With system-based assignments, you can assign policies based on System Tree location or tags.
System-based policies are assigned based on selection criteria you define with the Policy Assignment Builder.
All policy assignment rules require that System Tree location is specified. Tag-based policiy assignments are useful when you want all systems of a particular type to have the same security policy, regardless of their System Tree location.
Scenario: Creating new SuperAgents using tags
You have decided to create a set of SuperAgents in your environment, but you don't have time to manually identify the systems in your System Tree to host these SuperAgents. Instead, you can use the Tag Builder to tag all systems that meet a specific set of criteria with a new tag: "isSuperAgent." Once you build the tag, you can create a Policy Assignment Rule that applies your SuperAgent policy settings to every system tagged with "isSuperAgent."
Once the tag is created, you can assign the new policy. As each system with the new tag calls in at its regular interval, it is assigned a new policy based on your isSuperAgent Policy Assignment Rule.