Manage a user group
- In the management console, on the menu bar, clickGroups > User.
- Search for and click the user group that you want to manage.
- Do any of the following:TaskStepsView information about a user group.
- To view the user accounts that are assigned to the group, clickUsers.
- To view the nested groups that are assigned to the group, clickNested groups.
- To view the linked-directory groups (if available) or the assigned properties of the group, clickSettings.
Change the name or description of a user group.- Click
. - Change the name or the description of the user group.
- ClickSave.
Manage the assigned roles or profiles of the user group.- Click theSettingstab.
- To assign a role or profile to the user group, beside the appropriate section, click
.
To remove a role or profile from the user group, beside the property that you want to remove, click
.Delete a user group.- Click
. - ClickDelete.
- If you want to assign an app or app group, do the following:
- In theAssigned appssection, click
. - Search for and select the app or app group that you want to assign.
- ClickNext.
- In theDispositiondrop-down list, select one of the following:
- Required: Install the app automatically on devices and prevent users from uninstalling the app.
- Optional: Allow users to install and uninstall the app.
- Denied(Androidonly): Prevent users from installing the app.
- If you are assigning aGoogle Playapp toAndroid EnterpriseandAndroid Managementdevices, and you set theDispositionto required or optional, in theUpdate Modedrop-down list, click the appropriate option:
- Default: When a new version of the app is available inGoogle Play, the device is notified. Any restrictions or conditions from an assigned device SR requirements profile are applied to the app update.
- High Priority: When a new version of the app is available inGoogle Play, the device is notified. Any restrictions or conditions from an assigned device SR requirements profile are ignored. In larger deployments this can take up to 24 hours.
- Postpone: When a new version of the app is available inGoogle Play, the device is notified after 90 days, then the update is applied using latest available version. Any restrictions or conditions from an assigned device SR requirements profile are applied. Note that users can manually update the app at any time.
- If you are assigning anAppleVPP app, and you set theDispositionto required or optional, in theUpdate Modedrop-down list, click the appropriate option:
- Default: When a new version of the app is available, it will be pushed to devices automatically.
- Postpone: When a new version of the app is available, it will not be pushed to devices automatically.
- ForiOSdevices, to assign per-app VPN settings to an app or an app group, in thePer app VPNdrop-down list, select the settings to associate with the app or app group.
- If you assign aniOSorOS Xapp, choose the appropriate value in theTargetdrop-down list:
- Work: The app is installed as a work app that you manage withUEM.
- Personal:
- If it is not a VPP app, the app is managed byUEMand a “personal” label is associated with the assigned app in the management console. The personal label does not impact how the app is managed on devices.
- If it is aniOSorOS XVPP app with theDispositionset to Optional, the user will be redirected to theApp Storeto install the app as unmanaged. Unmanaged apps cannot be removed from devices byUEMand are not subject toUEMcontrols such as IT policy rules. When you set the app assignment as Optional and Personal, you are prompted to assign the appropriate VPP user license to devices so it can be treated as an unmanaged app. You must set “Assign license to” to “User” to make it an unmanaged app.
- If available, foriOSandAndroiddevices, in theApp configurationdrop-down list, click the app configuration that you want to assign to the app.
- If you useAndroid Enterpriseand have created tracks for apps in theGoogle Playconsole, in theTrackdrop-down list, click the track to assign to the app.
- ClickAssign.