|
Web Console Device Group Permissions |
Device group permissions allow for the segregation of MobiControl management privileges based on the device tree structure. For example, a support team operating out of California may be responsible for supporting all the devices in the western states, while another team out of New York is responsible for controlling all the devices in the eastern states. Using device group permissions, the members of the two respective teams can be granted varying levels of access to the devices in their own region (i.e. full access), and those in other regions (e.g. no access).
To enable group permissions, you must first enable
the MobiControl Web Console user
security. (Please see the Console Security page.) Once the Web Console user security is enabled, select Device group permissions.
Selecting "Device Group Permissions" in the MobiControl Web Console
From the Device Group Permissionssection on the right side, user access and permissions can be customized. For instance, if a particular user needs to access everything, Full Control should be selected. Alternatively, if the user should only to be able to remote control the device, then select only that option. These security settings are applied to the device groups in theMobiControl Web Console and define what users can do at the device level.
The permissions in the group permissions page can be set at the group level, as well as the individual user level. The permissions will take the most restrictive settings.
MobiControl includes a copy feature when configuring device group permissions. With this, administrators can copy a group's configuration and paste it to another group. To do this, select a group to be copied, and click copy. Once copy has been clicked, the name of the MobiControl security user/group is shown as well as the group. After, select another group and click paste. All configurations from the copied group are now pasted into the new one.
Web Console copy and paste
After all group permissions have been set, click 
at the bottom of the device group permissions section.
Device Group Permissions
If Full Control is selected, then every permission is automatically selected.
Manage Groups
| Access Right | Description |
|---|---|
| Configure Permissions | Allow user/group to configure group permissions |
| Manage Groups | Allow user/group to right click device groups |
| Move Devices Between Groups | Allow user/group to move devices between two groups |
| View Groups | Allow user/group to view device groups |
Manage Devices
| Access Right | Description |
|---|---|
| Access Location Services | Allow user/group to locate and track devices |
| Configure Security | Allow user/group to configure device security (Lockdown, authentication) |
| Manage Devices | Allow user/group to right click devices |
| Manage Notes | Allow user/group to create and manage notes for devices |
| Manage Password | Allow user/group to reset device passwords |
| Send Action Commands | Allow user/group to send action commands (reset device, etc) |
| Send Messages | Allow user/group to send messages to devices |
| Send Scripts | Allow user/group to send scripts to devices |
| Upgrade Agent | Allow user/group to enable device upgrade |
Remote Control Devices
| Access Right | Description |
|---|---|
| Control Without Notification | Allow user/group to remote control devices without letting device operators know |
| Edit Tasks and Services | Allow user/group to stop device tasks |
| Remote Control Devices | Allow user/group to remote control devices |
| Remote Control Scripting | Allow user/group to use scripts |
| Run Command Prompt | Allow user/group to open the command prompt |
| Send Keyboard/Mouse Input | Allow user/group to send keyboard and mouse control to the device |
| Update Files | Allow user/group to save changes to device files |
| Update Registry | Allow user/group to save changes to the device registry |
| View Files | Allow user/group to view device files |
| View Registry | Allow user/group to view the device registry |
| View System Info | Allow user/group to view device system information (RAM, CPU usage) |
| View Tasks and Services Info | Allow user/group to view what applications are currently running on the device |