Administration Roles and Prerequisites to Manage Shift-Based Access Control in Workspace ONE Components

You need the following administrator privileges to configure shift-based access control in your Workspace ONE services.

Administrators who can configure shift-based access controls

• Workspace ONE Access super administrator. Super administrators can access and manage all features and functions in the Workspace ONE Access services.
• Hub Services super admin. Super admin can access and manage all features and functions in the Hub Services console.
• The Workspace ONE UEM administrator role must have permissions to access and configure the following.
  • Organization group’s smart groups for which they want to assign controls.
  • Apps for which they want to assign policies in Workspace ONE UEM.
  • SDK profiles to create and assign the time awareness component profile.

General prerequisites

Before you start to configure shift-based access control make sure that the following prerequisites are met.

• Hub Services deployed with Workspace ONE Experience Workflows configured.
• Workspace ONE Access tenant
  • Workspace ONE Access configured as the source of authentication.
  • Directory configured and shift-based frontline worker user groups synced to the directory. The user name in the Workspace ONE directory must match the user name in the time keeping system.
  • Web apps that are restricted identified.
• Workspace ONE UEM 2209.1.1 or later.
• Android devices with Workspace ONE Intelligent Hub version 22.11 or later installed.
• iOS devices with Workspace ONE Intelligent Hub version 22.08 or later.
• A time keeping system configured to retrieve your workers current working status.