User Roles

Now that we have a device enrolled, we will look at how to configure User Roles to enable or prevent your users from performing specific actions in the Self Service Portal.

1. Adding a new Role

Adding a new Role

Return to the AirWatch Console and perform the following actions.

  1. Click Accounts.
  2. Expand Users.
  3. Click Roles.
  4. Click + Add Role.

1.1. Define Role Details

Define Role Details
  1. Enter "New Role" in the Name field.
  2. Enter "New Role" in the Description field.
  3. Click in the Default Landing Page field.
  4. Select My Devices ~/Device/List.

1.2. Choosing Role Permissions

Choosing Role Permissions
  1. Scroll down to find the Device Query, Lock Device, and Send message permissions.
  2. Un-check the box next to Device Query.
  3. Un-check the box next to Send Message.
  4. Un-check the box next to Lock Device.
  5. Click Save.

2. Allocating Permissions

Allocating Permissions
  1. Click on Accounts.
  2. Expand Users.
  3. Click on List View.
  4. Click on the pencil icon to edit the testuser account.

2.1. Assigning Role

Assigning Role
  1. Scroll down until you see the Enrollment section.
  2. Click Enrollment to expand the section.
  3. Click on User Role dropdown to see a list of available User Roles.
  4. Select the New Role role that you just created.
  5. Click Save.

Your User's Role has now been changed.

3. Viewing Role changes in the Self Service Portal (SSP)

Now that we've assigned the new role to the user we will take a look at the effect this has on the user's ability to perform actions in the Self Service Portal.

3.1. Open a New Tab

Click on the tab button in the browser to open a new tab.

3.2. Log Into the Self Service Portal

Log Into the Self Service Portal
  1. Navigate to https://hol.awmdm.com/mydevice in the new tab.
  2. Enter your Group ID in the Group ID field. This should be your email username followed by 4 digits. You used this earlier when enrolling your device.
  3. Enter "testuser" in the Username field.
  4. Enter "VMware1!" in the Password field.
  5. Click Login.

NOTE - If you see a Captcha, the input is case sensitive!

3.3. Role Changes in SSP

Role Changes in SSP
  1. Ensure the device you enrolled is selected.
  2. You may need to scroll down to see the full list of items under Basic Actions.
  3. Here you see all of the options available in the Self Service Portal to a user with the New Role we created.  Notice that Lock Device, Device Query, and Send Message do not show up in the Basic Actions screen.  Normally these options would be available to your users, but the New Role we created specifically disabled this options for our testuser account.

3.4. Logout of the Self Service Portal

Logout of the Self Service Portal

Click Logout in the top-right corner of the Self Service Portal.

3.5. Change to the AirWatch Console Tab

Click on the tab for the AirWatch Console.

3.6. Changing Users Role

Changing Users Role
  1. Click on Accounts.
  2. Expand Users.
  3. Click on List View.
  4. Click on the pencil icon to edit the testuser account.

3.7. Change User Role Back To Full Access

Change User Role Back To Full Access
  1. Scroll down until you see the Enrollment section.
  2. Click Enrollment to expand the section.
  3. Click on User Role dropdown to see a list of available User Roles.
  4. Select the Full Access role that the user initially had when they were first created.
  5. Click Save.

Your User's Role has now been changed.

3.8. Change to the SSP Tab

Click on the Browser tab for the Self Service Portal.

3.9. Log Into the Self Service Portal

Log Into the Self Service Portal

Login to the Self Service Portal again.

  1. Enter your Group ID in the Group ID field. This should be your email username followed by 4 digits. You used this earlier when enrolling your device.
  2. Enter "testuser" in the Username field.
  3. Enter "VMware1!" in the Password field.
  4. Click Login.

NOTE - If you see a Captcha, the input is case sensitive!

3.10. Full Access Roles

Full Access Roles
  1. You may need to scroll down to view all of the available Basic Actions.
  2. Notice you have access Device Query.
  3. Notice you have access to Lock Device.
  4. Notice you have access to Send Message.

Now that your User Role has been restored to Full Access, all of the default Basic Actions are available to your testuser account.

0 Comments

Add your comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.