Assigning a Profile

About this task

Assigning a profile pushes its settings down to your devices. You can assign a profile immediately after creating it or create a profile and then assign it separately.

To assign a profile to devices:


  1. In the Profiles view, click on a profile's name to open its Profile Information panel and click the Assign button from the Profile Actions list to open the Assign dialog box (see Assign (Profile)). The dialog box layout changes depending on the platform the profile pertains to.
    You can also click > Assign beside the profile.
  2. On the Devices tab, select the devices or device groups that you want the profile to target.
  3. Optional: Click the Search icon and type a complete or partial name of the device group in the text field that appears.
    If the search finds matches, the initially displayed "all groups" list is replaced with the matching groups. You can return to the "all groups" list by clicking x in the search field. If the search finds no matches, the corresponding text message appears under the search field.
  4. Switch to the Users tab and select one or more directory services or identity provider (IdP) groups that will be used to determine which devices are assigned the profile.
    You can specify that devices belonging to a directory service or IdP group are either included in, or excluded from, profile assignment.
  5. Switch to the Filters tab and define filter criteria to further refine which devices receive the profile.
    Filter criteria use the same filtering logic as the Devices search. You can use device properties and the Apps extended property to create filters.
  6. Click Options to set installation methods and schedules.
    Supported options differ by platform.
    Installation Method Choose how the profile's content are installed on the device:
    • Automatic: the contents of the profiles are automatically installed on the device once the profile is received.
    • Self Serve: the device user chooses which configurations or packages to install.
    Network Restrictions Specify over which networks the device is allowed to download the contents of the profile.
    Minimum Battery Level Set the minimum battery level a device must exceed before it can begin profile installation.
    Store Packages Persistently When enabled, packages are stored persistently on the device
    Reinstall Every Update Schedule and Check-in When enabled, packages are reinstalled on the device on every check in.
    Uninstall Contents After Profile Revocation/Deletion When enabled, package contents are removed from the device when the profile is removed or deleted.
    Install Date Set a date and time for the package to be installed on the device. Choose which time standard to use: Device Time or UTC Time
    Custom Package Installation Schedule Set time frames during which packages can be installed. You can set multiple time frames. Click Add to add a time frame. Click Edit to edit an existing time frame.
    Assign Date Enable to select a date and time to assign the profile. If you also enable Delay to next update schedule, the profile will be assigned on the first update check in following the Assign Date.
    Disable Date Enable to select a date and time to disable the profile.
    Revoke Date Enable to select a date and time to revoke the profile.
    Custom Deployment Schedule Set time frames during which the contents of the profile can be installed. You can set multiple time frames. Click the Add button to add a time frame.
    Note: If you set both a profile assign date/time and a time frame, and the profile assign date/time does not fall within the time frame, the profile will not be automatically installed. Instead, the profile will only be deployed if the device checks in during the time frame and after the profile assign date has passed. The start of the time frame will not automatically trigger a check in.
    Note: Depending on the number and size of the packages contained within a profile, the download duration of a few packages may exceed the custom deployment time frame. For example, when you trigger a package download, the package downloads completely, even if it exceeds the custom deployment time frame. Also, if a package download is interrupted when a device goes offline, the download resumes from where it left off after the device comes online.
  7. Click Save Options to return to the main Assign dialog box.
    Note: The number of devices effected during assignment is shown at the bottom of the window.
  8. When you're finished, click Assign.


Your profile will target your devices according to the specified assignment criteria.

Note: If your profile fails to install across multiple devices, it may indicate a flawed configuration or a missing dependency. Edit the profile and assign it again. Otherwise, you can use Retry Installation in the Profile Actions list in the Profile Information panel. This forces devices where the profile is Failed or was Partially Installed to attempt to reinstall the profile.