Create a profile and policies

This page outlines how to configure profiles and policies in Knox Manage.

Differences between a profile and a policy

A profile is a set of policies containing device configurations and settings. Profiles allow you to configure policies to control individual device functions and permissions, such as the camera, screen lock, or Bluetooth.

You can also create policies separately and assign them to one or more profiles. When you edit a policy that belongs to multiple profiles, each profile receives its latest settings.

Create a profile

1. Go to Profiles and policies > PROFILES. Then click CREATE PROFILE.

2. Enter a Profile name and optional Description. The name must be unique and between 3 and 50 characters long. Names are case-sensitive and only alphanumeric characters and _ are allowed.

3. Proceed to the Configure screen.

   

4. Configure each policy you require. If you don’t configure a policy setting, the default device setting is kept. Names are automatically generated, based on the profile name, for the policies you configure here.

   When you search for sub-settings, the parent setting is highlighted when you select the search result so you know which one to configure.

   In addition to configuring new policies, you can reuse an existing policy.

   To reuse a policy:

   • Click Reuse a policy if you don’t have a policy selected.
   • Select REUSE SAVED POLICY under the search bar.
   • When you select a category that you have previously configured policies for, a banner displays. Click SELECT POLICY on the banner.

   On the Reuse saved policy pop up that opens, search for existing policies by category or policy name. Select one, then click REUSE POLICY.

   

   If you don’t configure mandatory fields in a setting, a warning icon appears over the icon of the policy it belongs to. You can’t continue to the Review screen until you complete the settings.

5. Proceed to the Review screen.

6. Choose what to do when finalizing the profile:

   • Click CREATE PROFILE if you only want to create the profile now, then assign and push it to devices and groups later.

   • Click CREATE AND ASSIGN if you want to create the profile and assign it to devices simultaneously. Follow the on-screen instructions to select one or more groups for assignment.

     • Click ASSIGN ONLY if you only want to assign the profile now, then push it to devices later. The policy settings won’t apply to assigned devices until the profile is pushed.

     • Click ASSIGN AND PUSH PROFILE to assign the profile now and sync it with the selected devices and groups.

Once a profile is pushed to devices, the policy settings configured in the profile immediately apply.

For example, in a policy setting where Bluetooth is set to Force off, the users of the assigned devices can’t toggle Bluetooth anymore.

Create a policy

1. Go to Profiles and policies > Policies. Then, click CREATE POLICY.

2. Configure the settings for a policy that you require. Give the policy a unique name, then click CREATE.

   

3. To apply your policy to a profile, create or edit a profile, then follow step 4 of the Create a profile section to reuse a policy. To learn more about how to edit a profile, see Edit a profile.

Once you create a profile, you can view it on the POLICIES tab. Click on a policy’s name to view a summary of it that includes the date it was last updated and the settings you configured for it. You can also select a policy, then click ACTIONS to duplicate it, edit it, or delete it.