Assigning a Profile

About this task

Assigning a profile pushes its settings down to your devices. You can assign a profile immediately after creating it or create a profile and then assign it separately.

To assign a profile to devices:


  1. In the Profiles view, click on a profile's name to open its Profile Information panel and click the Assign button from the Profile Actions list.
    You can also click > Assign beside the profile.
  2. In the Assign dialog box, configure the Device/Device Groups that you want the profile to target, the Filter Criteria that you want to use to narrow which devices it affects, and any other Options such as installation methods and schedules.
    Tip: For profiles with large packages, consider setting a package installation window that restricts the time frame in which the package will begin installation on the device.
  3. In the Assign dialog box, select the devices or device groups that you want the profile to target.
  4. Switch to the Users tab and select one or more directory services or identity provider (IdP) groups that will be used to determine which devices are assigned the profile.
    You can specify that devices belonging to a directory service or IdP group are either included in, or excluded from, profile assignment.
  5. Switch to the Filters tab and define filter criteria to further refine which devices receive the profile.
    Filter criteria use the same filtering logic as the Devices search. You can use device properties and the Apps extended property to create filters.
  6. Click Options to set installation methods and schedules.
    Supported options differ by platform.
    Installation Method Choose how the profile's content are installed on the device:
    • Automatic: the contents of the profiles are automatically installed on the device once the profile is received.
    • Self Serve: the device user chooses which configurations or packages to install.
    Network Restrictions Specify over which networks the device is allowed to download the contents of the profile.
    Minimum Battery Level Set the minimum battery level a device must exceed before it can begin profile installation.
    Store Packages Persistently When enabled, packages are stored persistently on the device
    Reinstall Every Update Schedule and Check-in When enabled, packages are reinstalled on the device on every check in.
    Uninstall Contents After Profile Revocation/Deletion When enabled, package contents are removed from the device when the profile is removed or deleted.
    Install Date Set a date and time for the package to be installed on the device. Choose which time standard to use: Device Time or UTC Time
    Custom Package Installation Schedule Set time frames during which packages can be installed. You can set multiple time frames. Click Add to add a time frame. Click Edit to edit an existing time frame.
    Assign Date Enable to select a date and time to assign the profile. If you also enable Delay to next update schedule, the profile will be assigned on the first update check in following the Assign Date.
    Disable Date Enable to select a date and time to disable the profile.
    Revoke Date Enable to select a date and time to revoke the profile.
    Custom Deployment Schedule Set time frames during which the contents of the profile can be installed. You can set multiple time frames. Click the Add button to add a time frame.
    Note: If you set both a profile assign date/time and a time frame, and the profile assign date/time does not fall within the time frame, the profile will not be automatically installed. Instead, the profile will only be deployed if the device checks in during the time frame and after the profile assign date has passed. The start of the time frame will not automatically trigger a check in.
  7. Click Save Options to return to the main Assign dialog box.
  8. When you're finished, click Assign.


Your profile will target your devices according to the specified assignment criteria.

Note: If your profile fails to install across multiple devices, it may indicate a flawed configuration or a missing dependency. Edit the profile and assign it again. Otherwise, you can use Retry Installation in the Profile Actions list in the Profile Information panel. This forces devices where the profile is Failed or was Partially Installed to attempt to reinstall the profile.