Add an administrator

You can send email invitations to add super admins, sub-admins, service admins, or read-only admins to the Knox Manage console.

Add an admin

To add an admin account:

1. Go to Setting > Administrator in the Knox Manage console.

2. On the Administrator page, click Add.

3. On the Add Administrator page, enter the following information:

   • Administrator Type — Select how to add an admin:

     • New — Create a new admin account.
     • EMM User — Select an existing user to promote to the admin role.

   • Admin ID — Enter an ID for the admin.

   • Admin Name — Enter the admin name.

   • Email — Enter the admin’s email address.

   • Mobile Number — Enter the mobile phone number of the admin.

   • Role — Select the admin’s role.

   • Menu — Select the menu options that the admin can access. Super admins have full access to all menus. Read Only admins have irrevocable read-only access to all the menus, except the Report menu.

     • Group — Specify the device commands the admin can use to manage groups:

       • All device commands
       • Selected device commands

       Note

       For sub-admins, you can specify permissions at either the group-level or the organization-level.

     • Organization — Specify the actions the admin can perform on the Organization page:

       • Manage (Add, Modify, and Delete) — Allows the admin to add, modify, and delete organizations.
       • Do not Manage (Add, Modify, and Delete) — Gives the admin read-only access to the page.
       • Read Only Including Other Menus — Gives the admin read-only access to the Organization, Device, User, Sync Service, and Dashboard pages.

     • Application

     • Profile

     • Certificate

     • Audit

     • Service Desk — The admin can only access the Knox Manage console through mobile login.

     • Security Code in the Device — Select to restrict a sub-admin’s access to the security codes of a device. By default, all admins can view the Unlock Code, Unenrollment Code, and Exit Kiosk Code on the Device Details page.

     • Service Type (service admin only) — Select the device commands that the service admin is allowed to use:

       • Allow All Device Command — Allows the service admin to use all device commands.
       • Selected Device Command Only — Allows the service admin to use only certain device commands as defined by the Device Command setting.

     • Device Command (service admin only) — Select the device commands that the service admin can use:

       • Apply Latest Profiles
       • Lock/Unlock Device
       • Reset Screen Password
       • Factory Reset
       • Push notification
       • Unenroll & Force Unenroll Device
       • Delete App Data
       • Delete Unenrolled Device

4. Click Save (new admins) or Invite (Samsung accounts). Then click OK.

5. If the email address entered on this page is correct, the secondary IT admin receives an email notification. When the email recipient clicks this link, the Verify your Samsung Account details page opens, where they can verify their Samsung Account details.

6. The secondary admin then enters the appropriate details to create their new Samsung Account.

7. Upon successful completion of the account creation process, the Knox Admin Portal opens to show all relevant Knox cloud services in a single unified portal.

Change an admin password (super admins)

Super admins can change their account passwords and the passwords of sub-admin accounts.

To change a password:

1. Go to Setting > Administrator in the Knox Manage console.
2. On the Administrator page, click the check box for an admin you want to change the password for, and then click Change Password.
3. On the Change Password screen, enter a new password.
4. (Optional) Select Reset after Sign-in to prompt the admin to reset the password after signing in.
5. Click Save.

Change an admin password (sub-admins)

The super admin sets the initial password for all users. Sub-admins must ask the super admin for an initial password for their first login. After the initial login, the Change Password screen opens, allowing sub-admins to change the password.