Global Permissions
Global permissions determine the level of access and control that SOTI MobiControl users have within the SOTI MobiControl console. Administrators can edit permissions for users or user groups. If neither Allow nor Deny is explicitly set for a permission, the permission will default to Deny.
| SOTI MobiControl Access | Allow or deny access to the SOTI MobiControl options. If Allow is selected, every option below it will initially be set to Allow. If Deny is selected, every option below it will be set to Deny and disabled. |
| Web Console Access | Allow or deny access to the SOTI MobiControl console. |
| Manage User Security | Allow or deny users the ability to manage users. |
| View Profiles | Allow or deny users the ability to access the Profiles tab. |
| Manage Profiles | Allow or deny users the ability to edit profiles. |
| Show Absolute Device Group Paths | Allow or deny a user the ability to see the full path of a device group in the case where that user does not have view permission for the ancestors of that device group. |
| Configure Devices/Device Groups | Allow or deny users the ability to add, remove or edit device groups. |
| Manage Root Groups | Allow or deny users the ability to create root level device groups. |
| View Rules | Allow or deny users the ability to view the Rules tab. If Allow is selected, every rule option below it will initially be set to Allow. If Deny is selected, every rule option below it will be set to Deny and disabled. |
| Manage Add Devices Rules | Allow or deny users the ability to manage add devices rules. |
| Manage File Sync Rules | Allow or deny users the ability to manage file sync rules. |
| Manage Device Relocation Rules | Allow or deny users the ability to manage device relocation rules. |
| Manage Data Collection Rules | Allow or deny users the ability to manage data collection rules. |
| Manage Alert Rules | Allow or deny users the ability to manage alert rules. |
| Manage Telecom Expense Rules | Allow or deny users the ability to manage telecom expense management rules. |
| Manage Application Catalog Rules | Allow or deny users the ability to manage application catalog rules. |
| View And Deploy Packages | Allow or deny users the ability to view the Packages tab and to add packages to a profile. |
| Manage Packages | Allow or deny users the ability to upload or delete packages. |
| Manage Servers and Global Settings | Allow or deny users the ability to change server and global settings for SOTI MobiControl. If Allow is selected, every child option below it will initially be set to Allow. If Deny is selected, every child option below it will be set to Deny and disabled. |
| Manage Android Agents | Allow or deny users the ability to download Android device agents to the SOTI MobiControl database and set their compatibility status. |
| Manage Console Security | Allow or deny users the ability to turn off console security. |
| Manage Deployment and Management Servers | Allow or deny users the ability to access the context-menu actions on Deployment or Management servers in the Servers tab. |
| Configure Secure Email Access Filter | Allow or deny users the ability to create or edit Secure Email Access Filter settings from the Servers tab. |
| Manage APNS Certificates | Allow or deny users the ability to upload new APNS certificates from the Servers tab. |
| Configure Database Maintenance | Allow or deny users the ability to access the Configure Logging and Alerts Maintenance dialog box from the Servers tab. |
| Manage Directory Connections | Allow or deny users the ability to create or edit LDAP or IdP connections on the Servers tab. |
| Manage Cloud Link Agents | Allow or deny users the ability to create a Cloud Link agent or download the Cloud Link agent installer from the Servers tab. |
| Manage Certificate Authorities | Allow or deny users the ability to create or edit Certificate Authorities certificates and templates from the Servers tab. |
| Revoke Certificates | Allow or deny users the ability to revoke certificates. |
| Manage Terms and Conditions | Allow or deny users the ability to access the Terms and Conditions Manager dialog box from the Servers tab. |
| Manage Shared Files | Allow or deny users the ability to manage Shared File Browser from the console. |
| Configure Printer Administration Servers | Allow or deny users the ability to create or edit Printer Administration Server (PAS) interfaces from the Servers tab. |
| Configure Apple Device Enrollment Program | Allow or deny users the ability to create or edit additions to the Apple Device Enrollment Program (DEP). |
| Manage DEP Device Assignments | Allow or deny users the ability to reassign Apple devices enrolled in the DEP to new add devices rules. |
| Manage Android Enterprise Enterprise Bindings | Allow or deny users the ability to edit Android Enterprise Enterprise bindings. |
| Configure Content Library Policy | Allow or deny users the ability to access the Content Library tab. If Allow is selected, every child option below it will initially be set to Allow. If Deny is selected, every child option below it will be set to Deny and disabled. |
| Manage Content Library Policies | Allow or deny users the ability to create or edit Content Library policies from the Content Library tab. |
| Manage Files and Folders | Allow or deny users the ability to add or remove files from a Content Library on the Content Library tab. |
| Manage Library Path | Allow or deny users the ability to change the Content Library root folder reference from the Content Library tab. |
| View Installed Applications | Allow or deny users the ability to view the list of applications that are installed on a device. |
| View non-Managed Installed Applications (iOS only) | Allow or deny users the ability to view non-managed applications that are installed on a device (iOS only). |
| Manage KNOX Licenses | Allow or deny users the ability to access the KNOX License Manager. |
| Change SOTI MobiControl Registration Code | Allow or deny users the ability to change the SOTI MobiControl registration code. |
| Manage System and Device Alerts | Allow or deny users the ability to view and access alerts. |
| Generate and Print Reports | Allow or deny users the ability to access the Reports tab under each device section. |
| Manage Report Scheduler | Allow or deny users the ability to set up or change scheduled reports from the Reports tab. |
| Import Reports | Allow or deny users the ability to import new reports. |
| View Dashboard | Allow or deny users the ability to view the console dashboard. |
| View iOS Activation Lock Hash | Allow or deny users the ability to view the iOS Activation Lock Hash. |
| Geofence Management | Allow or deny users the ability to create, edit, or delete geofences. |
| Lookup Users and Group Membership | Allow or deny users the ability to retrieve user and group membership information. |
| Manage Device Scripts | Allow or deny users the ability to create, rename, edit, or delete scripts. |
| Self Service Portal Access | Allow or deny users the ability to access the Self Service Portal. The Self Service Portal allows users to self-manage their enrolled devices. |
| Wipe | Allow or deny users the ability to wipe their devices from within the Self Service Portal. |
| Lock | Allow or deny users the ability to lock their devices from within the Self Service Portal. |
| Unenroll | Allow or deny users the ability to unenroll their devices from within the Self Service Portal. |
| Locate | Allow or deny users the ability to locate their devices from within the Self Service Portal. |
| Send Message | Allow or deny users the ability to send messages to their devices from within the Self Service Portal. |
| Set Passcode | Allow or deny users the ability to set or clear passcodes on their devices from within the Self Service Portal. |
| Check In | Allow or deny users the ability to check in their devices from within the Self Service Portal. |