You can choose which Iru (formerly Kandji) devices Vanta monitors by excluding the Blueprints they belong to. How you do this depends on when you connected Iru.
If your setup includes a Set sync filters step, follow the steps under New connections. If you connected earlier and your setup looks different, follow the steps under Existing connections.
New connections
When you connect Iru, you can exclude devices in specific Blueprints before the first sync. For example, you can exclude test or lab fleets.
Create your Iru API token with the optional List Blueprints permission. For the full list of permissions, see Connecting Vanta & Iru.
In Vanta, go to the Integrations page, click Add integration, search for Iru, and click Connect. Follow the setup steps until you reach Set sync filters.
Select Exclude devices in selected Blueprints.
In Blueprints to exclude, choose one or more Blueprints. Once the checkbox is selected, you must choose at least one Blueprint.
Complete setup.
We remove devices in the selected Blueprints from your Computers list on the next sync without changing anything in Iru. Exclusions are saved by Blueprint ID, so renaming a Blueprint in Iru does not change them.
For new connections, you set Blueprint exclusions in the Set sync filters step, not in the Configure Scope modal.
⚠️ Note: This option requires the List Blueprints permission on your API token. Without it, we show a message instead of the Blueprint picker and sync every device. To use this option, include List Blueprints when you create your token. If you remove the permission later, your saved exclusions keep applying, but you cannot view, change, or turn them off until you add the permission back.
Existing connections
If you connected Iru before the updated setup was available, follow these steps.
If you want to scope Iru (formerly Kandji)-managed computers by which blueprints they belong to, First go to your Integrations page. Find your Iru connection under the Mobile Device Management Tools section, and click Configure Scope
Inside the modal, enable the toggle
You can then see a list of Iru blueprints and the list of devices Vanta detects for each blueprint:
Disable the blueprints that should be out-of-scope. After Vanta refreshes its data on these devices from Iru, only devices that belong to in-scope blueprints will be monitored in Vanta. Please note: This may take a few minutes or up to an hour.