- *BASICS*
- The Knox Ecosystem
- White Paper
- Samsung Knox Portal
- Knox Cloud Services
- General Knox Support
- Knox Licenses
- *FOR IT ADMINS*
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Introduction
- How-to videos
- Get started
- Features
- Register resellers
- Add an admin
- Create profiles
- Google device owner support
- MDM compatibility matrices
- Device users
- Activity log
- Enroll and unenroll devices
- Configure devices
- Provide KME feedback
- Use the Knox Deployment App (KDA)
- Recover Google FRP locked devices using KME
- Role-based access control (RBAC)
- Release notes
- FAQs
- Troubleshoot
- KBAs
- On-Premise
- Knox Configure
- Mobile
- Wearables
- Shared Device
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- View applications
- Add applications
- Introduction
- Add internal Android and iOS applications
- Add internal Windows applications
- Add public applications using Google Play Store
- Add public applications using iOS App Store
- Add public applications using Managed Google Play Private
- Add public applications using Managed Google Play Store Private Web
- Add public applications using Microsoft Store
- Add Chrome OS applications
- Assign applications
- Introduction
- Assign internal Android and iOS applications
- Assign iOS App Store applications
- Assign Google Play applications
- Assign Managed Google Play applications
- Assign Managed Google Play Private applications
- Assigned Managed Google Play Public Web App
- Assign Windows applications
- Assign Chrome OS applications
- Manage applications
- Volume Purchase Program for iOS
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQs
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQs
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Introduction
- Accept or reject devices
- Upload devices
- Delete devices
- Complete payment
- Send payment overdue notification
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQs
- KBAs
- Support
- Samsung Care+ for Business
- *FOR RESELLERS*
- Knox Deployment Program
- *FOR MANAGED SERVICE PROVIDERS*
- Knox MSP Program
Manage Knox service admins
To streamline the admin management process, the Knox Admin Portal offers a consolidated Administrators & Roles page that allows you to invite and manage admins for multiple services.
In the left sidebar of the Knox Admin Portal, click Administrators & Roles to view a list of admins for all supported Knox services.
Administrators
The Administrators tab displays a list of all admins registered for Knox services. The list contains the following info:
- NAME — The name of the admin. The super admin, who created the enterprise's tenant, is marked with a crown next to their name. Click an admin's name to view or edit their details, including services they have access to and roles they have been assigned.
- EMAIL — The work email address of the admin.
Additionally, all currently supported Knox services are included as columns in the list. If an admin has permission to manage a service, their role and admin status is shown in the service column. In order to view the admin list for a service, a user must have a role with the Invite and manage administrators or Manage roles permission.
Invite an admin
Click INVITE ADMINISTRATOR to add a new admin. An Invite administrator page opens, where you're prompted to enter the first name, last name, email address, and service permissions for the new admin. Similar to other Knox services, you can also bulk invite admins by uploading a CSV file containing their first names, last names, and email addresses.
If an admin has not yet been invited to all available services, click INVITE TO MORE SERVICES to select services and roles for that admin.
Edit an admin
Once you've invited an admin, click their name in the administrators list to edit their details. On the Edit administrator page, you can modify the admin's first and last names, as well as their roles for each service they're invited to.
For Knox Manage, only the Sub Admin role is available for management through the Knox Admin Portal. Use the Knox Manage console to add super admins and edit, activate, or deactivate other admin types.
Roles
In the ROLES tab, you can define custom permissions for admins for each solution, or for all solutions. Above the list, the search bar lets you search for roles by name.
The roles list contains the following information:
- SERVICE — The Knox service, or services, the role applies to.
- ROLE NAME — Either Super admin or the name of a custom role, both of which you can click on. Depending on whether you click a super admin role or a custom role, the resulting pop-up shows:
- Super admin — The role details, along with a dropdown that lets you switch between services to view the permissions for each. The first admin who created the account is marked with a crown next to their name, and is also known as the account super admin.
- Custom role — The role details, its permissions, and the number of administrators assigned to it.
IMPORTANT — Custom roles for Knox Manage must be defined through the Knox Manage console instead. In the Knox Admin Portal roles list, custom Knox Manage roles are listed as Sub Admin.
- DESCRIPTION — A short phrase describing the organizational purpose of the role.
- ADMINISTRATORS — The number of administrators assigned to the role. Click a number to see a full list of the administrators and their info.
Create a role
To create a custom role, click CREATE ROLE to the right of the search bar. On the Create role page, you can select a Knox service for the role and enter a name and description for it. Based on the service you're creating a role for, various permissions are available.
When you're finished, click SAVE to complete the role creation.
Edit a role
To edit an existing role, click its ROLE NAME. Similar to the Create role page, you can enter a new role name, description, and permissions for the service. However, you can't reassign the role to another service.
Once you're finished editing, click SAVE to record your changes.
Alternatively, you can choose to delete the role. Click DELETE at the bottom of the page to remove the role from the list and remove the associated permissions for all admins who are assigned to the role. Note that this action can't be undone.