Admins can apply exclusions for a specific machine, but not for all devices under the customer or your global settings. This can be configured directly in the SentinelOne console by using Groups and Group-level exclusions.
1. Create a Device Group
In the SentinelOne console:
Select the customer (Site).
Click + next to the customer name to create a new Group.
Go to Sentinels, find the affected device, and move it into that Group.
2. Apply Exclusions to the Group
In SentinelOne, go to Exclusions → New Exclusion.
Choose the Site and the specific Group you created.
Add needed exclusions (file paths, processes, certificates, etc.).
Only devices in that Group will receive these exclusions.
These steps reflect Legacy EDR Exclusions Management, and confirm which mode Guardz-managed tenants actually use before writing a companion Unified-mode walkthrough.