Protect Sophos Fusion users and check device assignment
There are two documented actions for an existing Sophos Fusion (formerly Sophos Central) user: send a setup link for the required protection type and review the devices associated with the user. The current Sophos pages assigned to this article don’t document merging logins or manually recalculating license usage.
This boundary matters. A device association doesn’t prove that two user identities should be merged. Don’t delete a user or device object merely to correct an apparently inaccurate license count.
Choose the appropriate path
- An existing user needs to protect a device: Send a setup link and select only the required protection type.
- A device assignment is unclear: Open the user’s Devices tab and compare the device type and operating system.
- Duplicate logins or an unexpected license count: Document existing user and device associations first. The functions evidenced here don’t provide an approved merge or license-correction procedure; escalate the case to Sophos Support if it remains unclear.
Check before making a change
The user needs local administrator privileges on the device and internet access to use a setup link. If your license offers more than one protection type, deliberately select only the protection that is required.
Also record the username, email recipient, and already associated devices. Device views can help distinguish similarly named users, but they don’t replace positive identity verification. Keep a personal user, service account, and shared workstation separate unless their identity has been established beyond doubt.
Protect an existing user
- Open My Environment > Users & Groups.
- On Users, select one or more existing users.
- Select Email Setup Link at the top right.
- In the dialog, select the required protection type if the license offers more than one.
- Send the link.
The recipient runs setup on the intended device. This method isn’t suitable without local administrator privileges and internet access.
Review associated devices
- Open My Environment > Users & Groups.
- On Users, select the user concerned.
- Open the Devices tab.
- Compare the device type and operating system with the expected device.
The tab also shows servers the user has connected to through Remote Desktop Services. Don’t automatically interpret such an entry as a personal endpoint or a duplicate.
According to Sophos, Actions provides these device actions:
- Update Now triggers an update on the device.
- Scan Now triggers a scan.
- Diagnose runs the Sophos Diagnostic Utility on the device.
- Delete removes the device from Sophos Fusion. Central stops managing it, but this doesn’t uninstall the Sophos software.
Handle duplicate logins and license discrepancies safely
The two evidenced views show which user should receive protection and which devices are associated with a user. They don’t explain how to move or merge login objects, and they don’t promise a particular change in the license count.
Use a conservative process:
- Record both user profiles and their Devices tabs.
- Compare device type and operating system with the real inventory.
- Check whether the user is a service account or a device is an RDS server or shared device.
- Don’t delete users or devices based only on similar names.
- Interpret the license display using the documented licensing model: How is Sophos Fusion licensed?.
- If identity or license impact remains unclear, give the recorded baseline to Sophos Support instead of experimenting with undocumented merge behavior.
Validate success and recover safely
After setup, open the Devices tab again. If the expected device is shown with the appropriate device type and operating system, the view confirms the current association. If it is missing, the assigned sources establish neither an installation failure nor a specific association time. First check internet access, local installation privileges, and the selected protection type; then compare the Devices tabs of other users who are concrete candidates.
If Delete was selected accidentally, at least the Sophos software wasn’t uninstalled by that action. Don’t perform further deletions, record the device state, and ask Sophos Support for the supported route back into management.
An unchanged license count on its own doesn’t prove that setup or device assignment failed. The assigned sources specify neither an update interval nor a guaranteed license change.