Device Group Permissions

SOTI MobiControl offers you the feature to restrict permissions of a user, group, or role to specific device groups. Using device group permissions is beneficial in organizations with discrete departments. For example, assume you have one support team in Paris, France overseeing your European devices and another team in Lagos, Nigeria supporting your African devices. Then you have a device group tree that reflects the European/African device structure. You can use device group permissions to grant the French team full access to only the European devices and the Nigerian team full access to only the African devices.

When changing permissions for roles, you can select an Allow or Deny check box for any permission on the list.
Tip:

The selected check box displays a blue check mark. The cleared check box displays a gray square contour.

When you assign users and groups to a role, they inherit permissions from the role. The inherited Allow and Deny options displays as solid blue squares. You can select an Allow or Deny check box for any permission on the list. This selection removes inheritance form the role. The explicitly selected (not inherited) check box displays a blue check mark. The cleared check box displays a gray square contour.

Note: The permissions are hierarchical, which is visually communicated by multi-level indentations in the permission list. When you edit a given permission, the change automatically affects permissions hierarchically related to the edited one. This is immediately reflected in the permission list shown on the page.

Manage Devices

Configure Advanced Settings Allows device group to apply advanced settings to devices.
Manage Devices Allows device group to perform actions on devices.
Manage Notes Allows device group to create and manage notes for devices.
Access Location Services Allows device group to locate and track devices. SOTI MobiControl has removed this feature and is now part of SOTI XSight. See SOTI XSight Configuring Roles and Permissions for details.
Send Action Commands Allows device group to execute device actions.

You can use the Send Action Commands permission to block or allow all device actions or set permissions based on specific device actions. See Available Device Actions for details on each device action.

Modify Device User Allows device group to change user details assigned to a device.
Edit Custom Attribute Values Allows device group to change the values of custom attributes for device.
Configure Profiles & Policies Allows device group to view and configure Profiles and Policies, see Viewing Profiles and Policies on a Device Group.

Manage Groups

View Groups Allows device group to view device groups.
Target Groups Allows device group to apply settings (profiles, rules, etc.) to device groups.
Manage Groups Allows device group to perform actions on device groups.
Configure Group Permissions Allows device group to configure group permissions.

Remote Control Devices

Remote Control Devices Allows device group to remote control devices.
View Files Allows device group to view device files.
Update Files Allows device group to save changes to device files.
View Registry Allows device group to view the device registry.
Update Registry Allows device group to save changes to the device registry.
View Tasks and Services Info Allows device group to view what applications are currently running on the device.
Edit Tasks and Services Allows device group to stop device tasks.
View System Info Allows device group to view device system information (RAM, CPU usage).
Run Command Prompt/Terminal Allows device group to open the command prompt.
Remote Control Scripting Allows device group to use scripts.
Send Keyboard/Mouse Input Allows device group to send keyboard and mouse control to the device.
Control Without Notification Allows device group to remote control devices without letting device operators know.
Run Web Console Allows device group to access Linux Terminal and Linux Web Console on remote controlled devices.