High-level system administrators can choose what lower-level admins can and cannot access in SureMDM, based on three criteria.
- Device Groups
- Roles
- Jobs
Steps to define SureMDM admin privileges based on role
The system administrator can choose to permit lower-level admins to perform specific roles, like remotely installing applications on enrolled devices.
1. Login to the SureMDM Web Console.
2. Click the Settings icon at the top right of the console.
3. Click the User Management.
4. On User Management screen, select the Roles tab and click Add.
5. On the Roles prompt, give a name and description to the new admin, select the SureMDM function(s) you want to allow and click on Create.
6. Once saved, go to the Users tab, and click Add User.
7. Fill out the required information including Username and Password for the new admin and under Roles, select the created role.
8. Click Create.
Now when the new admin user logs in using the created credentials, s/he will only have access to the specified functions allowed by the high-level administrator .
Steps to create SureMDM admin privileges based on device groups
Note: These admins will have permissions to manage only specified groups and sub-groups.
1. Login to the SureMDM Web Console.
2. Click the Settings icon at the top right of the console.
3. Click User Management.
4. On the User Management screen, select the Device Group Set tab and click Add.
5. On the Device Groups prompt, give a name and description to the new admin . Then, deselect group(s) that are to be hidden from the user and click Save.
Note: Select the Automatically Allow New Groups Added In Future option if you want to automatically allow the user to have admin privileges for new groups created in the SureMDM account.
6. Once saved, go to the Users tab and fill out the required information including Username and Password for the new user. Under Allowed Device Groups, select the created Device Group Set.
7. Click Create.
Once the new admin user logs in using the created credentials, s/he will only be able to manage the specified group(s) allowed by the high-level administrator.
Steps to create SureMDM admin privileges based on jobs
Note: These admins will have access to apply only specified groups of jobs on enrolled devices.
1. Login to the SureMDM Web Console.
2. Click the Settings icon at the top right of the console.
3. Click User Management.
4. On the User Management screen, select the Job Folder Set tab and click Add.
5. On the Job Folders prompt, give a name and description to the new admin. Then, deselect job folder(s) which will be hidden from the user and click Save.
Note: Select the Automatically Allow New Folder Added In Future option if you want to automatically allow the user to have permissions for new job folders added in the account.
6. Once saved, go to the Users tab and fill out the required information for the new admin including Username and Password for the new user. Under Allowed Device Folders, select the created Device Folder Set.
7. Click Create.
Once the new user logs in using the created credentials, s/he will have an option to manage devices using only those jobs specified by the high-level system admin.
High-level admins also have the option to use a combination of these three types of permissions. This enables the creation of admin users with tailor-made custom permissions to help organizations establish effective and efficient mobility strategies.
Try SureMDM today to explore comprehensive endpoint management features.