Skip Navigation

Create a device group

  1. On the menu bar, click
    Groups > Device
    .
  2. Click The Add a device group icon.
  3. Type a name for the device group.
  4. In the
    Scope to user groups
    section, you can select one or more user groups to apply the device group to. If you don't select any user groups, the device group applies to all activated devices.
  5. In the
    Device query
    section, in the first drop-down list, click
    Any
    or
    All
    .
    If you select
    All
    , devices must match all the attributes you define to be included in the device group. If you select
    Any
    , devices need to match only one of the attributes you define to be included in the device group.
  6. In the
    Device query
    section, perform the following actions:
    • In the
      Attribute
      drop-down list, click an attribute.
    • In the
      Operator
      drop-down list, click an operator.
    • In the
      Value
      drop-down list, click or type a value.
    You can add or remove rows to focus your query.
  7. Click
    Next
    .
  8. To assign an IT policy or profile to the device group, perform the following actions:
    1. In the
      IT policy and profiles
      section, click The Add icon.
    2. Click
      IT policy
      or a profile type.
    3. In the drop-down list, click the name of the IT policy or profile that you want to assign to the group.
    4. Click
      Assign
      .
  9. To assign an app or app group to the device group, in the
    Assigned apps
    section, click The Add icon.
    You can't add
    BlackBerry Dynamics
    apps to device groups because entitlements can only be granted to users. Any
    BlackBerry Dynamics
    apps included in app groups that you add to device groups will not be assigned to users.
    You can't add
    Android
    apps that have an optional disposition to device groups in a
    BlackBerry UEM
    environment that supports
    Android Enterprise
    .
    Google Play for Work
    cannot assign apps to device IDs.
    Google Play for Work
    can assign apps only to
    Google
    User IDs. If you add
    Android
    apps that have a required disposition to a device group, the apps will be installed, but the apps will not be listed in
    Google Play for Work
    .
  10. Search for the app.
  11. In the search results, select the app.
  12. Click
    Next
    .
  13. In the
    Disposition
    drop-down list for the app or app group, perform one of the following actions:
    • If the app is an
      iOS
      or
      Android
      app: To require users to follow the actions defined for apps in the compliance profile assigned to them, select
      Required
      .
    • If the app group supports
      Android Enterprise
      , the disposition can only be set as required.
    • To permit users to install and remove the app, select
      Optional
      .
      The same app can be assigned directly to the user account, or inherited from user groups or device groups. The settings for the app (for example, whether the app is required) are assigned based on priority: device groups take precedence over user accounts and user groups.
  14. For
    iOS
    devices, to assign per-app VPN settings to an app or app group, in the
    Per app VPN
    drop-down list for the app or app group, select the settings to associate with the app or app group.
  15. For
    iOS
    and
    Android
    devices, if there is an available app configuration, select the app configuration to assign to the app.
  16. If you are using
    Android Enterprise
    and have created tracks for apps in the
    Google Play
    console, select a
    Track
    to assign to the app.
  17. Click
    Assign
    .
  18. When you are finished specifying the device group properties, click
    Save
    .