Similar to single-user device staging, multi-user staging (a "shared device") allows an IT administrator to provision devices to be used by more than one user.

  1. Navigate to Groups & Settings > All Settings > Devices & Users > General > Shared Device.
  2. Select Override and complete the Grouping section.

    Setting Description
    Group Assignment Mode

    Configure devices in one of three ways:

    • Select Prompt User for Organization Group to have the end user enter a Group ID for an organization group upon login.

      With this method, you have the flexibility to provide access to the settings, applications, and content of the organization group entered. Using this approach, an end user is not restricted to accessing only the settings, applications, and content for the organization group to which they are enrolled.

    • Select Fixed Organization Group to limit your managed devices to settings and content applicable to a single organization group.

      Each end user who logs in to a device has access to the same settings, applications, and content. This method can be beneficial in a retail use case where employees use shared devices for similar purposes such as checking inventory.

    • Select User Group Organization Group to enable features based on both user groups and organization groups across your hierarchy.

      When an end user logs in to a device, they have access to specific settings, applications, and content based on their assigned role within the hierarchy. For example, an end user is a member of the 'Sales' user group, and that user group is mapped to the 'Standard Access' organization group. When that end user logs in to the device, the device is configured with the settings, applications, and content available to the 'Standard Access' organization group.

      You can map user groups to organization groups on the UEM console. Navigate to Groups & Settings > All Settings > Devices & Users > General > Enrollment. Select the Grouping tab and fill in the required details.

    Always Prompt for Terms of Use Prompts the end users to accept your Terms of Use agreement before they log in to a device.
  3. Complete the Security section, as applicable.

    Setting Description
    Require Shared Device Passcode Require users to create a Shared Device passcode in the Self-Service Portal to check out devices. This passcode is different from a Single Sign On passcode or a device-level passcode.
    Require Special Characters Require special characters in the shared device passcode, which includes characters such as @, %, &, and so forth.
    Shared Device Passcode Minimum Length Set the minimum character length of the shared passcode.
    Shared Device Passcode Expiration Time (days) Set the length of time (in days) the shared passcode expires.
    Keep Shared device Passcode for minimum time (days) Set the minimum amount of time (in days) the shared device passcode must be changed.
    Prompt users to change their Shared Device Passcode x (days) before expiration

    (For iOS devices only) Set the number of days the user is reminded to change their shared device passcode before it expires.

    For best results, set a value less than the difference between the Expiration Time and minimum time you can keep the Shared Device Passcode.

    Passcode History Set the number of passcodes that are remembered by the system, providing a more secure environment by preventing the user from reusing old passcodes.
    Auto Log out Enabled Configure an automatic log out after a specific time period.
    Auto Log out After Set the length of time that must elapse before the Auto Log out function activates in Minutes, Hours, or Days.
    Enable Single App Mode

    Select this check box to configure Single App Mode, which locks the device into a single application when an end user logs in to the device. To check out a device in Single App Mode, end users log in using their credentials. When the device is checked in again, it returns to Single App Mode. Enabling Single App Mode also disables the Home button on the device.


     Single App Mode applies only to Supervised iOS devices.

    Clear Device Passcode on Logout (Android Only) This setting controls whether the current device passcode is cleared when the user logs out (checks in) a multi-user shared device.
    Clear App Data on Logout (Android Only) Select this checkbox to clear the app data when the user logs out of a shared device (checks it in).
  4. Click Save.

For specific information about provisioning devices for single-user and multi-user device staging, see the online help topics Stage a Single User Device and Stage a Multi-User Device .