[Yandex Cloud documentation](../../../index.md) > [Yandex Security Deck](../../index.md) > [Step-by-step guides](../index.md) > [Vulnerability Management (VM)](index.md) > Managing endpoint scan schedules

# Managing endpoint scan schedules in the Vulnerability Management (VM) module

With the Vulnerability Management module interface, you can modify endpoint [scan schedules](../../concepts/vulnerability-management.md#endpoint-scan-jobs), as well as deactivate, reactivate, and delete them.

{% note info %}

To edit an endpoint scan schedule, you need the `vulnerability-manager.editor` [role](../../security/vm-roles.md#vulnerability-manager-editor) or higher.

{% endnote %}

## Editing an endpoint scan schedule {#update-scan-job}

To edit an endpoint scan schedule:

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![sd-vm-icon](../../../_assets/security-deck/sd-vm-icon.svg) **Vulnerability management**.
  1. At the top of the window, select the correct [workspace](../../concepts/workspace.md).
  1. Go to the **Scan schedules** tab, click ![ellipsis](../../../_assets/console-icons/ellipsis.svg) in the schedule row, and select ![pencil](../../../_assets/console-icons/pencil.svg) **Edit**. In the window that opens:

      1. In the **Target group** section, edit the scan settings for the [target group](../../concepts/vulnerability-management.md#scan-target-groups):

          * In the **Resources** field, select:
          
              * `All resources`: For the target group to include [targets](../../concepts/vulnerability-management.md#endpoint-vulnerability-scan-targets) residing within Yandex Cloud resources across the entire Vulnerability Management scope defined in the workspace.
              * `Selected resources`: To restrict the target discovery scope to specific Yandex Cloud resources.
          
                  Click ![circle-plus](../../../_assets/console-icons/circle-plus.svg) **Select resources** to select individual clouds and folders for analysis.
          * In the **Addresses** field, select:
          
              * `No limit`: To scan all possible paths on the discovered endpoints.
              * `Ignore addresses`: To specify addresses to exclude from scanning.
          
                  The field supports string values containing a partial path or a regular expression, e.g., `/api` or `[?&](token|auth)=([^&]+)`.
          
                  One field must contain exactly one exclusion. As you type an exclusion into the field, a new field appears automatically for your next exclusion.

      1. Under **Scan type**, select the correct [scan mode](../../concepts/vulnerability-management.md#endpoint-scanning-modes):
         
         * `Advanced attack surface analysis`: To scan for additional targets that may have been missed during the basic analysis. For more information on this scan mode, see [Advanced attack surface analysis](../../concepts/vulnerability-management.md#endpoint-advanced-analysis).
         * `Vulnerability scanning`: To perform deep signature scanning and attack testing to detect various types of vulnerabilities and threats. For more information on this scan mode, see [Deep vulnerability scanning](../../concepts/vulnerability-management.md#endpoint-deep-scanning).
         
             Optionally, click **Advanced module configuration** to select specific modules (analysis methods) to apply during deep vulnerability scanning.
      1. Under **Launch settings**, edit the basic schedule parameters:

          * In the **Run** field, select how often to run scans under the current schedule:
            
            * `Every 7 days`
            * `Every 14 days`
            * `Every 30 days`
            * Custom interval in days
          * Change the **Schedule name**.
      1. Click **Save**.

{% endlist %}

## Deactivating an endpoint scan schedule {#deactivate-scan-job}

To temporarily pause the execution of an endpoint scan schedule:

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![sd-vm-icon](../../../_assets/security-deck/sd-vm-icon.svg) **Vulnerability management**.
  1. At the top of the window, select the correct [workspace](../../concepts/workspace.md).
  1. Go to the **Scan schedules** tab, click ![ellipsis](../../../_assets/console-icons/ellipsis.svg) in the schedule's row, and select **Deactivate**.
  1. In the window that opens, confirm the deactivation of the schedule.

{% endlist %}

## Activating an endpoint scan schedule {#reactivate-scan-job}

To reactivate a paused endpoint scan schedule:

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![sd-vm-icon](../../../_assets/security-deck/sd-vm-icon.svg) **Vulnerability management**.
  1. At the top of the window, select the correct [workspace](../../concepts/workspace.md).
  1. Go to the **Scan schedules** tab, click ![ellipsis](../../../_assets/console-icons/ellipsis.svg) in the inactive schedule's row, and select **Activate**.
  1. In the window that opens, confirm the reactivation of the schedule.

{% endlist %}


## Deleting an endpoint scan schedule {#delete-scan-job}

To delete an endpoint scan schedule:

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![sd-vm-icon](../../../_assets/security-deck/sd-vm-icon.svg) **Vulnerability management**.
  1. At the top of the window, select the correct [workspace](../../concepts/workspace.md).
  1. Go to the **Scan schedules** tab, click ![ellipsis](../../../_assets/console-icons/ellipsis.svg) in the schedule's row, and select ![trash-bin](../../../_assets/console-icons/trash-bin.svg) **Delete**.
  1. In the window that opens, confirm the deletion of the schedule.

{% endlist %}

#### Useful links {#see-also}

* [Scanning application and service endpoints](../../concepts/vulnerability-management.md#endpoint-vulnerability-scanning)
* [Creating an endpoint scan schedule in the Vulnerability Management module (VM)](create-scan-job.md)
* [Running an endpoint scan in Vulnerability Management (VM)](run-scan-job.md)