Watch the Video!
AirWatch utilizes device profiles to remotely deploy and enable restrictions, configurations, accounts, or settings to devices. Profiles are assigned based on Smart Groups, which can in turn be based on AD User Group, Device Ownership, Operating System, Model, as well as many other assignment criteria.
The settings inside of each profile are configured in Payloads. A payload could be an Exchange ActiveSync configuration, a restriction to YouTube, a VPN configuration, etc. As a best practice, AirWatch recommends configuring a single payload per Profile to more easily manage after deployment.
Creating a new profile
When creating a new Profile, pay attention to the Organization Group you are currently operating in as it will become the new profile's Root Organization Group. The Root Organization Group determines the level of access an administrator needs to later edit the profile. The Root Organization Group also determines the Organizations Groups below that can be assigned to this profile.
- Click Profiles from the Getting Started Wizard or navigate to Devices > Profiles > List View.
- Confirm that the correct Root Organization Group is selected in the left column. The Root Organization Group determines:
- The access an administrator needs to later edit the profile
- The Groups below to which the profile can be assigned
- Click the Add button.
- Select your device platform. In this example we will use Apple iOS.
Complete the fields in the General tab. A description of each field is found below.
The name of the profile to be displayed in the Web Console. Make this relevant to the payload so you can identify the profile later
A description of what the profile does, used for future reference
Managed will remove the profile when the device is unenrolled. Manual will leave the profile installed when the device is unenrolled
Auto pushes out profile to all devices automatically. Optional lets the administrator manually push the profile to selected devices
"Always" allows users to remove the profile. "With Authorization" allows users to remove the profile with a code created by the administrator. "Never" does not allow users to remove the profile unless the device is unenrolled.
The Organization Group that administrators must be associated with in order to edit/delete this profile.
|Assigned Smart Groups||
The Smart Groups that will receive this profile. Any devices that enroll into these groups or their child groups will receive the profile
If you have created overlapping Smart Groups, this can be used to exclude one particular set of users or devices based on Smat Group.
Adding a configuration payload to a profile
In the section above we learned how to configure the General tab on a profile to assign the profile to devices. In this section we will add a configuration payload. Below is a table showing a few examples of configuration payloads, and you can reference the Administrators Guide for a complete listing. In this example we will configure a device Web Clip for an Apple device.
|Passcode||Require users to protect their devices with a passcode|
|Restrictions||Limit use of specific device features|
|Wi-Fi||Settings for corporate Wi-Fi networks|
|Exchange||Account for corporate push-based email infrastructure|
|Web Clips||Clickable web links in the form of an icon|
1. Select the Web Clip payload from the left column.
2. Click the Configure button.
3. Enter a Label, URL and Icon for your web clip.
Once you are done making changes to the profile payload, click the Save & Publish button to make the profile effective and push down to any enrolled devices. Alternatively, if you are not done making changes to the profile and would not like to have it sent to devices at this time, clicking Save will capture the changes and allow you to make them effective at a later time.
Managing your profiles
After saving the Profile, you will now be back in your list of available Profiles. You may click the available action buttons on the right-hand side to manage Profiles on your devices.
|Edit||Allows customization of an existing profile|
|Copy||Duplicate of an existing profile can be made|
|View Devices||Devices assigned to profile can be seen as well as corresponding profile status for each device|
|Publish||Pushes out the profile to devices that match the profile criteria|
|View XML||View the XML code sent over the air to devices describing the application or profile|
|Edit Assignment||Change the assignment criteria without re-publishing the profile to every assigned user|
|Delete||Deletes the profile and removes it from devices|