pdf icon
Category Filter

User Roles and Permissions

Mobile Device Manager Plus lets administrators designate roles to users. Apart from a set of predefined roles, MDM supports customization of roles as per the needs of your organization. For each of these user-defined roles, the permission to access specific sections of MDM can be configured as Full control, Write, Read or No access, as given in the table below.

Module specific access

Enrollment
ACTION ADMINISTRATOR FULL CONTROL WRITE READ
Enroll Device (invite) Yes Yes Yes No
Enroll Device (admin) Yes Yes Yes No
Device actions (remove device, deprovision, re-assign user, etc.) Yes Yes Yes, except Apple Business Manager (ABM)/Device Enrollment Program (DEP), Zero Touch Enrollment, Knox Mobile Enrollment, Windows 10 enrollment methods No
Add/modify AD Yes Yes No No
APNs configuration Yes Yes No No
Configure enrollment settings, agent settings Yes Yes No No
Inventory
ACTION ADMINISTRATOR FULL CONTROL WRITE READ
Edit device detail Yes Yes Yes No
Device actions (scan, locate, wipe,...) Yes Yes Yes No
App blocklisting Yes Yes No No
Device scan schedule Yes Yes No No
Geotracking Yes Yes No No
Profile Management
ACTION ADMINISTRATOR FULL CONTROL WRITE READ
Create/Update profile Yes Yes No No
Move to Trash Yes Yes No No
View Trash Yes Yes No No
Delete profile Yes Yes No No
Modify profile Yes Yes No No
Distribute profile Yes Yes Yes No
Remove associated profile Yes Yes Yes No
Profile details view Yes Yes Yes Yes
App Management
ACTION ADMINISTRATOR FULL CONTROL WRITE READ
Add apps Yes Yes No No
Configure ABM/VPP Yes Yes No No
Sync ABM/VPP apps Yes Yes No No
Delete apps Yes Yes No No
Modify apps Yes Yes No No
Distribute apps Yes Yes Yes No
Update apps Yes Yes Yes No
Remove managed apps Yes Yes Yes No
Remote Control
ACTION ADMINISTRATOR FULL CONTROL WRITE READ
Add Zoho Assist account and edit login details Yes Yes No No
Remote Control/View Yes Yes Yes No
View Remote Control details Yes Yes Yes Yes
Content Management
ACTION ADMINISTRATOR FULL CONTROL WRITE READ
Add/update/delete doc Yes Yes Yes No
Distribute docs Yes Yes Yes No
Reports
ACTION ADMINISTRATOR FULL CONTROL WRITE READ
View Predefined reports Yes Yes Yes Yes
Create Scheduled reports Yes Yes Yes No
View Scheduled reports Yes Yes Yes Yes
Configure report retention period Yes Yes Yes No
Create Query report Yes Yes Yes No
View Query report Yes Yes Yes No
Modify Query report Yes Yes Yes No
Jump To