Back to top

Assign profiles to groups and organizations

Last updated January 22nd, 2024

Assign a profile to a group or an organization. You must assign a profile before applying the policies that are configured for it.

When multiple profiles are assigned to the same group or organization and one or more policies between the profiles conflict, the policy from the profile with the highest priority will apply to the group or organization. To configure profile priority, see Set up the profile priorities.

Policies from multiple profiles will apply if they don’t conflict with each other. If a device belongs to both a group and an organization at the same time, the policies of the group’s profiles will apply because they have priority.

You can apply profiles immediately or at a specific time.

Assigning to groups

To assign a profile to a group:

  1. Navigate to Profile. You can also assign a profile from the group list by navigating to Groups and selecting a group to assign. For more information, see Apply profiles to groups.

  2. On the Profile page, select the check box for a profile that you want to assign.

  3. Select Assign.

  4. On the Assign Profile page, click Group.

  5. Select the check boxes for groups to be assigned with the selected profile.

    • You can select multiple groups.
    • If a group has already been assigned a profile and it is assigned to another profile, you can preview the conflicting policies from the two profiles by clicking Preview Policy.
  6. Click Assign & Push to assign and apply the profile to the selected groups at the same time.

    • Click Assign to assign the profile to the selected groups and not to apply the profile now.
  7. In the Assign Profile window, click OK.

Assigning to organizations

To assign a profile to an organization:

  1. Navigate to Profile. You can also assign a profile from the organization list by navigating to Organization and selecting an organization to assign. For more information, see Assign applications to organizations.

  2. On the Profile page, select the check box for a profile to be assigned.

  3. Select Assign.

  4. On the Assign Profile page, click Organization.

  5. Click the check boxes for organizations to be assigned with the selected profile.

    • You can select multiple organizations.
    • If an organization has already been assigned a profile and it is assigned to another profile, you can preview the conflicting policies from the two profiles by clicking Preview Policy.
    • When a profile is assigned to an organization that has sub-organizations, the profile is applied to all the sub-organizations.
    • If a sub-organization was not assigned a profile, the profile of the super organization is inherited, but the inherited profile can be overwritten with a new profile.
    • If a sub-organization was assigned its own profile, then the profile of the super-organization is not inherited.
  6. Click Assign & Push to assign and apply the profile to the selected organizations at the same time.

    • Click Assign to assign the profile to the selected organizations and not apply the profile now.
  7. In the Assign Profile window, click OK.

    Sub-administrators who only have the Profile Managing Permission cannot assign or apply profiles to organizations. In order for sub-administrators to be able to assign or apply profiles to organizations, they need to be given both the Org and Profile Managing Permissions. For more information, see Add a sub-organization.

Is this page helpful?