Profiles Tab

---

The Profiles tab enables you to manage device configurations and push software down to your devices.

In MobiControl, a Profile is a set of configurations and software that affects devices. A profiles can contain Configurations or Packages or both.

Configurations are device settings or accounts that modify the functionality of devices. For example, depending on your platform, in Configurations, you can limit access to certain types of applications, provision security certificates or configure VPN settings among many other settings.

Packages are containers for applications, scripts or files to be installed on your devices. If you need to send an application to these devices, you must first wrap it in a package that tells MobiControl how to install the application onto your devices. MobiControl provides a standalone application, Package Studio, to easily turn your applications into packages compatible with MobiControl.

For more information on packages, see Packages Tab.

 

Note

Packages are available on the Windows Mobile/CE, Windows Desktop Classic, Windows Modern (Desktop only), Android Plus, Android for Work and Printers platforms.

 

Profiles Tab Overview

The Profiles view (tab) is divided into two panels:

The Profiles List panel, in the center, covers the majority of the screen. The Profiles List panel specifies all of the different profiles that you have created and basic information about them such as name and status.

The Profiles Information panel, on the right, is split into several partitions, each of which details a type of information regarding the Profile selected in the Profile List panel.

• Information: provides an overview of the profile selected in the Profile List panel.
• Execution Status: depending on how you assign your profiles, all your devices may not receive or implement the profiles at the same time. This section shows how many devices have installed the profile, are pending install, or have failed to install the profile.
• Configurations: lists the configurations and packages contained within the profile selected in the Profile List panel.
• Assignments: describes the criteria defined for which devices receive the profile.
• Logs: lists any events associated with the profile: when it created, assigned, revoked or modified.

Creating a Profile

Profiles can only be created for one platform at a time. Make sure you are on the correct platform tab before starting.

1. While on the Profiles tab click the Add button in the upper left, underneath the Platform tabs.
2. Enter a name and description in the dialog box that appears.

   This name and description is visible to the end-user in the Profile catalog.

3. If applicable, select the type of device this profile affects from the Type dropdown. Certain platforms have more precise device types with additional capabilities.
   • Windows Modern contains Windows Phone and Windows Desktop
   • Android Plus contains Android Plus, Samsung Knox and Android for Work
4. Switch to the Configurations tab in the dialog box
5. Click Add.
6. Choose your preferred configuration to modify and apply.

   For more information on a configuration, click the help button within each configurations dialog.

   To delete a configuration, click the Actions button in the dialog box and click Delete while the configuration is selected.

   If you have chosen a configuration that depends upon another configuration, a warning appears urging you add the required configuration to the profile.

7. After you have chosen and modified a configuration to your preference, it appears in the main dialog box. You can add multiple configurations to a single profile.
8. Switch to the Packages tab.
9. Click Add to show a list of available packages. If you have not previously added a package to MobiControl, go to Packages Tab for more information on packages.
10. [Optional] Reorder packages using the up and down arrows. Packages are installed based on order.
11. [Optional] Click Action then Define Package Dependencies to define if one package must be installed before another.
12. Click Save and Assign to assign the profile to your devices immediately or Save to save the profile for later.

After you have saved or assigned a profile, you can edit, clone, revoke, disable or delete it by selecting the profile from the Profile List panel and clicking the Action dropdown button underneath the Platform tabs.

Assigning a Profile

When you create a profile you must assign it to devices for it to affects them. You can target devices based on their device groups and then refine the target further based on Filter Criteria, LDAP Targets, or Options. Devices must meet criteria in the categories to receive the profile.

• Use Filter Criteria to add filters based on Device Property, Custom Data, Custom Attributes, or MDM Compatibility. Some filter criteria options are only available on certain platforms.
• Use LDAP Targets to include or exclude devices where the device user is a member, or is NOT a member of one or more LDAP groups. See LDAP Connections Manager for more information on configuring LDAP.
• Use Options to design how and when the profiles are installed.

See Profile Assignment Options for more information.

If you clicked Save and Assign in the Add Profile dialog box, skip to step 4.

1. Select the profile from the Profile List panel.
2. Click the Action button in the upper left, underneath the Platform tabs.
3. Select Assign Profile.
4. Choose your device group(s).
5. Use the Filter Criteria or LDAP Targets tabs to further refine the profile's target.
6. Switch to the Options tab to set an installation method and time and configure settings for Packages.
7. Click Assign

If your profile fails to install across several devices, it may indicate an incorrect configuration or a missing dependency. Edit the profile and assign again. Otherwise, you can retry the profile installation through the Action menu for the Profile. An attempt to reinstall is made on devices where the profile is Failed or Partially Installed.

Note

You can revoke or install the profile on a single device from the Profiles information panel on the Devices tab.

Cloning a Profile

Use Clone a Profile to create a profile that copies all or specific components of an existing profile.

1. Select a profile from the Profile List panel.
2. Click the Action button in the upper left, underneath the Platform tabs.
3. Select Clone Profile from the dropdown.
4. In the Clone Profile dialog box, rename the profile and deselect the properties you want to exclude from the copy.
5. Click Clone.

Setting Profile Security Permissions

You can set which users or user groups have access to modify an individual profile in MobiControl by editing the profile permissions. You can set permissions for users or user group that exist in Console Security. For more information on security permissions in MobiControl, see Security Tab.

1. Select a profile from the Profile List panel.
2. Click the Action button in the upper left, underneath the Platform tabs.
3. Select Edit Permissions from the dropdown.
4. Add a User or Group in the Profile Security Permissions dialog.
5. Click the field in the Permissions column and select the appropriate permission level.
6. Click OK.

 

Note

By default, the creator of the profile and the creator's associated console security groups are given read and write access to the profile.

Revoking a Profile

Revoking a profile allows you to deactivate a profile without deleting it completely. It removes the profile from all devices and makes it unavailable to new devices until it is reassigned.

1. Select a profile from the Profile List panel.
2. Click the Action button in the upper left, underneath the Platform tabs.
3. Select Revoke Profile from the dropdown.
4. Click Yes.

Disabling a Profile

Disabling a profile prevents it from being assigned to new devices. Devices that were previously assigned the profile retain the profile with no changes.

1. Select a profile from the Profile List panel.
2. Click the Action button in the upper left, underneath the Platform tabs.
3. Select Disable Profile from the dropdown.
4. Click Yes.

Deleting a Profile

When you are finished with a profile, you can remove it from devices and MobiControl by deleting it.

1. Select a profile from the Profile List panel.
2. Click the Action button in the upper left, underneath the Platform tabs.
3. Select Delete Profile from the dropdown.
4. Click Yes.

Note

Packages installed via profiles remain on the device if you unchecked Uninstall package contents upon profile revocation or deletion in the Options tab when you first assigned the profile.

 

Profile Assignment Options

Filter Criteria

Not all filter criteria are available for all platforms.

Filter Criteria	Description
Device Property	Create filters based on any of the following properties: Current Carrier Network Installed Applications Has Passcode Is Encrypted Manufacturer Model OS Version Home Carrier Network Total External Storage Total Memory Total Storage
Custom Data	Create filters based on custom data reporting. Configure your custom data settings in the Custom Data Manager, found in the Advanced Settings of the right-click menu of the Devices tab.
Custom Attribute	Create filters based on custom attributes reporting. Configure your custom attributes settings in the Edit Custom Attributes, found in the Advanced Settings of the right-click menu of the Devices tab.
MDM Compatibility	Use the pre-populated list of Android MDM APIs to filter the applicability of the profile
Extended Properties (Printer only)	Create filters based on any of the following properties: Device Location (not GPS coordinates) Firmware Version Odometer Reading Printer Model

LDAP Targets

You can include or exclude devices based on the associated user's LDAP group membership. From the dropdown, select your LDAP connection and then click Add Group to type in a user group. Click the LDAP group again to exclude the devices where the associated user is a member of the group. If you do not already have LDAP connections set up, you can configure them by clicking Manage LDAP Connections from the bottom of the dropdown. Go to LDAP Connections Manager for more information.

Options

The Options tab contains settings and information on how your profile deploys to a device. Within this tab, you can set:

Profile Installation Method and Schedule

• Installation Method: Automatic or Self Serve (device user chooses when to install the profile)
• Network Restriction: The profile only installs when it is connected to one of the checked networks:
  • LAN
  • WiFi
  • Cellular
  • Cellular While Roaming

 

Package Options

Store Packages persistently when supported by device	Packages are stored in the device's persistent storage to be re-deployed after a factory reset or a cold reboot.
Reinstall packages on every update schedule	Packages reinstall on the device every time the device checks in to the server which is generally according to the update schedule.
Uninstall package contents upon profile revocation or deletion	Packages (and their contents) are uninstalled from devices after the profile is revoked or deleted.

 

Scheduled Actions

You can delay the profile deployment until the device's next update or plan ahead and schedule a date and time for actions such as:

• Assign Date
• Install Package Date
• Disable Date
• Revoke Date