Workspace ONE UEM Managed Content Repository

The UEM Managed Content repository refers to a location where administrators with the appropriate permissions have complete control over the files that are stored within it. Using the VMware Workspace ONE Content app, the end users can access the added content from the repository labeled UEM Managed but cannot edit the content.


Managed Content repository provides the following features:

  • Uploading of files manually
  • Options to configure and provide permissions for individual files
  • Sync options to control content accessed on end-user devices
  • List View for advanced file management options


To protect the content that is stored and synced from the repository to end-user devices, the following security features are available:

  • SSL encryption secures data during transit between the UEM console and end-user devices.
  • Roles with the security pin for controlled access to the content.


The UEM Managed repository content is stored in the Workspace ONE UEM database. You can choose to host the database in the Workspace ONE UEM cloud or on-premises, depending on your deployment model.

Configure the UEM Managed Content Category Structure

Content categories help keep the UEM Managed repository content organized in the UEM console and the Workspace ONE Content app. Configure the category structure for the UEM Managed content before uploading content to the UEM console.

  1. Navigate to Content > Categories > Add Category.
  2. Configure the settings that appear and Save.

    Settings Description
    Managed By Select the organization group or groups you want to apply the category.
    Name Enter a name that is easily recognizable and applies to a clear set of content.
    Description Provide a brief description of the category.
  3. As needed, add a subcategory to your category structure.

    a. Select Add from the Action Menu.

    b. Configure the settings that appear and Save.

    Settings Description
    Managed By Review the organization group of the parent category that populates by default.
    Name Enter a name that is easily recognizable and applies to a clear set of content.
    Description Provide a brief description of the subcategory.

Upload Content to the UEM Managed Repository

Add files to the UEM Managed Content repository by manually uploading and configuring them in the UEM console. The repository stores its content in the Workspace ONE UEM database by default, and syncs with the VMware Workspace ONE Content app, delivering content to end users’ devices. The end users, however, cannot edit the synced managed content.

  1. Navigate to Content > List View.
  2. Select Add Content and choose Select Files.
  3. Select an individual file for the upload from the dialog box.
  4. Configure content Info settings.

    Setting Description
    Name Review the filename that automatically populates in this text box.
    Organization Group Review the organization group to which this content deploys.
    File Review the file that populates in this text box.
    Storage Type Ensure that the text box displays UEM Managed.
    Version Ensure that the version number is 1.0 as you are adding this content to the UEM console for the first time. You can upload new versions from the Action menu in the UEM Managed List View.
    Description Provide a description of the files you upload.
    Importance Set the content importance as High, Normal, or Low.
    Category Map the uploaded content to a configured Category.
  5. Provide additional metadata about the content in the Details settings.

    Setting Description
    Author Name the author of the file.
    Notes Provide notes on the file.
    Subject Provide a subject.
    Keywords List keywords and topics that this file covers.

    Note: Irrespective of the number of files added on the UEM console, the metadata for only the first 10k files that are sorted alphabetically are synced on the user’s device.

Upload Workspace ONE UEM Managed Content in Batches

Use batch imports to bypass external file share integration in a dedicated SaaS or on-premises deployment with a hardened network.

  1. Navigate to Content > Batch Status.
  2. Select Batch Import.
  3. Provide a Batch Name and a Batch Description.
  4. To download a .csv template file, select the information icon ().
  5. Fill out the CSV file with the file path and other information for content you want to upload.
  6. Select Choose File and choose the .csv that you created.
  7. Select Open to select the .csv.
  8. Select Save to upload your populated Batch File.

Set Content Storage Capacity

Storage capacity refers to the amount of space allocated for managed content in an Organization Group and its child groups.

Note: You must ensure that you have the required admin privileges to view and use the storage settings.

  1. Navigate to Groups & Settings > All Settings > AdminStorage at a Customer or Global organization group level.
  2. Select Content from the Storage Type drop-down menu.
  3. Select the Edit icon for the appropriate Organization Group. The Storage Management window appears. Complete the settings.

    Setting Description
    Organization Group Name Specify the group to which you want to apply content storage restrictions.
    Capacity Set maximum storage space in MB allocated to content stored in the Workspace ONE UEM database. The default storage for Workspace ONE Content provided by VMware Workspace ONE UEM to SaaS customers is 5 GB.
    Overage Allowed Enter the amount of overage you want to allow, if any. For SaaS customers, this value is not configurable.
    Max File Size Use the default value of 200 MB as the maximum size for uploads. If operating against this recommendation, 2 GB is the upper limit.
    Encryption Encrypt the content with AES - 256 file level encryption. Enabling encryption triggers the File Encryption Migration scheduler to begin migrating any unencrypted data it finds.
  4. Select Save.

Restrict File Extensions

Specify file type permissions by creating an allowlist or denylist for Corporate File Server and Managed content. This restriction hides blocked file types based on their extension from being visible in the UEM console or within the Workspace ONE Content app and so prevents them from being downloaded or uploaded to Content Repositories.

  1. Navigate to Content > Settings > Advanced > File Extensions.
  2. Set the Allowed File Extensions.

    Setting Description
    Allow List Enter the file extensions you want to include. Separate extensions using a new line, a comma, or a space.
    Deny List Enter the file extensions you want to exclude. Separate extensions with a line break, a comma, or a space.
    All Select to allow any file type for upload or sync.
  3. Select Save to apply the configuration.

    Once restrictions are applied, you can anticipate the following responses.

    Response Who What Where Repository
    Error Message Administrator Manually adds a restricted file to the content repository Console UEM Managed
    Silent interaction Administrator Syncs with a corporate file server that contains a restricted file Console Corporate File Server
    Silent interaction End User Syncs with a corporate file server that contains a restricted file Device (throughWorkspace ONE Content app) Corporate File Server

Local File Storage for Workspace ONE UEM Managed Content

Local File Storage separates the managed content from the Workspace ONE UEM database, storing it in a dedicated, on-premises location with a connection to the Workspace ONE UEM instance.

Managed content is stored in the Workspace ONE UEM database by default. However, uploading a large volume of managed content can cause issues with the database performance. In this case, on-premises customers can free up space in the database by moving the managed content to an integrated Local File Storage solution.

Note: On-prem customers can manually configure the file storage, but for SaaS customers, it is automatically configured.

Shows how content management works for On-Prem customers.

For information about configuring the file storage, see Installation/File Path in the System Settings documentation.

Content List View Report Export in Batches

The report that you export from the ContentList View console page can often contain a bulk of records. At times, exporting such a bulk report can cause timeout issues. To prevent a timeout, the report can be split and exported in batches. Each batch, by default, can contain up to 2000 records.

By default, this feature is disabled and when disabled, you cannot export the report in batches.

Custom Reports

Using the Workspace ONE Intelligence on the Workspace ONE UEM console, you can generate custom reports to gather and view details of the managed content installed on your end users’ devices. This custom report is different from the Content Details by Device report or the report that you export from the Content > List View console page.

To generate custom reports for your content, access the Workspace ONE Intelligence interface, and select the Device Content template category. Use a device-identifying element such as a Device ID as the filter parameter.

You can generate reports specific to either a managed content or a user.

The details that you can view for the content are:

  • The total and unique number of downloads for the content in a month for a specific date range by the repository.

  • The total number of views for the content.

The details that you can view for a specific user are:

  • The total number of content downloads by the user for a specific date range by repository.
  • List of content that has not been yet viewed by the user.

  • The last downloaded date for the content.

  • List of users missing a specific (usually the most recent) version of a document.

For more information about generating reports using Workspace ONE Intelligence, see Reports for Workspace ONE Intelligence in the Workspace ONE Intelligence documentation.

check-circle-line exclamation-circle-line close-line
Scroll to top icon