Device Group Permissions

SOTI MobiControl allows you to restrict permissions of a user, group, or role to specific device groups. Using device group permissions is beneficial in organizations with discrete departments. For example, if you have one support team in Paris, France overseeing your European devices and another team in Lagos, Nigeria supporting your African devices, with a device group tree that reflects that structure, you can use device group permissions to grant the French team full access to only the European devices and the Nigerian team full access to only the African devices.

When changing permissions for roles, you can select an Allow or Deny check box for any permission on the list. The selected check box is rendered as a blue check mark. The cleared check box is rendered as a gray square contour.

Users and groups inherit permissions from the roles they are assigned to. The inherited Allow and Deny options are rendered as solid blue squares. You can select an Allow or Deny check box for any permission on the list. This selection removes inheritance form the role. The explicitly selected (not inherited) check box is rendered as a blue check mark. The cleared check box is rendered as a gray square contour.

Note: The permissions are hierarchical, which is visually communicated by multi-level indentations in the permission list. When you edit a given permission, the change automatically affects permissions hierarchically related to the edited one. This is immediately reflected in the permission list shown on the page.

Manage Devices


Configure Advanced Settings	Allows entity to apply advanced settings to devices.
Manage Devices	Allows entity to perform actions on devices.
Manage Notes	Allows entity to create and manage notes for devices.
Access Location Services	Allows entity to locate and track devices.
Send Action Commands	Allows entity to execute device actions. You can use the Send Action Commands permission to block or allow all device actions or set permissions based on specific device actions. See Available Device Actions for details on each device action.
Modify Device User	Allows entity to change user details assigned to a device.
Edit Custom Attribute Values	Allows entity to change the values of custom attributes for device.

Manage Groups


View Groups	Allows entity to view device groups.
Target Groups	Allows entity to apply settings (profiles, rules, etc.) to device groups.
Manage Groups	Allows entity to perform actions on device groups.
Configure Group Permissions	Allows entity to configure group permissions.

Remote Control Devices


Remote Control Devices	Allows entity to remote control devices.
View Files	Allows entity to view device files.
Update Files	Allows entity to save changes to device files.
View Registry	Allows entity to view the device registry.
Update Registry	Allows entity to save changes to the device registry.
View Tasks and Services Info	Allows entity to view what applications are currently running on the device.
Edit Tasks and Services	Allows entity to stop device tasks.
View System Info	Allows entity to view device system information (RAM, CPU usage).
Run Command Prompt	Allows entity to open the command prompt.
Remote Control Scripting	Allows entity to use scripts.
Send Keyboard/Mouse Input	Allows entity to send keyboard and mouse control to the device.
Control Without Notification	Allows entity to remote control devices without letting device operators know.