- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Knox Guard REST API
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
Assign profiles to groups and organizations
Assign a profile to a group or an organization. You must assign a profile before applying the policies that are configured for it.
When multiple profiles are assigned to the same group or organization and one or more policies between the profiles conflict, the policy from the profile with the highest priority will apply to the group or organization. To configure profile priority, see Set up the profile priorities.
Policies from multiple profiles will apply if they don't conflict with each other. If a device belongs to both a group and an organization at the same time, the policies of the group's profiles will apply because they have priority.
You can apply profiles immediately or at a specific time.
Assigning to groups
To assign a profile to a group:
- Navigate to Profile. You can also assign a profile from the group list by navigating to Groups and selecting a group to assign. For more information, see Apply profiles to groups.
- On the Profile page, select the check box for a profile that you want to assign.
- Select Assign.
- On the Assign Profile page, click Group.
-
Select the check boxes for groups to be assigned with the selected profile.
- You can select multiple groups.
- If a group has already been assigned a profile and it is assigned to another profile, you can preview the conflicting policies from the two profiles by clicking Preview Policy.
-
Click Assign & Apply to assign and apply the profile to the selected groups at the same time.
- Click Assign to assign the profile to the selected groups and not to apply the profile now.
- In the Assign Profile window, click OK.
Assigning to organizations
To assign a profile to an organization:
- Navigate to Profile. You can also assign a profile from the organization list by navigating to Organization and selecting an organization to assign. For more information, see Assign applications to organizations.
- On the Profile page, select the check box for a profile to be assigned.
- Select Assign.
- On the Assign Profile page, click Organization.
-
Click the check boxes for organizations to be assigned with the selected profile.
- You can select multiple organizations.
- If an organization has already been assigned a profile and it is assigned to another profile, you can preview the conflicting policies from the two profiles by clicking Preview Policy.
- When a profile is assigned to an organization that has sub-organizations, the profile is applied to all the sub-organizations.
- If a sub-organization was not assigned a profile, the profile of the super organization is inherited, but the inherited profile can be overwritten with a new profile.
- If a sub-organization was assigned its own profile, then the profile of the super-organization is not inherited.
-
Click Assign & Apply to assign and apply the profile to the selected organizations at the same time.
- Click Assign to assign the profile to the selected organizations and not apply the profile now.
-
In the Assign Profile window, click OK.
NOTE — Sub-administrators who only have the Profile Managing Permission cannot assign or apply profiles to organizations. In order for sub-administrators to be able to assign or apply profiles to organizations, they need to be given both the Org and Profile Managing Permissions. For more information, see Add a sub-organization.