User Management
With user management, you can customize user permissions for all existing and new admins using SureMDM User Management. You can add multiple administrators and users to the particular SureMDM account. The console allows you to establish a complete user and admin infrastructure. You can use the User Management section to create customized lists of users immediately. You can export the user list for later analysis and add new users individually or in bulk.
The SureMDM Web Console can be accessed by two types of users:
Account Admin/Super User: Each account can have only one Super User, who can access all functions available in the web console without any restrictions.
Admin User: The Super User can create multiple administrator accounts, each with their own specific permissions or roles.
Before creating a user, the Super User must specify the defined set of permissions for the individual user:
Roles
Device Group Set
Folder Set
Device Grid Column Set
Roles
You can create roles that grant specific kinds of access to the SureMDM. You can assign roles to users using the SureMDM console. For instance, help desk administrators may have restricted access to the console, while the IT manager can have a wider range of permissions. You can create new roles for the users or you can assign the Super User role to the users. The following are the options available on the Roles screen:
Add - You can create a new user role.
Edit - You are able to modify the roles created.
Clone - You can duplicate the existing role
Delete - You can delete the role
Export - The details of the roles can be exported in csv or xls format.
To create a new user role, follow these steps:
Navigate to SureMDM Web Console > Settings (icon located at top right of the screen) > User Management.
In the User Management screen, select Roles tab and click Add.
In the Roles prompt, enter a Name and Description.
Select the permissions to allow and click Save.
The newly created role will be listed in the User Management section.
Device Group Set
Device group permission-based users are granted access to specific device groups and sub-groups within the SureMDM console. This tailored access allows them to focus on the management of devices within their assigned group(s) without interfering with other device groups.
When creating a device group permission-based user, the Super User needs to define the device groups or sub-groups that the user will be authorized to access. Once logged in, the user will have the capability to manage only the assigned device groups, providing them with a simplified and focused interface.
To create a device group set, follow these steps:
Navigate to SureMDM Web Console > Settings (icon located at the top right of the screen) > User Management.
In the User Management screen, select the Device Group Set tab and click Add.
In the Device Groups prompt, enter the Name and Description.
Select the groups to which the user must be granted access.
Select one of the following New Group Permissions:
- Don’t Allow Any New Groups
- Automatically Allow New Groups Added Within Home Group and Allowed Sub Groups
- Automatically Allow New Groups Added Only Within Allowed Sub Groups
Click Save.
The newly created group set will be listed in the User Management section.
Folder Set
Folder set permission-based users are granted access to specific folders within the SureMDM console. This allows them to focus on managing the devices and applications within their assigned folder(s) without interfering with other folders or features.
When creating a folder set permission-based user, the Super User needs to define the folders that the user will be authorized to access. Once logged in, the user will have access to the specific devices and applications within the assigned folder(s), providing them with a streamlined interface.
To create a folder set, follow these steps:
Navigate to SureMDM Web Console >Settings (icon located at the top right of the screen) > User Management.
In the User Management section, select the Job Folder Set tab and click Add.
In the Job Folders prompt, enter a Name and Description.
Select the folders from the following sets:
Jobs Folder
Profile Folder
Custom Reports Folder
noteThe Custom Reports Folder will only work properly if the View Custom Reports option under Global Custom Reports in the Roles section is disabled.
Select one of the following New Group Permissions:
Don’t Allow Any New Groups
Automatically Allow New Groups Added Within Home Group and Allowed Sub Groups
Automatically Allow New Groups Added Only Within Allowed Sub Groups
Click Save.
The newly created folder set will be listed in the User Management section.
Device Grid Column Set
The Device Grid Column Permission grants access for a user to view particular columns exclusively in the device grid of the SureMDM Console. This permission is typically granted by a superuser or administrator who has the authority to control the visibility of grid columns.
When a user is granted this permission, they can only view the columns that have been specified by the superuser. This means that they will not have access to any additional data or columns that are not included in the specified column set. This can be useful for restricting access to sensitive or confidential information, ensuring that only authorized personnel are able to view certain data.
To create a device grid column set, follow these steps:
Navigate to the SureMDM Web Console > Settings (icon located at the top right of the console) > User Management.
In the User Management screen, select the Device Grid Column Set tab and click Add.
In the Grid Column prompt, enter the Name and Description and select the desired columns to be allowed for the admin to view and click Save.
The newly created Device Grid column set will be listed in the User Management section.
File Manager Access Control
This type of admin can access only the specified folders from the File Manager on the Remote Control screen allowed by the superuser.
To configure permissions for File Manager Access Control set-based admin, follow these steps:
Navigate to SureMDM Web Console > Settings (icon located at the top right of the console) > User Management.
In the User Management screen, select the File Manager Access Control tab and click Add.
In the File Manager Access prompt, enter the Name and Description and specify one or more directory paths of the device to be available for the admin to view and click Save.
Example formats: For Downloads: /storage/emulated/0/Downloads For Documents: /storage/emulated/0/Documents
The newly created File Manager Access set will be listed in the User Management section.
Create a New User
Admin users can be created based on the following set of permissions:
- Roles
- Device Groups Set
- Jobs/Profiles Folder Set
- Device Grid Column Set
- File Manager Access Control
Super user has the option to use a combination of all five types of permissions. This enables the creation of admin users with tailor-made custom permissions.
After all the necessary permissions have been set up, the next step is to add a new user to the SureMDM account. The following are the options available on the Roles screen:
Add User - You can add new users to the SureMDM console.
Edit User - You are able to modify the user details you have created.
Delete User - You can delete the users.
Reset Password - You can reset the password for the users.
Enable/Disable Users - You can enable or disable the users.
Visible Column in Grid - You can select only the specific column set(s) to be visible for a user.
To create a new user, follow these steps:
Navigate to the SureMDM Web Console >Settings (icon located at top right of the screen) > User Management > Users.
In the Users screen, click Add User.
In the Create New User screen, enter the following details:
User Name
Password
Confirm Password
First Name
Last Name
Email, Phone Number
Select a following permission from the drop down menu.
Roles
Device Group Set
Folder Set
Device Grid Column Set
File Manager Access Control Set
If no option is selected from the drop-down, Super User Role will be selected by default.
Select Hide Parent Group When No Access to Child Groups will hide the parent group when child groups are not selected.
Click Create.
The newly created admin user will be listed in the Users section.
Disable Inactive User Accounts
This feature allows administrators to automatically disable user accounts that have remained inactive for a specified number of days.
To disable inactive user accounts, follow the steps below:
Navigate to the SureMDM Web Console >Settings (icon located at top right of the screen) > User Management > Users.
Select the desired user from the user list.
Click the More Options menu and click Inactive Account Users from the dropdown menu.
Specify the inactivity duration (in days) after which the user account should be disabled.
Confirm the selection to apply the setting.
Once configured, any user account that does not log in within the defined number of days will be automatically disabled.