TestDrive

Workspace ONE UEM Console Walkthrough

Updated

This walkthrough reviews the features of the Workspace ONE UEM Console. Topics covered include multi-tenancy, roles based access, profiles, application management and smart groups

Overview

Before You Begin

To complete this walkthrough please make sure you have the following:

  • A valid account in the VMware TestDrive environment. If you don't yet have an account reference our Getting Started Guide.
  • Activated the Workspace ONE UEM Product for your account in the TestDrive environments.

Section 1: Log in to the Workspace ONE UEM Console

Launch the ready to use Workspace ONE UEM Console from the TestDrive Portal.

Workspace ONE UEM is configured as a SAML app in TestDrive's Workspace ONE Access Console.  Log in to the Workspace ONE User Portal with your TestDrive credentials when prompted.  Workspace ONE SSO will seamlessly authenticate you into the Workspace ONE UEM Console.  

If this is your first log in to the Workspace ONE UEM Console, you may be prompted to accept the Terms of Use. Read through the terms and then click "Accept" to continue.

You will also be asked to create a PIN and answer security questions upon your first time logging in. This PIN will be used when you attempt to perform certain actions within the admin console, like deleting a device for example.

Section 2: Workspace ONE UEM Console Roles

Now you will be brought for the main dashboard for your organization. Here you will see a high level summary of your entire device fleet at a glance including enrolled devices, types of ownership for those devices, and activity on when those devices last checked in with the Workspace ONE UEM environment.

You'll notice by selecting the down arrow next to your account name in the top right that World Wide Enterprises is just one of your administrator roles with the Workspace ONE UEM console. You can choose the drop down under account role to change to another role at any time.

Roles Explained:

  • Device Administrator at World Wide Enterprises: General (Enterprise) Walkthroughs
  • Device Administrator at Retail Holding Company: Retail Walkthroughs
  • Device Administrator at Five Oceans Bank: Finance Walkthroughs
  • Device Administrator at Regional Health Systems: Healthcare Walkthroughs
  • Tier 1 - Help Desk at Executives & Tier 2 - Help Desk at Professional Services: This role is used to show Workspace ONE UEM's ability to create fully custom roles at different organization groups depending on the needs of your organization. For example, the Tier 1 help desk admin can view apps, devices, content, etc but if you switch over to the Tier 2 help desk role the options are much more locked down.

Section 3: Workspace ONE UEM Console Features

Next, lets review some of the features of the Workspace ONE UEM Console. For this section we will use the Device Administrator at World Wide Enterprises role.

Dashboards

The Workspace ONE UEM console comes with preconfigured dashboards so you can quickly review your device fleet. The main dashboard is located under Hub > Overview and corresponding section dashboards are located under that section. For example you will see more dashboards under Devices and Content.

These dashboards can help you easily drill down to sets of devices, apps, and more. For example on the Device dashboard you can select "Devices seen in last 8 hours" to be taken to a list view showing all the devices that have recently checked in the last 8 hours. The device list view can be customized using custom layouts as well as robust filters including platform, os version, compliance status and more to allow administrators to easily narrow down the devices they are looking for. If we click on the device, we will able to go into the specific menus and available options we have to manage this device.

The first page for this device is the summary tab, here you can see the overall summary of information regarding the device. For example some of the information you have at a glance is if this device is in compliance or what serial number it has. You can also see quickly if this device is in compliance.

Another available tab is the Profiles tab, that shows all the policies and configurations that have been pushed down to your device. You may click on the profile name to further load information on that specific profile.

If we click on the Apps tab, you will see a listing of all the applications installed on the device, depending on the device ownership, you will have different options available for the different applications.

Multi-tenancy

Another feature of the Workspace ONE UEM console is the mutli-tenant architecture. Workspace ONE UEM uses organization groups to be able to customize your environment to match your organization's structure. For this example, we have separated our example company (World Wide Enterprises) into multiple divisions. If you click World Wide Enterprises at the top you'll see there are multiple organization groups below the top group. This allows us to set settings and policies at each of these levels with the ability to override or inherit settings from above. Once again, this structure is completely customizable.

Roles Based Access

Another feature of the Workspace ONE UEM console is the ability to assign default or custom roles to administrators at different organization groups. What this means is you could have a help desk employee assign to a locked down role just for the region they work in, while still allowing your top admins to have full access to all levels. We have created a few sample roles for you to toggle between including Tier 1 - Help Desk at Executives and Tier 2 - Help Desk at Professional Services. Just select your account in the top right and change your selected role to switch between them.

Profiles

The World Wide Enterprises role has been completely configured for you so that you always have a working testing environment. From this role you can view profiles, but not add or edit them. Profiles are policies and configurations that can be pushed down to the device. For more information on adding and configuring profiles, reference the guide presented in the next section on the Sandbox Experience.

First, lets navigate to Devices > Profiles & Resources > Profiles.

We can also see how a profile is configured. Let's view the setting for the Builtin KDC SSO profile by clicking it's title.

Section 4: Device Enrollment

Use one of the provided guides for your device type in this knowledgeable section to enroll into this Workspace ONE UEM environment.

Previous Article Unenrolling your Device and Re-enrolling to the New Workspace ONE UEM Environment
Next Article Workspace ONE UEM - iOS GroundControl (Internal Walkthrough)