Introduction
The device leaves group trigger fires when a device is removed from one of the groups you select. Use it to automate offboarding steps — revoking access, removing software, sending notifications — whenever a device departs a group.
ℹ️ NOTE: Adding non-manual triggers requires either admin status or a role with the Manage automations permission. If you can see the automation but can't add triggers, check your role's permissions with your admin. See Workspace → Permissions for details.
Device Leaves Group Trigger
Step Configuration
Select the groups this trigger watches. It fires when a device is removed from any of the selected groups.
Check the groups you want to monitor in the group picker.
Use the search field to find specific groups quickly.
Expand parent groups using the arrow to select child groups individually.
You can select as many groups as needed. The trigger fires when a device leaves any one of them.
Condition
You must select a condition to save the trigger. Choose All devices or narrow the scope further — for example, adding a Platform condition to only fire for Windows devices leaving the group.
For the full condition reference, see Trigger Conditions.
ℹ️ NOTE: The group picker in Step configuration determines which groups the trigger watches for the leave event. The Condition field is an additional filter on the device itself — both must be satisfied for the trigger to fire.
Additional Options
Expand Additional options to set an optional Trigger name and toggle the trigger on or off with the Enabled switch.
Trigger name — Replaces the default label on the pipeline trigger card.
Enabled — When off, the trigger won't fire. In-progress runs are unaffected.
FAQ
Will this trigger fire if a device is moved to a different group instead of removed entirely? Yes. Moving a device out of a watched group fires the trigger regardless of whether the device is being moved elsewhere or simply removed from the group.
What's the difference between the group picker and the Group condition? The group picker defines which groups the trigger watches for the leave event. The Group condition is an additional filter — you can use it to further restrict which devices fire the trigger when the event occurs. For example: watch the Executive group (Step configuration), but only fire for Windows devices (Platform condition).
Who can add or edit triggers on an automation? Admin users can always add triggers. Non-admin users need the Manage automations permission on their role, plus access to the automation's group. If an automation has no triggers yet, any user with group access can add the first one.