Administrator Roles

AirWatch lets you control specific roles to be applied to different administrators for different administrative purposes. In this Hands-On-Lab (HOL), you'll learn how to configure roles for your administrators.

1. Check Your Current Admin Role

Check Your Current Admin Role

Check the current role of the logged in user:

  1. Click Account button in the top-right corner of the Console.  Your email address will be listed on the button.
  2. Confirm that the current Role is HOL Administrator at your organization group.

A good strategy when creating new roles is to assign the role to yourself. That allows you to use this dropdown menu to select different roles and actually see the effects of the role you are editing!

2. Creating a new role

Creating a new role
  1. Click Accounts.
  2. Expand the Administrators dropdown.
  3. Click Roles under Administrators.
  4. Click + Add Role.

2.1. Admin Accounts Permissions

Admin Accounts Permissions
  1. Enter a unique value (such as your email address) in the Name field.
  2. Enter "HOL Lab Role" in the Description field.

    The Permissions categories are located on the left side. Each category applies to different Console functions.
    The Search Resources box located on the top right is used to look for specific permissions. By selecting a category, you can search solely within it.
  3. Expand Accounts by clicking the > to the left.
  4. Expand Administrators by clicking the > to the left.
  5. Click Accounts.

    Here you will see all the permissions relevant to the Accounts section of the Console.
  6. Check the Edit check box for the permission with the name Add/Edit..
  7. Check the Read check box for the permission with the name View.

2.2. Users Permissions

Users Permissions
  1. Expand Users by clicking the > to the left.
  2. Click Accounts.
  3. You may need to scroll down to view the necessary permissions.
  4. Check the Edit check box for the permission with the Name Add/Edit.
  5. Check the Edit check box for the permission with the Name Edit.
  6. Check the Read check box for the permission with the Name Search.
  7. Check the Read check box for the permission with the Name User Detail.
  8. Check the Read check box for the permission with the Name View.
  9. Click Save.

We have now created a role that has restricted access to permissions within Account (Administrators & Users) and Devices.

3. Adding the New Role and Attaching It To Your Admin Account

Adding the New Role and Attaching It To Your Admin Account
  1. Click Accounts.
  2. Expand Administrators.
  3. Click List View.
  4. Click the Administrator account, which will be your email address.

3.1. Add the Role

Add the Role
  1. Click the Roles tab.
  2. Click + Add Role.

3.2. Selecting the Organization Group

Selecting the Organization Group
  1. Click the Select Organization Group search field to view your Organization Groups.
  2. Click your Organization Group, which will be named after your email address.

3.3. Selecting the New Role

Selecting the New Role
  1. Click the Role search box.
  2. Click the Role that you created in the previous step.  You can scroll through the list and click your email address, or begin typing to reduce the Roles shown.
  3. Click Save.

NOTE - You may receive an email from AirWatch titled "AirWatch Administrator Personal Information Updated" noting this role change for your administrator account.  Please feel free to ignore and delete this email notification, as it is not needed for the lab.

3.4. Toggling between Roles

Toggling between Roles
  1. Click Account button in the top-right corner of the Console.  Your email address will be listed on the button.
  2. Click your current Account Role.
  3. Click the created Account Role, which will be named after your email address.

NOTE - If you are unable to change your role, you may need to refresh the page and try again.

3.5. View the Restricted Role

View the Restricted Role
  1. Notice how your screen options have changed and you only have access to a very limited number of actions in the console.

    This is a quick way to see how the Roles you have created with appear to any administrators you assign these roles to.  Let's change our Account Role back to the HOL Administrator role by following the below steps:
     
  2. Click Account button in the top-right corner of the Console.  Your email address will be listed on the button.
  3. Click your current Account Role.
  4. Click the default Account Role, which will be HOL Administrator.

NOTE - Ensure your Account Role has been changed back to HOL Administrator before continuing, as you will be unable to perform the rest of the lab module with the restricted admin role you created.

0 Comments

Add your comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.