Configuring MDM Roles

Administrators use the MDM related roles to manage the users and their devices. While, end-users allocated to certain roles, which have device operation permissions, can manage their own devices via the MDM Console. Administrators can create roles, assign them to a user or a group of users, and edit or delete existing roles. Initially, the super tenant administrator will have to assign permissions and users to the "mdmadmin" role. Thereafter, the MDM tenant administrator will have to manage the end-users and their roles. 

Creating a role

1. On the Configurations tab in the MDM Console, click Roles.
   
   
2. Click Add Role.
   
3. Enter a name for the role.
4. Optionally, select the users to be assigned to this role. The selected users appear in the right-hand list.
   
   • If you wish to filter the user list beforehand, enter the filter word in the filter text-box (e.g., if you enter "am", only the users who have the word "am" in their names are shown).
   • If you wish to specifically select a user, click on the user's name in the left-hand list.
   • If you wish to add all the displayed users to the selected list, click → →
     
   • If you wish to remove a user from the selected list, click on the user's name in the right-hand list.
   • If you wish to remove all the selected users, click ← ←
5. Click Add.

Adding permissions to a role

Follow the instructions below to add permissions to a role:

1. On the Configurations tab in the MDM Console, click Roles. 
2. Search for a role and click Permissions in the Action column.
    
3. Select or remove the permissions as required.
   As the permissions are categorized, when the main permission category is selected, automatically all its sub-permissions will get selected. This is the same, vice versa when deselecting permissions.
4. Click Assign.

Adding users to a role

Follow the instructions below to add users to a role:

1. On the Configurations tab in the MDM Console, click Roles.
2. Search for the role and click Assign Users in the Action column.
3. Optionally, select the users to be assigned to this role. The selected users appear in the right-hand list.
   
   • If you wish to filter the user list beforehand, enter the filter word in the filter text-box (e.g., if you enter "am", only the users who have the word "am" in their names are shown).
   • If you wish to specifically select a user, click on the user's name in the left-hand list.
   • If you wish to add all the displayed users to the selected list, click → →
     
   • If you wish to remove a user from the selected list, click on the user's name in the right-hand list.
   • If you wish to remove all the selected users, click ← ←
4. Click Assign. After the users are assigned to the role, the policies associated with the role will be enforced on the end-users devices.

Inviting users in a role

Follow the instructions below to invite all the users in a role to register with MDM:

1. On the Configurations tab in the MDM Console, click Roles.
2. Search for the role and click Invite in the Action column. 
3. Click OK to confirm the invitation process. The users who have been added to this role will receive an email inviting them to register with MDM. 
   

Removing a role

Follow the instructions below to remove a role:

1. On the Configurations tab in the MDM Console, click Roles.
2. Search for the role and click Remove in the Action column. 
3. Click OK to confirm the role removal process.