Lesson 9 - Organizing your devices into groups



  • Creating a new Organization Group
  • Configuring Smart Groups
  • Configuring User Groups


Configuring Organization Groups  

 Watch the Video!

Organization Groups allow you to containerize devices, users, administrators, and settings into separate groups to simplify administration and define access. Organization Groups can be nested (similar to folders on your hard-drive) allowing you to inherit settings or device policies throughout the company or override them at any level.


Organization groups allow you to control configurations, enrollment restrictions, and content deployed to devices. This lesson will show you how to create a new Organization Group and enroll a device to it.


Creating a new Organization Group


  1. Navigate to Groups & Settings > Groups > Organization Groups > Organization Group Details
  2. Select a parent Organization Group from the Organization Group bar on the left. The currently selected group can be found at the top of the page.
  3. Select Add Child Organization Group to open the new Organization Group 
  4. Fill in the required Organization Group information:
    • Organization Group Name - The display name for the Organization Group that will be shown in the AirWatch console
    • Group ID - The activation code used by a device to enroll into this Organization Group. 
  5. Click Save.




Assigning a device to an Organization Group


In AirWatch, each device will belong to an Organization Group. Organization Group membership defines policies and privacy settings that will apply to the device. If you have registered your Email Domain for enrollment, as shown in Lesson 2, then devices will be automatically assigned to the configured Organization Group at the time of enrollment. 



Moving a device to a new Organization Group


After device enrollment, an administrator can manually move devices from one Organization Group to another. This may be required if an employee changes roles within the business or a device is transferred between employees. Once a device is moved to another Organization Group, the profiles and policies on the device will be updated to reflect the settings of the new Organization Group.

  1. Navigate to Devices > List View and type the name of the device in the search bar.
  2. Select the device Friendly Name
  3. From the Actions bar, Select More > Admin > Change Organization Group
  4. Specify the new Organization Group and click Save
Configuring Smart Groups  

 Watch the Video!


Smart Groups are custom groups of devices you define for application, profile and compliance assignment. Create logical Smart Groups based on a number of criteria, including ownership type, device platform, tags, user group, model and OS. You can configure smart groups that apply to a group of specific devices and/or users, and devices and users can belong to multiple Smart Groups. Once defined, you can reuse Smart Groups for assignment to any of your applications. Multiple Smart Groups can be assigned to a single application.


      1. Navigate to Apps & Books > Settings > Smart Groups
      2. Select Smart Groups on the bar to the left. smartGroupsGeneral.PNG
      3. Select Add Smart Group to open the new Smart Group Create_Smart_Group.JPG
      4. Name your smart group and configure the Filtering Criteria for your Smart Group. In the Filtering Criteria section, you can filter by the following options:
        • Organization Group: Select which Organization Groups should be included. Select the top-level group to include all the groups below it, or un-check it to select specific child groups.
        • User Group: Select which User Groups should be included.
        • Ownership: Select the Ownership Types that should be included.
        • Tags: Select the Device Tags that should be included. Add and manage Device Tags from the Device Details page.
        • Platform: Select the Platforms that should be included. Leave them all unchecked to include all Platforms.
        • Model: Select the Models that should be included. If you selected more than one Platform a list of all applicable Models displays.
        • Operating System: Select the Operating Systems that should be included. If you selected more than one Platform then drop-downs for each displays.
        • Enterprise OEM Version: Select the Enterprise OEM Versions that should be included.
        • Additionally, you can individually add Users and Devices into the Smart Group under Additions and exclude individual Users and Devices under Exclusions.
  • Smart Groups can also be configured by manually adding Select Users & Devices to a group. Switch the radio button at the top of the Smart Group window to enable this filtering method.
  • Click Save.
Configuring User Groups  

 Watch the Video!

To Configure a User Group, navigate to Accounts > User > User Groups. AirWatch supports the addition of Directory User Groups and Custom User Groups


To Create a Directory User Group, click Add and select Directory as Type.  Directory User Groups can only be added if you have integrated AirWatch with your Active Directory or LDAP server.

  1. Select the External Type and enter Search criteria. Confirm the Domain and Group Base DN and click the Search button UserGroups1.PNG
  2. Select the correct Group Name from the search results UserGroups2.PNG
  3. Select Organization Group Assignment to automatically assign users of the User Group to a specific Organization Group. Select the appropriate Organization Group from the drop down menu.
  4. Choose to apply the Default User Group Settings or to create Custom Settings for this User Group
  5. Click Save


To Create a Custom User Group, click Add and select Custom as Type

  1. Complete the fields for Group Name and DescriptionUserGroups3.PNG
  2. Verify the Organization Group that this User Group will be Managed By.
  3. Click Save
  4. To add users to a Custom User Group, navigate to Accounts > Users > List View, select one or more users and choose Add to User Group under Management


Alternatively, you can save time and effort by importing LDAP and AD User Groups in bulk using the Batch Import feature. Navigate to Accounts / Users / User Groups and Batch Import. Fill out the Batch Name and Batch Description. Click the Information button to download the import template. Fill out the template and choose the file and click Save to finish importing the Batch.

Have more questions? Submit a request


Article is closed for comments.