The type of an organization group can have an impact on what settings an admin can configure.

  • Global – The top-most organization group. Usually, this group is called Global and has type Global.
    • For hosted SaaS environments, you are not able to access this group.
    • On-premises customers can turn on Verbose logging at this level.
  • Partner – Top-level organization group for partners (third-party resellers of Workspace ONE UEM).
  • Customer – The top-level organization group for each customer.
    • A customer organization group cannot have any children/parent organization groups that are of the customer type.
    • Some settings can only be configured at a Customer group. These settings filter down to lower organizations. Some examples of such settings include autodiscovery email domains, Volume Purchase Program settings, Device Enrollment Program settings (before AirWatch 8.0), and personal content.
  • Container – The default organization group type.
    • All organization groups beneath a customer organization group must be of the container type. You can have containers between Partner and Customer groups.
  • Prospect – Potential customers. Similar to a customer organization group. Might have less functionality than a true customer group.

There are additional Organization Group types such as Division, Region, and the ability to define your own Organization Group type. These types do not have any special characteristics and function identically to the Container Organization Group type.

Adding Devices at Global

The Global organization group (OG) is designed to house Customer and other types of OGs. Given the way inheritance works, if you add devices to Global and configure Global with settings intended to affect those devices, you are also affecting all the Customer OGs underneath. This undermines the benefits of multitenancy and inheritance.

For more information, see Reasons You Should Not Enroll Devices in Global.