check-circle-line exclamation-circle-line close-line


Configure filters in workflows to recognize the desired state change and configure actions to remediate the filtered state changes. Filters identify IF something happens (state change). When the system identifies the IF, actions THEN execute to fix or report the change.

Use a template or create your own workflow with this task.


If you run bulk APIs for Workspace ONE UEM actions, adjust applicable bulk management settings in the Workspace ONE UEM console.

For example, if you want to use the Add a Tag action on 35,000 devices, change the default value for Assign/Unassign Tag from 500 to perhaps 50,000. This overage covers running 35,000 APIs simultaneously when you save a workflow.

Find the Bulk Management settings in the Workspace ONE UEM console at Groups & Settings > All Settings > Devices & Users > Advanced > Bulk Management.


  1. In the Workspace ONE Intelligence console, navigate to Automations > Add Automation.
  2. Select a category and Create Your Own workflow for the category by selecting Get Started.
  3. In the Add Automation procedure, configure the settings.
    1. Name - Enter a name for the automation.
    2. Trigger (When) - This item is pre-filled based on the category.
    3. Filter (If) - Create an If statement to refine the trigger the engine monitors for a state change.
    4. Action (Then) - Create a Then statement that the automation engine does when it identifies the If or trigger. Choices for Action (Then) include the listed services. You can select one or all of them and create as many actions as needed.
      • Workspace ONE UEM: Select an action for Workspace ONE UEM to perform.
      • Slack-To: Decide whether the message is sent to a channel or a user. If you enter nothing, messages are sent to the default channel. For Channel, enter the channel name beginning with # (example #channel). You can send messages to public and private channels. For Users, enter the Slack user name beginning with @ (example @user) to send direct messages.
      • Slack-From: Enter the name that this automated Slack message is posted from. If you enter nothing, messages are posted from Slack's default sender.
      • Slack-Message: Enter the message. This text box supports dynamic values.
      • Slack-Avatar Icon: Enter the Slack emoji code to add a Slack icon to this automated message or a url to add an image from the Internet. If you enter nothing, the system uses the default Slack icon.
      • ServiceNow: Configure the menu items for Create Incident or Create Ticket. For either action, enter a Caller ID entry of a first and last name that exists in your ServiceNow instance. If you add a non-existent name, the text box remains blank.
  4. If you use a third-party service for actions, authorize them to act.
    1. Select Authorize to permit the service to perform actions.
    2. Select Connection Permissions and review them.
    3. Select Provide Credentials.
      • Slack Incoming Webhook URL: Enter the Webhook you configured in Slack.
      • ServiceNow-Base URL: Enter
      • ServiceNow-API User Name: Enter the user name you configured in ServiceNow.
      • ServiceNow-API User Password: Enter the password for the user name.

After you save your settings, the workflow immediately scans data and acts on filters that match the configured criteria. It then continues to monitor data for the criteria and continues to execute actions accordingly.