Device Profiles

Device Profiles are the primary means by which you can manage devices in Workspace ONE UEM. They represent the settings that, when combined with compliance policies, help you enforce corporate rules and procedures.

Create profiles for each platform type then configure a payload, which consists of the individual settings you configure for each platform type.

Device Profiles List View

After you create and assign profiles in Workspace ONE UEM, you need a way to manage these settings one at a time and remotely from a single source. The Resources > Profiles & Baselines > Profiles provides a centralized way to organize and target profiles.

You can create tailor-made lists of device profiles based on the criteria you specify by using Filters, Layout, and Column Sorting. You can also export these lists to a CSV file suitable for viewing with Excel and see the status of the device profile.

Device Profile Hover-Over Pop-Up

Each device profile in the Profile Details column features a tool tip icon in the upper-right corner. When this icon is tapped (mobile touch device) or hovered-over with a mouse pointer (PC or Mac), it displays a hover-over pop-up.

This pop-up contains profile information such as Profile Name, the Platform, and the included payload Type.

You can find a similar tooltip in the Assigned Groups column in the Profiles List view, featuring hover-over pop-ups displaying Assigned Smart Groups and Deployment Type.

Device Profiles Read-Only View

Device Profiles created in and managed by one organization group (OG) are in a read-only state when accessed by a logged-in administrator with lower-level privileges. The profile window reflects this read-only state by adding a special comment, “this profile is being managed at a higher organization group and cannot be edited.”

This read-only limitation applies to smart group assignments as well. When a profile is created at a parent OG and is assigned to a smart group, a child OG admin can see but not edit it.

Such behavior maintains a hierarchy-based security and fosters communication among admins.

List View Options

Setting	Description
Filters	View only the desired profiles by using the following filters.
	* Status – Filter devices to view Active, Inactive, and All devices.
	* Platform – Filter devices by 13 types of platforms or all platforms.
	* Smart Group – Filter devices by selecting a smart group from the drop-down menu.
Layout	Enables you to customize the column layout of the listing.
	* Summary – View the List View with the default columns and view settings.
	* Custom – Select only the columns in the List View you want to see. You can also apply selected columns to all administrators at or below the current organization group.
Export	Save a CSV (comma-separated values) file of the entire List View that can be viewed and analyzed with MS Excel. If you have a filter applied to the List View, the exported listing reflects the filtered results.
Search List	You can search for device profiles by profile name, description, organization group, device model, device type, smart group, and device operating system.
Column Sorting	Select the column heading to toggle the sorting of the list.
Profile Details	In both the Summary and Custom views, the Profile Details column displays the name, platform, and payload types.
Payloads	Displays the number of payloads specified in the device profile.
Installed Status	This column shows the status of a profile installation by displaying three icon indicators, each with a hypertext number link. Selecting this link displays the View Devices page, which is a listing of affected devices in the selected category.
	* Pending Install () – This indicator displays the number of devices that are scheduled to have the profile installed.
	* Installed () – This indicator displays the number of devices on which the profile is assigned and successfully installed.
	* Not Installed () – This indicator displays the number of devices to which the profile is assigned but not installed.
	* Assigned () – This indicator displays the total number of assigned profiles whether they are installed or not.
	* Pending Removal () – This indicator displays the total number of profiles scheduled for removal.
	* Removed () – This indicator displays the total number of removed profiles.
	* Out of Date () – This indicator appears when an updated version of the installed profile is available.
	* Pending Information () This indicator displays when the profile is in a 'held' state. Typical examples of this state include profiles that require information from third party servers (such as VPN profiles involving Websense and zScaler and Certificate profiles needing CA data) remain in a held state until contact with these servers is made and the requisite information is obtained.
	* Not Assigned – This text only indicator displays when the profile is defined and saved but not yet assigned to devices.
	* Not Applicable – This text only indicator displays when the profile is defined, saved, and assigned but there are details in its configuration that make it inapplicable to the devices it is assigned to.
	- Installation Failed – This text only indicator displays when the profile is defined, saved, and assigned but there is an error that prevents it from installing successfully.
Radio button and Edit Icon	The List View features a selection radio button and Edit icon, each to the left of the profile. Selecting the Edit icon () enables you to make basic changes to the profile configuration. Selecting a single radio button causes the Devices button, the XML button, and More Actions button to appear above the listing.
	* Devices – View devices that are available for that profile and whether the profile is installed and if not, see the reason why. Survey which devices are in your fleet and manually push profiles if necessary.
	* </> XML – Display the XML code that Workspace ONE UEM generates after profile creation. View and save the XML code to reuse or alter outside of the Console. This XML option cannot be used to resolve lookup values that represent a specific device or user. See the subtopic that follows this table for more details about XML code and how you can get a version that does resolve lookup values.
	* More Actions
	Copy – Make a copy of an existing profile and tweak the configuration of the copy to get started with device profiles.
	Activate/Deactivate – Toggle between making a device profile active and inactive.
	Delete – Maintain your roster of profiles by removing unnecessary profiles.

Get XML Code for Lookup Value Resolution

If you want XML code that can resolve lookup values representing specific devices and users, you must use XML code that is inclusive of device and user identifiers. You can do this by taking the following steps.

1. Navigate to Devices > List View and identify the specific device you want to be represented by XML code. Make note of the device friendly name, which is the portion that is a clickable link.

2. Click this friendly name to navigate to the Device Details page for that device.

3. From Device Details, select the Profiles tab.

4. Identify the profile name from the Profile tab that you want to include in the XML code. Make note of the profile name.

5. Navigate to Resources > Profiles & Baselines > Profiles and locate the same profile name from the previous step. Enter the verbatim profile name in the search text box for quicker results.

6. Select the “View” hypertext from that profile listing’s Installed Status column. A popup window appears.

7. From the popup window, select the Installed link or the Assigned link that corresponds to the device name, which ever one has the non-zero number to the left of it. The View Devices modal displays.

   

8. Under the View Devices modal, locate the specific device friendly name from the list of devices.

9. Select the XML button labelled </> for that device.

   

The XML code that displays includes device and user identifiers and can be used to resolve lookup values in a way the XML code from the device list view cannot.

Confirm Device Profile Installation

During those infrequent cases in which profiles do not install on targeted devices, the View Devices screen enables you to see the specific reason why.

Profile Install Status

1. Navigate to Resources > Profiles & Baselines > Profiles and observe the listing that displays.

2. Review the Installed Status column and select the number links that display to the right of the indicator icons to open the View Devices screen. For details about the indicator icons, see the Installed Status definitions in the Device Profiles List View.

   

   Result: The View Devices - screen displays.

3. (Optional) Produce a comma-separated value (CSV) file of the entire View Devices page by selecting the Export icon (). Excel can be used to read and analyze the CSV file.

4. (Optional) Customize which columns in the View Devices page you want to be visible by selecting the Available Columns icon ().

View iOS Devices Command Status Column

iOS devices feature a Command Status column on the View Devices screen which includes useful installation statuses as they relate to the selected iOS device. The following statuses appear in the Command Status column.

• Error – Displays as a link that, when selected, shows the specific error code applicable to the device.
• Held – Displays when the device is included in a certificate batch process that is underway.
• Not Applicable – Displays when the profile assignment does not impact the device but is nonetheless part of the smart group or deployment. For example, when the profile type is unmanaged.
• Not Now – Displays when the device is locked or otherwise occupied.
• Pending – Displays when the installation is queued and is on schedule to be completed.
• Success – Displays when the profile is successfully installed.