You can add a device profile in two different ways, depending upon which platform you are making the profile for.
The following profile settings and options apply to most platforms under Workspace ONE UEM and can be used as a general reference. However, some platforms can offer different selections.
Navigate to Resources > Profiles & Baselines > Profiles > ADD.
You can select from among the following options to add a profile.
Select Add Profile.
Select the appropriate platform for the profile you want to deploy. Depending on the platform, the payload settings vary. For more information, see the Tech Preview: Add a Device Profile in the next section.
Complete the General tab by completing the following settings.
|Name of the profile to be displayed in the Workspace ONE UEM console.
|Read-only text box that reports the current version of the profile as determined by the Add Version.
|A brief description of the profile that indicates its purpose.
|OEM Settings (Android Only)
|Enable to configure profiles specific to Zebra and Samsung devices. When enabled, the profiles are noted with a Knox symbol to indicate available settings specific to Knox. Two new profiles appear: Date/Time and APN and are specific to Knox. This option only appears when configuring Android profiles.
|Select OEM (Android Only)
|Select the OEM Samsung or Zebra. This option only appears when configuring Android profiles.
|Determines if the profile is automatically removed upon unenrollment (does not apply to Android profiles).
|- Managed – The profile is removed.
|- Manual – The profile remains installed until removed by the end user.
|Profile Scope (Android or Windows Rugged Only
|Determines how the profile is used. Select from the following.
|- Production – The profile is to be used as part of product provisioning.
|- Staging – The profile is to be used in staging configurations.
|- Both – The profile is to be used in both staging and provisioning.
|Determines how the profile is deployed to devices.
|- Auto – The profile is deployed to all devices.
|- Optional – An end user can optionally install the profile from the Self-Service Portal (SSP), or it can be deployed to individual devices at the administrator’s discretion.
End users can also install profiles representing Web applications, using a Web Clip or a Bookmark payload. And if you configure the payload to show in the App Catalog, then you can install it from the App Catalog.
|- Interactive – (Does not apply to iOS or Android). This profile is of a unique type that end users install with the Self Service Portal. When installed, these special types of profiles interact with external systems to generate data meant to be sent to the device. This option is only available if enabled in Groups & Settings > All Settings > Devices & Users > Advanced > Profile Options.
|- Compliance – The profile is applied to the device by the Compliance Engine when the user fails to take corrective action toward making their device compliant. For more information, see Compliance Profiles.
|(iOS 7 and below only) Determines whether the end user can remove the profile.
|- Always – The end user can manually remove the profile at any time.
|- With Authorization – The end user can remove the profile with the authorization of the administrator. Selecting this option adds an account Password text box.
|- Never – The end user cannot remove the profile from the device.
|The organization group with administrative access to the profile.
|Refers to the group to which you want the device profile added. Includes an option to create a new smart group which can be configured with specs for minimum OS, device models, ownership categories, organization groups and more.
While Platform is a criterion within a smart group, the platform configured in the device profile or compliance policy always takes precedence over the smart group’s platform. For instance, if a device profile is created for the iOS platform, the profile is only assigned to iOS devices even if the smart group includes Android devices.
|If Yes is selected, a new text box Excluded Groups displays. This text box enables you to select those groups you want to exclude from the assignment of the device profile.
|View Device Assignment
|After you make an Assigned Group selection, you can preview a list of all assigned devices, taking the smart group assignments and exclusions into account.
|Additional Assignment Criteria
|These check boxes enable additional restrictions for the profile.
|- Install only on devices inside selected areas. – Enter an address anywhere in the world and a radius in kilometers or miles to make a ‘perimeter of profile installation’. For more information, see Geofence Areas.
|- Enable Scheduling and install only during selected time periods – Specify a configured time schedule in which devices receive the profile only within that time-frame. Selecting this option adds a required text box Assigned Schedules. For more information, see Time Schedules.
|The date in the future when the profile is removed from the device, formatted as MM/DD/YYYY.
Configure a Payload for the device platform. You can search for a payload by name by entering keywords in the Find Payload text box above the Payload listing.
For step-by-step instructions on configuring a specific Payload for a particular platform, refer to the applicable Platform Guide, available on docs.vmware.com.
Select Save and Publish.
Note: Workspace ONE UEM offers support for an advanced UI for making a new device profile as a technical preview. Technical preview features are not fully tested and some functionality might not work as expected. However, these previews help Workspace ONE UEM improve current functionality and develop future enhancements. To use a technical preview feature, contact your VMware representative.
In the Workspace ONE UEM console, follow the same navigation path for each profile. The Preview section shows you Total Assigned Devices with a list view. You can see the added profiles on the Summary tab.
Searching Device Profile Settings
You can search for device profile information in multiple ways. You can search for the name of the setting, the setting description, tooltips, payload subcategory labels, and platform qualifiers which appear in bubbles to the right of the settings.
If your search keywords are found in multiple subcategories, the results are summarized showing you how many hits each subcategory has. You can click these subcategories to jump directly to the setting.
To Add a Device Profile, take the following steps.
Configure the settings.
|Name your profile and add a description that is easily recogizable to you.
|Set how the profile is used in your enviroment, either Production, Staging, or Both.
|Turn on OEM settings to configure specific settings for Samsung or Zebra devices. Once you select the OEM, additional profiles and settings display that are unique to either OEM.
Select the ADD link to the right of the desired profile label and configure the settings as desired. You can use the drop-down and preview profile settings before selecting add.
Configure the following settings.
|Select a smart group from the drop-down list, which is visible to you once you click this text box. Devices assigned with the smart group you select here will get your device profile installed.
|When enabled, a new text box Exclude Group displays. This text enables you to select those groups you want to exclude from the assignment of the device profile.
|Determines how the profile is deployed to devices.
Auto – The profile is deployed to all devices.
Optional – An end user can optionally install the profile from the Self-Service Portal (SSP), or it can be deployed to individual devices at the administrator’s discretion. End users can also install profiles representing Web applications, using a Web Clip or a Bookmark payload. If you configure the payload to show in the App Catalog, then you can install it from the App Catalog.
Compliance – The profile is applied to the device by the Compliance Engine when the user fails to take corrective action toward making their device compliant.
|Select a customer type organization group with administrative access. Selecting non-customer type OGs is not an option.
|Install Area Only
|Enable to display geofencing option which means install only on devices inside selected areas. Enter an address anywhere in the world and a radius in kilometers or miles to make a ‘perimeter of profile installation’.
|Schedule Install Time
|Enable to configure time schedule settings which means install only during selected time periods. Specify a configured time schedule in which devices receive the profile only within that time-frame.
Select Save and Publish.