Departmentalization based on Device Groups

Content

From 10.66 release, MaaS360 extends Departmentalization to Device Groups. With this feature, a Global Administrator can create one or more Device Group Administrators to manage specific Device Groups such as Device Groups with DEP devices, corporate owned devices, and so on. These Device Group Administrators can then perform app distribution, policy and rule-set assignments on the devices. To enable this feature, contact IBM MaaS360 Customer Support team.

You can enable Administrative Access Control to any new or existing Device Groups. It is recommended to try this new feature on a test account before making changes on your actual company account.

Configure Access Control Settings

From Setup, select Administrators under Portal Administration. Click Access Control Settings and ensure that Enable Administrative Access Control checkbox is checked and Save the setting.

How to add a new Device Group with Administrative access control?

1. From Devices > Advanced Search, enter the search criteria to perform Advanced Search and click Search.
2.  Click Create New Device Group for device list that is displayed based upon search criteria. 

3. Enter Device Group Details and check-mark Administrative access control checkbox.

4. Click Save.

Result: A new Device Group (Example-departmentalization-new-device-group) is added and this Device Group is enabled with Administrative Access Control. This means that the Device Group can now be managed by Device Group Administrator.

What to-do next: Create a Device Group Administrator to manage this Device Group.

How to enable Administrative access control for an existing Device Group?

1. From Device Groups page, select device group and click  icon to edit group name and description.

2. Check-mark Administrative access control checkbox.

3. Click Save.

Result: The Device Group (Example-departmentalization-device-groups) is enabled with Administrative Access Control.  This means that the Device Group can now be managed by Device Group Administrator.

What to-do next: Create a Device Group Administrator to manage this Device Group.

How to create a Device Group Administrator to manage Device Groups?

1. From Setup, select Administrators under Portal Administration, click Add Administrator.
2. Enter Administrator Details such as Corporate Email Address, Username and click Next.

3. Enable Limit portal administrator access to specified Managed Groups and choose Device Groups.
4. Select the Managed Device Groups that you want to assign for administrator to manage. A Device Group Administrator can manage one or more Device Groups. 

               Note: Only Device Groups that have Administrative Access Control are listed under Managed Device Groups.

5. Assign the Role Device Group Administrator, and click Next. Note: Only Device Group Administrator role can be assigned for Device Group administration.

6. Check Administrator details under Review Details and click Save.

Result: Device Group Administrator (Example-aksharass) is created and has required Role to manage Device Group (Example departmentalization-device-groups). 

What to-do next: Device Group Administrator manages the assigned Device Groups.

Actions available for Device Group Administrator to perform on Managed Device Groups

Log in to MaaS360 portal by using your administrator credentials. Device Group Administrator can perform the following actions on the managed Device Groups:

Limitations