Remove configurations in bulk

  • Last update on October 8th, 2025

Please note that this article is exclusively valid for the self-hosted version of Configuration Manager. 

 

You can remove a configuration simultaneously from one or multiple downstream tenants from their associated baseline.

For example, if your baseline is associated with

  • Tenant A
  • Tenant B
  • Tenant C

and you previously deployed a security setting to all three, but now want to remove it from only Tenant B and Tenant C, Configuration Manager allows you to select these specific tenants during the removal process. The configuration will then be removed from Tenant B and Tenant C, but will remain in Tenant A.

To accomplish this, the first step is configuring the Reconcile view so that only the baseline is selected, then proceed with configuration selection. 

To do so:

Step 1: select the baseline

To accomplish this, configure the Reconcile view so that only the baseline is selected, and proceed with configuration selection. To do so:

  1. Click on the textbox labeled “Select a tenant to make changes to
  2.  Select the baseline from the dropdown menu.
Select a baseline in the dropdown menu.
  1. Now, click “Apply” at the bottom of the left bar to confirm your choice.

Step 2: exclude the configuration

  1. For the configuration you wish to remove, open its “advanced options” menu.
  1. Click “Exclude from”. A list of downstream tenants associated with the baseline will appear.
Select “Exclude from.”
  1. Select the tenants you want to remove the configurations from. 

Please note that if the selected configurations already exist in the target downstream tenant(s) and differences exist, this operation will overwrite the current configurations.

 

Step 3: choose when to Sync

Now, you can either:

  • Click “Apply now” to start the Sync immediately and apply the changes 
  • Click the downwards pointing arrow to save the changes and run the Sync later