IBM Security MaaS360

 View Only
  • 1.  Is it possible to automate policy assignment on enrollment?

    Posted Wed July 22, 2020 11:20 AM
    We are beginning to enroll cell phones into MDM. Previously it was just iPads. We have 2 policies per device type. Android cell phone, iPhone, iPad. I have configured compliance rules and assigned them to groups. I would like to have the security policies applied automatically based on group also. Is this possible? or is there another mechanism for automating policy assignment? I want minimize the steps needed from the help desk when cell phones are deployed.

    ------------------------------
    TYSEN SAUTER
    ------------------------------


  • 2.  RE: Is it possible to automate policy assignment on enrollment?

    Posted Wed July 22, 2020 04:51 PM

    Hi Tysen,

    You can certainly have policies assigned to groups - we offer both User Group and Device Group assignment.  Based on the above information it sounds like you'll want Device Groups.  If you navigate to Devices-->Groups-->Add--> Device Group.  You'll then be presented with an Advanced Search screen where you can define the membership attributes for the group.  There are checkboxes for Smartphones and Tablets and you can then narrow things down even more with the search modifiers (looking for devices running iOS v.s Android, for example). 

    Once the group is created and saved it will have an action menu in which you can "Change Policy."  The default option applies the policy only to devices that reside in the group at the time of the action, but there is a checkbox at the bottom to apply to all future devices which should satisfy your use case.  Please feel free to reach back out if you have any additional questions.



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 3.  RE: Is it possible to automate policy assignment on enrollment?

    Posted Wed July 22, 2020 05:38 PM
    Hi Matt,

    I have the group created and it is being dynamically populated based off AD User group. When I go to the change policy work flow I can set the policies but there is not a check box to apply to future.


    ------------------------------
    TYSEN SAUTER
    ------------------------------



  • 4.  RE: Is it possible to automate policy assignment on enrollment?

    Posted Wed July 22, 2020 07:38 PM
    Thanks for that info Tysen - would you mind sending me a direct email with your account #?  I'd like to check a couple of items on the back end to troubleshoot a bit more. ​

    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------