Add or modify an administrator

Through the Knox Admin Portal, super admins can send email invitations to invite admins to the Knox Manage console.

Add an admin

To add an admin, you must first invite an admin through the Knox Admin Portal and give them access to Knox Manage. To learn more, see Manage admins and roles for Knox Services.

Once an admin has accepted your invite, you can modify their permissions for Knox Manage.

1. Go to Setting > Administrator in the Knox Manage console.

2. On the Administrator page, select an admin, then click Modify.

3. On the Modify Administrator page, you can enter or edit an admin’s name and mobile number. You can then select their role and permissions according to table below.

   Field	Value
   Admin Name	Enter the admin name.
   Mobile Number	Enter the mobile phone number of the admin.
   Role	Select the admin's role.
   Permission	Select the console pages that the admin can access. Super admins have full access to all pages. Read-only admins have irrevocable read-only access to all the pages, except Report.
   > Group	Specify whether admins can manage or view groups. For sub-admins, you can specify permissions at either the group-level or the organization-level.
   > Organization	Specify the actions the admin can perform on the Organization page: Manage (Add, Modify, and Delete). Allows the admin to add, modify, and delete organizations. Do not Manage (Add, Modify, and Delete). Gives the admin read-only access to the page. Read Only Including Other Menus. Gives the admin read-only access to the Organization, Device, User, Sync Service, and Dashboard pages.
   > Application	Determine whether the admin can manage or view the Application page.
   > Profile	Determine whether the admin can access the Profile page.
   > Content	Determine whether the admin can access the Content page.
   > Certificate	Determine whether the admin can access the Certificate page.
   > Log	Determine whether the admin can access the Log page.
   >> Device Log	Determine whether the admin can access the Device Log page.
   >> Audit Log	Determine whether the admin can access the Audit Log page.
   > Report	Determine whether the admin can access the Report page.
   > Service Desk	Limit the admin so they can only access the Knox Manage console through the mobile web app.
   Restriction	Select the features that are restricted for the admin.
   > Security Code in the Device	Restrict the admin's access to the security codes of a device. By default, all admins can view the Unlock Code, Unenrollment Code, and Exit Kiosk Code on the Device Details page.
   > Location Tracking	Restrict the admin's access to the Check Location feature for devices and groups.
   > Tag Management	Restrict the admin's access to the Manage Tag feature for devices and groups.
   > User Deletion	Restrict the admin's access to the User Deletion feature for user list.
   > Service Type	(Service admin only) Select the device commands that the admin is allowed to use: Allow All Device Command. Allows the service admin to use all device commands. Selected Device Command Only. Allows the service admin to use only certain device commands as defined by the Device Command setting.
   > Device Command	(Service admin only) Select the device commands that the admin is allowed use. You can restrict: Push Profile Lock/Unlock Device Clear Screen Lock Factory Reset Push notification Unenroll & Force Unenroll Device Delete App Data Delete Unenrolled Device

4. Click Save.

Change an admin password (super admins)

Super admins can change their account passwords and the passwords of sub-admin accounts.

To change a password:

1. Go to Setting > Administrator in the Knox Manage console.
2. On the Administrator page, click the check box for a sub-admin you want to change the password for, and then click Change Password.
3. On the Change Password screen, enter a new password.
4. (Optional) Select Reset after Sign-in to prompt the admin to reset the password after signing in.
5. Click Save.

Change an admin password (sub-admins)

The super admin sets the initial password for all users. Sub-admins must ask the super admin for an initial password for their first login. After the initial login, the Change Password screen opens, allowing sub-admins to change the password.

All admins are required to set a new password every three months. Passwords must match the following criteria:

• Passwords must have a minimum of eight characters.
• Passwords must be a combination of letters, numbers, and special characters.
• Passwords can’t contain more than two identical letters or numbers.
• Passwords can’t contain more than two consecutive numbers.

Modify an admin’s details

After you add an admin, you can modify some of their details, such as their admin name, mobile number, role, and permissions.

To modify an admin’s details:

1. Go to Setting > Administrator in the Knox Manage console.
2. On the Administrator page, select the admin whose details you want to change, then click Modify.
3. On the Modify Administrator page, edit their information.
4. Click Save.