Lesson 5 - Creating and managing your configuration profiles


  • Creating a configuration profile
  • Adding a configuration payload to profile
  • Managing your profiles

Watch the Video!

 AirWatch utilizes device profiles to remotely deploy and enable restrictions, configurations, accounts, or settings to devices. Profiles are assigned based on Smart Groups, which can in turn be based on AD User Group, Device Ownership, Operating System, Model, as well as many other assignment criteria.


The settings inside of each profile are configured in Payloads. A payload could be an Exchange ActiveSync configuration, a restriction to YouTube, a VPN configuration, etc. As a best practice, AirWatch recommends configuring a single payload per Profile to more easily manage after deployment.


Creating a new profile

When creating a new Profile, pay attention to the Organization Group you are currently operating in as it will become the new profile's Root Organization Group. The Root Organization Group determines the level of access an administrator needs to later edit the profile. The Root Organization Group also determines the Organizations Groups below that can be assigned to this profile.

    1. Click Profiles from the Getting Started Wizard or navigate to Devices > Profiles > List View.
    2. Confirm that the correct Root Organization Group is selected in the left column. The Root Organization Group determines:
      • The access an administrator needs to later edit the profile
      • The Groups below to which the profile can be assigned
    3. Click the Add button.
    • Select your device platform. In this example we will use Apple iOS.
Add Profile.JPG


Complete the fields in the General tab. A description of each field is found below.



The name of the profile to be displayed in the Web Console. Make this relevant to the payload so you can identify the profile later


A description of what the profile does, used for future reference


Managed will remove the profile when the device is unenrolled. Manual will leave the profile installed when the device is unenrolled

Assignment Type

Auto pushes out profile to all devices automatically. Optional lets the administrator manually push the profile to selected devices

Allow Removal

"Always" allows users to remove the profile. "With Authorization" allows users to remove the profile with a code created by the administrator. "Never" does not allow users to remove the profile unless the device is unenrolled.

Managed By

The Organization Group that administrators must be associated with in order to edit/delete this profile. 

Assigned Smart Groups

The Smart Groups that will receive this profile. Any devices that enroll into these groups or their child groups will receive the profile


 If you have created overlapping Smart Groups, this can be used to exclude one particular set of users or devices based on Smat Group.


Adding a configuration payload to a profile

In the section above we learned how to configure the General tab on a profile to assign the profile to devices. In this section we will add a configuration payload. Below is a table showing a few examples of configuration payloads, and you can reference the Administrators Guide for a complete listing. In this example we will configure a device Web Clip for an Apple device.

Passcode Require users to protect their devices with a passcode
Restrictions    Limit use of specific device features
Wi-Fi Settings for corporate Wi-Fi networks
Exchange Account for corporate push-based email infrastructure  
Web Clips Clickable web links in the form of an icon

1. Select the Web Clip payload from the left column.
2. Click the Configure button.
3. Enter a Label, URL and Icon for your web clip.



Once you are done making changes to the profile payload, click the Save & Publish button to make the profile effective and push down to any enrolled devices. Alternatively, if you are not done making changes to the profile and would not like to have it sent to devices at this time, clicking Save will capture the changes and allow you to make them effective at a later time.


Managing your profiles

After saving the Profile, you will now be back in your list of available Profiles. You may click the available action buttons on the right-hand side to manage Profiles on your devices.



Edit Allows customization of an existing profile
Copy Duplicate of an existing profile can be made
View Devices Devices assigned to profile can be seen as well as corresponding profile status for each device
Publish Pushes out the profile to devices that match the profile criteria
View XML View the XML code sent over the air to devices describing the application or profile
Edit Assignment Change the assignment criteria without re-publishing the profile to every assigned user
Delete Deletes the profile and removes it from devices



Have more questions? Submit a request


Article is closed for comments.