Overview
When an agent is installed, it is assigned to the Site associated with the installation token. However, agents can later be moved:
From one Site to another Site
From one Account to another Account
As long as both are within the same Management Console
When agents are moved:
They are placed into the default Group of the destination Site.
All associated threat information moves with the agent.
Prerequisites
Before moving agents, ensure:
You have Account or Global scope access.
You have permissions for both the source and destination Site/Account.
If moving agents across Sites or Accounts in bulk, create an endpoint filter to target only the relevant agents.
The endpoint being moved is not configured as an AD Connector.
Migration of AD Connectors between Sites or Accounts is not supported and may cause Active Directory onboarding to fail.
How to Move Agents via the Console
Open the Scopes panel (top left of the console).
To move between Sites: select the relevant Account.
Go to Sentinels (Endpoints view).
(Optional) Load a filter if you have one prepared.
Select one or more endpoints.
Click:
Actions → Agent Actions → Move to Another SiteSelect the destination:
Choose the target Site, or
Choose an Account, then select the destination Site within it.
Click Move Agents.
Approve the action and click Move Endpoints.