Register a group

You can add a manual group (which is static) or a dynamic group (which auto-updates group memberships and assignments based on pre-set criteria).

Add a manual group

1. Go to Group on the navigation pane.

2. On the Group page, click Add.

3. On the Add Group page, enter the following user information:

   • Name — Enter a group name.

   • Type — Select one of the following group types.

     • User — A group of user accounts.
     • Device — A group of enrolled devices.

   • Membership Type — Select Manual.

   • Sub-Administrator — Click Select, then select a sub-administrator for the group in the Select Sub-Administrator dialog, and click OK.

     For an overview of administrator roles, see Administrator account overview. To add a sub-administrator for Knox Manage, see Add an administrator. Alternatively, to add a sub-administrator for all Knox services, see Manage admins and roles for Knox services in Knox Admin Portal documentation.

4. On the All Users or All Devices list (depending on your selected Type), select user IDs or device names to include them in the group. Selected users or devices appear under Selected User or Selected Device, correspondingly.

   • You can use the search bar in the All Users or All Devices area to find records matching your search criteria.
   • You can further refine your device selections in the Selected Device area: Click Select via Filter, select filters that you want to apply, then click OK.

5. Save your new group by doing one of the following:

   • If you want to save the group without assigning anything to it, click Save, then in the Save Group dialog click OK.
   • Alternatively, click Save & Assign, then in the Save & Assign dialog select Application (to assign apps), Profile (to assign profiles), or Content (to assign content files). Click Next to proceed with assignment flow.

Add a dynamic group

1. Go to Group on the navigation pane.

2. On the Group page, click Add.

3. On the Add Group page, enter the following user information:

   • Name — Enter a group name.

   • Type — Select one of the following group types.

     • User — A group of user accounts.
     • Device — A group of enrolled devices.

   • Membership Type — Select Dynamic (Preview).

   • Sub-Administrator — Click Select, then select a sub-administrator for the group in the Select Sub-Administrator dialog, and click OK.

     For an overview of administrator roles, see Administrator account overview. To add a sub-administrator for Knox Manage, see Add an administrator. Alternatively, to add a sub-administrator for all Knox services, see Manage admins and roles for Knox services in Knox Admin Portal documentation.

4. Under Group Rules (Preview):

   • For Group Assignment:

     • If you want profiles and apps to be dynamically assigned to new group members, select When a user or device is added, the profiles and applications assigned to the group will be pushed to the user or device.
     • If you want profiles and apps to be dynamically removed from departing group members, select When a user or device is removed, the profiles and applications of the group will be unassigned from the user or device.

   • In the Rule Builder, you can create rules to dynamically add users or devices (based on your selected Type) to your group. You can create rules using one of the following options: Make rules via Filter, Rule Configuration, or Rule Syntax.

     • The Make rules via Filter button brings up the Make rules via Filter dialog. You can use user or device attribute fields at the top of the dialog to search for matching users or devices. Click Apply rules to create corresponding rule syntax (which appears in the Rule Syntax field).

     • Rule Configuration lets you select attributes, operators, and values to create rules. To use this option, Rule Builder Type must be set to Configuration. Click to add more rules (up to a maximum of five), and use the And/Or selector to create complex rules.

       Click the Rule Configuration tooltip to see a rule configuration guide for common user and device attributes.

     • The Rule Syntax field lets you write rules in MVFLEX Expression Language (MVEL) syntax (up to 1,000 characters). To use this option, Rule Builder Type must be set to Syntax.

5. Once you’ve added at least one rule, you can use the Validation area to inspect which users or devices fulfill rule criteria.

   • Click Select to bring up the Select User or Select device dialog, select from existing records, and click Add.

     • You can use the search bar to find specific user or device records.
     • To further refine your device selections, click Select via Filter, select filters that you want to apply, then click OK.

   • The Validate button becomes active, and selected records appear below it. Click the button.

   • Status values appear, indicating the rule evaluation status for each row. Click on the corresponding View Details link for further information.

   • If needed, proceed to tweak your rules in the Rule Builder (step 4), then revalidate against selected records (step 5).

6. To save your new dynamic group, click Save, then in the Save Group dialog click OK.