Device Group Permissions

SOTI MobiControl allows you to restrict permissions of a user, group, or role to specific device groups. Using device group permissions is beneficial in organizations with discrete departments. For example, if you have one support team in Paris, France overseeing your European devices and another team in Lagos, Nigeria supporting your African devices, with a device group tree that reflects that structure, you can use device group permissions to grant the French team full access to only the European devices and the Nigerian team full access to only the African devices.

When changing permissions for roles, you can select an Allow or Deny check box for any permission on the list. The selected check box is rendered as a blue check mark. The cleared check box is rendered as a gray square contour.

Users and groups inherit permissions from the roles they are assigned to. The inherited Allow and Deny options are rendered as solid blue squares. You can select an Allow or Deny check box for any permission on the list. This selection removes inheritance form the role. The explicitly selected (not inherited) check box is rendered as a blue check mark. The cleared check box is rendered as a gray square contour.

Note: The permissions are hierarchical, which is visually communicated by multi-level indentations in the permission list. When you edit a given permission, the change automatically affects permissions hierarchically related to the edited one. This is immediately reflected in the permission list shown on the page.

Manage Devices

Configure Advanced Settings Allows entity to apply advanced settings to devices.
Manage Devices Allows entity to perform actions on devices.
Manage Notes Allows entity to create and manage notes for devices.
Access Location Services Allows entity to locate and track devices.
Send Action Commands Allows entity to execute device actions.

You can use the Send Action Commands permission to block or allow all device actions or set permissions based on specific device actions. See Available Device Actions for details on each device action.
Modify Device User Allows entity to change user details assigned to a device.
Edit Custom Attribute Values Allows entity to change the values of custom attributes for device.

Manage Groups

View Groups Allows entity to view device groups.
Target Groups Allows entity to apply settings (profiles, rules, etc.) to device groups.
Manage Groups Allows entity to perform actions on device groups.
Configure Group Permissions Allows entity to configure group permissions.

Remote Control Devices

Remote Control Devices Allows entity to remote control devices.
View Files Allows entity to view device files.
Update Files Allows entity to save changes to device files.
View Registry Allows entity to view the device registry.
Update Registry Allows entity to save changes to the device registry.
View Tasks and Services Info Allows entity to view what applications are currently running on the device.
Edit Tasks and Services Allows entity to stop device tasks.
View System Info Allows entity to view device system information (RAM, CPU usage).
Run Command Prompt Allows entity to open the command prompt.
Remote Control Scripting Allows entity to use scripts.
Send Keyboard/Mouse Input Allows entity to send keyboard and mouse control to the device.
Control Without Notification Allows entity to remote control devices without letting device operators know.