Assign profiles

Once you’ve created a profile, you can assign it to your devices. Assigning a profile to a device will enable out-of-box experience (OOBE) enrollment for the selected services.

You can assign a profile:

• At the end of the profile creation process.
• From the Devices page of the Knox Mobile Enrollment console. You can assign a profile manually, or in bulk.
• From the common device list in the Knox Admin Portal. You can assign a profile manually, or in bulk.
• To a specific user, on the common Users page of the Knox Admin Portal
• Automatically, by setting your reseller preferences.

If you’re assigning profiles to large device fleets, we recommend you use bulk actions.

Profiles marked as (Advanced) include advanced functionality, such as device lock and app installation during enrollment. If you assign an enrollment profile with advanced settings to a device, you must have a valid Knox Suite - Enterprise Plan to use these features. For more information, see Configure advanced settings.

Assign an enrollment profile to devices

You can assign an enrollment profile to a specific device through the Knox Mobile Enrollment console, or the common device list.

From the Knox Mobile Enrollment console

You can assign enrollment profiles to a single device or to multiple devices from the Devices page in the Knox Mobile Enrollment console.

To assign an enrollment profile for a single device:

1. On the Knox Mobile Enrollment navigation pane, click Devices.
2. Select a device IMEI/MEID. The device details panel displays.
3. From the Enrollment profile list, select the profile you wish to assign.
4. Click SAVE.

To assign one or more enrollment profile(s) through the Actions menu:

1. On the Devices page, select the device(s) to which you want to apply the enrollment profile.

2. Click Actions > Configure devices. The Configure selected devices dialog displays.

3. In the Modify Profile of selected devices list, select the profile you wish to assign.

4. Click SAVE.

   You can’t assign an enrollment profile with advanced settings to a device that’s also enrolled in Knox Guard. You’ll need to first unenroll the device from Knox Guard.

Your enrollment profile is assigned to the selected devices.

From the common device list

To assign an enrollment profile to a device from the common device list of the Knox Admin Portal:

1. On the Knox Admin Portal navigation pane, click Devices. The Devices page displays.
2. Select the devices to which you want to apply the enrollment profile.
3. Click Actions > Common > Assign enrollment profile. The Assign enrollment profile page opens and shows a list of available profiles.
4. Select an enrollment profile and click Assign.

Your enrollment profile is assigned to the selected devices.

From the Enrollment page

You can assign a profile to a device from the Enrollment page of the Knox Admin Portal.

To assign a profile from the Enrollment page:

1. On the Enrollment page, select the profile you’d like to assign. The Edit enrollment profile page opens.
2. Click Save and assign.
3. On the Assign enrollment profile dialog, select the devices to assign the profile to.
4. Click Assign to devices.

Your enrollment profile is assigned to the selected devices.

Assign an enrollment profile to a user

If your company uses Samsung account for Business, you can assign enrollment profiles to specific users. When a user signs in to a fully managed device with their Samsung account for Business, the enrollment profile assigned to them is used to automatically enroll the device, and the user’s name is shown on the common device list.

From the Users page

To assign an enrollment profile to a user:

1. On the Users page, select the user you’d like to assign the profile to, and click Actions > Assign enrollment profile. The Assign enrollment profile page opens.
2. Select an enrollment profile.
3. Click Assign. The Profile will be assigned to users dialog displays.
4. Click Confirm and assign profile.

The selected profile is assigned to the user and the profile name is displayed under the Enrollment profile column on the Users page.

From the Enrollment page

You can assign a profile to a user from the Enrollment page of the Knox Admin Portal.

To assign a profile from the Enrollment page:

1. On the Enrollment page, select the profile you’d like to assign. The Edit enrollment profile page opens.
2. Click Save and assign. The Assign enrollment profile dialog opens to the Devices tab.
3. Click the Users tab. A list of users you can assign the profile to displays.
4. Select the users to assign the profile to.
5. Click Assign.

Your enrollment profile is assigned to the selected users.

Unassign an enrollment profile

If you no longer wish to associate an enrollment profile with a specific device or user, you can unassign it.

Unassign an enrollment profile from a device

You can manually unassign an enrollment profile from a device on the Devices page of the Knox Mobile Enrollment console or the common device list of the Knox Admin Portal. If you want to unassign enrollment profiles for a large device fleet, we recommend you use bulk actions instead.

When you unassign an enrollment profile, out-of-box experience (OOBE) enrollment is disabled on your device for EMM and Knox cloud services.

To unassign an enrollment profile for a single device:

1. On the Knox Mobile Enrollment console, click Devices. The Devices page displays.
2. Select a device IMEI/MEID. The device details panel displays.
3. In the Enrollment profile list, select Clear profiles.
4. Click SAVE.

To unassign an enrollment profile for multiple devices at once:

1. On the Knox Mobile Enrollment console, click Devices. The Devices page displays.
2. Select one or more devices.
3. Click Actions > Configure devices. The Configure selected devices dialog displays.
4. In the Modify Profile of selected devices list, select Clear profiles.
5. Click SAVE.

Unassign an enrollment profile from a user

You can unassign an enrollment profile from one user at a time. The user must have the Active or Pending status. This action is not available for users in the Blocked or Pending deletion status.

To unassign an enrollment profile:

1. On the Users page, select the user, and click Actions > Unassign enrollment profile. The Unassign enrollment profile dialog opens.
2. Click Unassign profile.

The enrollment profile is removed from the user’s account. If they sign in to a new device using their Samsung account for Business, the device won’t enroll in any services. However, any previously applied settings remain on the device until it’s factory reset.