When will Cisco DNA Center apply changes to a network device?

Cisco DNA Center applies changes to a network device when the device is assigned to a site and device controllability is enabled. Site assignment organizes devices logically within the network hierarchy, and enabling device controllability grants DNA Center the necessary permissions to push configurations and manage the device. Without both conditions, DNA Center cannot reliably or securely apply changes. Adding device credentials alone is insufficient; credentials allow DNA Center to access the device but don't authorize management actions. Discovering the device and enabling controllability is close, but discovery only adds the device to the inventory; it doesn't place it within the management context of a site, which is crucial for policy application. Configuring a NETCONF port is a prerequisite for some programmatic interactions but doesn't, by itself, trigger DNA Center to apply changes.