Register a group
Last updated March 27th, 2025
To create a group of users or devices, complete the following steps:
-
Go to Group on the navigation pane.
-
On the Group page, click Add.
-
On the Add Group page, enter the following user information:
- Name — Enter a group name.
- Type — Select one of the following group types.
- User — A group composed of user accounts only.
- Directory — A group composed of users from directories only.
- Device — A group composed of enrolled devices only.
-
On the user or device list, click the check boxes next to the user IDs or device names to include them in the group. After the users or devices are selected, they will be displayed on the selected user or selected device list.
You can select additional columns to view device information in the All Devices area. You can also search for and select devices using filters. In the Selected Device area, click Select via Filter, and then click the check boxes for the filters you want to apply, such as user status, position, and security level. Filtered devices will be added to the selected device list.
-
Click Save & Assign, and in the Save & Assign window, click Application, Profile, or Content to select what to assign to the group.
- Application — Select the applications to assign to the group, and then modify the application settings.
- Profile — Select the profiles to assign to the group, and then view the selected profile details.
- Content — Select the content to assign to the group.
This document was updated for the Knox cloud services 25.04 UAT.
On this tab
You can add a manual group (which is static) or a dynamic group (which auto-updates group memberships and assignments based on pre-set criteria).
Add a manual group
-
Go to Group on the navigation pane.
-
On the Group page, click Add.
-
On the Add Group page, enter the following user information:
-
Name — Enter a group name.
-
Type — Select one of the following group types.
- User — A group of user accounts.
- Device — A group of enrolled devices.
-
Membership Type — Select Manual.
-
Sub-Administrator — Click Select, then select a sub-administrator for the group in the Select Sub-Administrator dialog, and click OK.
For an overview of administrator roles, see Administrator account overview. To add a sub-administrator for Knox Manage, see Add an administrator. Alternatively, to add a sub-administrator for all Knox services, see Manage admins and roles for Knox services in Knox Admin Portal documentation.
-
-
On the All Users or All Devices list (depending on your selected Type), select user IDs or device names to include them in the group. Selected users or devices appear under Selected User or Selected Device, correspondingly.
- You can use the search bar in the All Users or All Devices area to find records matching your search criteria.
- You can further refine your device selections in the Selected Device area: Click Select via Filter, select filters that you want to apply, then click OK.
-
Save your new group by doing one of the following:
- If you want to save the group without assigning anything to it, click Save, then in the Save Group dialog click OK.
- Alternatively, click Save & Assign, then in the Save & Assign dialog select Application (to assign apps), Profile (to assign profiles), or Content (to assign content files). Click Next to proceed with assignment flow.
You can select an existing group on the Group page, then click on the Application, Profile, or Content button to assign apps, profiles, or content files, in that order.
Add a dynamic group
Dynamic group features are currently in public preview. Certain aspects are expected to be finalized in a future release. A single tenant can have a maximum of 100 dynamic groups.
-
Go to Group on the navigation pane.
-
On the Group page, click Add.
-
On the Add Group page, enter the following user information:
-
Name — Enter a group name.
-
Type — Select one of the following group types.
- User — A group of user accounts.
- Device — A group of enrolled devices.
-
Membership Type — Select Dynamic (Preview).
-
Sub-Administrator — Click Select, then select a sub-administrator for the group in the Select Sub-Administrator dialog, and click OK.
For an overview of administrator roles, see Administrator account overview. To add a sub-administrator for Knox Manage, see Add an administrator. Alternatively, to add a sub-administrator for all Knox services, see Manage admins and roles for Knox services in Knox Admin Portal documentation.
-
-
Under Group Rules (Preview):
-
For Group Assignment:
- If you want profiles and apps to be dynamically assigned to new group members, select When a user or device is added, the profiles and applications assigned to the group will be pushed to the user or device.
- If you want profiles and apps to be dynamically removed from departing group members, select When a user or device is removed, the profiles and applications of the group will be unassigned from the user or device.
-
In the Rule Builder, you can create rules to dynamically add users or devices (based on your selected Type) to your group. You can create rules using one of the following options: Make rules via Filter, Rule Configuration, or Rule Syntax.
-
The Make rules via Filter button brings up the Make rules via Filter dialog. You can use user or device attribute fields at the top of the dialog to search for matching users or devices. Click Apply rules to create corresponding rule syntax (which appears in the Rule Syntax field).
-
Rule Configuration lets you select attributes, operators, and values to create rules. To use this option, Rule Builder Type must be set to Configuration. Click to add more rules (up to a maximum of five), and use the And/Or selector to create complex rules.
Click the Rule Configuration tooltip to see a rule configuration guide for common user and device attributes.
-
The Rule Syntax field lets you write rules in MVFLEX Expression Language (MVEL) syntax (up to 1,000 characters). To use this option, Rule Builder Type must be set to Syntax.
-
-
-
Once you’ve added at least one rule, you can use the Validation area to inspect which users or devices fulfill rule criteria.
-
Click Select to bring up the Select User or Select device dialog, select from existing records, and click Add.
- You can use the search bar to find specific user or device records.
- To further refine your device selections, click Select via Filter, select filters that you want to apply, then click OK.
-
The Validate button becomes active, and selected records appear below it. Click the button.
-
Status values appear, indicating the rule evaluation status for each row. Click on the corresponding View Details link for further information.
-
If needed, proceed to tweak your rules in the Rule Builder (step 4), then revalidate against selected records (step 5).
-
-
To save your new dynamic group, click Save, then in the Save Group dialog click OK.
Is this page helpful?
Thank you for your feedback!