Tags classify devices so you can filter them, target them with automations, and apply monitoring policies at scale. Assign a tag and everything configured to target that tag kicks in automatically — the right automation runs, the right monitors apply.

A tag is a label on a device. On its own, it does nothing. The value comes from what's attached to it: automations that target that tag, monitors that target that tag, filters that use that tag.

When you apply a tag to a device, every automation and monitor targeting that tag immediately applies to that device. Remove the tag, and they stop applying. The tags on a device reflect its current state.

This is the core pattern in Level: tags as desired state.

Here's a concrete example. You create a tag called AV. Then:

Now the workflow is: apply AV to a device, and installation and monitoring begin. Remove AV, and a second automation uninstalls the software and the monitor stops applying. You don't touch individual devices. The tag drives the state.

Groups define your structure and control which technicians can access which devices. Tags drive automations and monitoring policies.

A device belongs to one group. It can carry as many tags as you need. Use groups to organize your devices and control access; use tags to target automations and monitors.

Tags can be created two ways: from the Workspace → Tags page, or inline from the tag picker when assigning.

When you open the tag picker on the device listing or device details, a Create new tag option appears at the bottom of the dropdown. Type a name and select a color to create the tag and assign it in one step.

Tags can be assigned from three places: the device listing, device details, and automations.

To create and assign a new tag in one step, click Create new tag at the bottom of the dropdown. This is the fastest way to tag devices in bulk.

Once applied, tags show as colored badges near the device name.

Automations can apply and remove tags as actions — this is how dynamic tagging works. See Dynamic Tagging with Automations below.

Clicking any tag badge — on the device listing, device details, or anywhere tags appear — opens a context menu with three options:

This is a fast path to tag management or scoped filtering without navigating to Workspace.

Level includes a Default Tags automation that runs automatically on enrollment. It applies SERVER and WORKSTATION tags based on each device's OS — workstation OSes get WORKSTATION, server OSes get SERVER.

These defaults are a starting point. To change the tags applied, adjust the logic, or remove the automation entirely, edit Default Tags in Automations.

Workspace → Tags shows all tags in your organization in a single table.

Each row shows:

Click Columns (top right) to show or hide columns. Available columns: Tag name, Description, Devices, Policies, Automations, Created, Created by. Tag name is always visible.

Use the Search field to filter tags by name. To delete multiple tags at once, select their checkboxes and click Delete.

Click any tag name to open its detail view. There are four tabs: Settings, Devices, Linked automations, and Linked policies.

Rename the tag, update the description, or change its color. Click Save changes to apply.

Lists every device currently carrying this tag, along with each device's group path and online/offline status.

Tags can be added and removed from the device listing or from device details directly. The Devices tab here is a read-only view of current assignments.

Shows every automation connected to this tag — whether as a trigger, an action, or a step condition. Columns: Name, Group, Step type.

Use the filter dropdown to narrow by connection type.

Shows every monitoring policy currently targeting this tag, with the policy name and creation date.

To delete a tag, select its checkbox on the Tags table and click Delete, or open the tag and delete from the tag's options menu.

Level shows a confirmation dialog before deleting. Click Delete tag to confirm.

If a tag is still linked to an automation or policy, the delete is blocked and Level shows a different dialog: "This tag is currently in use."

Click Show me details to open the tag's detail view. Use the Linked automations and Linked policies tabs to identify and remove the connections, then retry the delete.

Manually tagging every device is error-prone. A missed tag means an automation doesn't run, a monitor doesn't apply, and something slips through. The better approach: let automations handle tagging automatically.

An automation can evaluate a condition — is this device in a specific group? Is software X installed? Does a script return a particular value? — and apply or remove a tag based on the result.

A device is enrolled. An automation checks a custom field to determine whether it belongs to a managed client. If it does, it applies the AV tag — which triggers a second automation to install AV software and pulls in the monitor policy to watch AV health. If that client later becomes unmanaged, the automation removes the AV tag. The uninstall automation fires, and the monitor policy stops applying. The whole thing unwinds automatically.

Apply a RESTART TONIGHT tag to devices that need a reboot. An automation targeting that tag runs at midnight, reboots the device, then removes the tag. The action happens once, without having to remember to un-tag anything.

For details on building tag-based automations, see Automations → Triggers and Automations → Actions.

From the device listing, click Filters and select Tag to filter down to devices carrying a specific tag. You can combine tag filters with other criteria like group, OS, or online status.

Clicking View all tag targets from any tag badge's context menu does the same thing — it jumps straight to a filtered view of that tag's devices without manually setting up the filter.