can view the changes, the administrator who made them, and any comment that was provided with the deployed changes.

To view deployment history:

1. In the Threat Protection menu of Enterprise Center, select General Settings > Deployment History.

2. Locate the history that you want to view based on time of deployment, administrator who deployed the changes, and the provided comment.

3. Expand the history to view changes. Depending on the changes submitted, there may be additional sections that you can expand to view modified settings.

Revert configuration changes

You can revert a configuration change that is currently in a pending state. If you revert a change in a configuration area where multiple administrators made a modification, all changes pending for that configuration area are reverted.

Before you begin

You need to be an ​SIA​ administrator to perform this task. An ​SIA​ administrator can revert any pending change. If you are a delegated or strict delegated administrator, you can revert the changes that you submitted or that other administrators submitted for the locations, policies, and lists that you are allowed to access.

To revert configuration changes:

1. Click Pending Changes.

2. Go the change that you want to revert. If necessary, expand the details to view the changes associated with a specific ​SIA​ component. For example, if Locations are listed, you can click the arrow icon to show the specific location changes that were submitted by you or another administrator.

3. Select the change or changes that you want to revert.

4. Click Revert.

5. Click Revert confirm the revert operation.