1. Before You Begin
2. Log in to the Workspace ONE UEM Console
   1. Setting up your PIN
   2. Security Questions
3. Workspace ONE UEM Console Roles
4. Workspace ONE UEM Console Features
   1. Dashboards
   2. Multi-tenancy
   3. Roles-Based Access
   4. Profiles

To complete this walkthrough, please make sure you have the following:

• A valid VMware TestDrive account. Reference the Getting Started guide.
• An active ready-to-use Workspace ONE UEM product in the TestDrive portal
• For device enrollment guidance into TestDrive's Workspace ONE UEM environment, reference guides in this KB section.

The ready-to-use Workspace ONE UEM console is set up in Workspace ONE Access as a managed web app.

To launch the ready-to-use Workspace ONE UEM console:

1. Log in to the TestDrive portal. 
2. Use the ready-to-use Workspace ONE UEM tile to LAUNCH. 

3. Log in to Workspace ONE using your TestDrive credentials.

If this is your first login to the Workspace ONE UEM console, you'll be prompted to accept the Terms of Use. Review the terms, and then click "Accept" to continue.

You will also be asked to create a PIN and answer security questions upon your first time logging in. This PIN will be used when you attempt to perform certain actions within the admin console, like deleting a device for example.

Now you will be brought for the main dashboard for your organization. Here you will see a high level summary of your entire device fleet at a glance including enrolled devices, types of ownership for those devices, and activity on when those devices last checked in with the Workspace ONE UEM environment.

You'll notice by selecting the down arrow next to your account name in the top right that World Wide Enterprises is just one of your administrator roles with the Workspace ONE UEM console. You can choose the drop down under account role to change to another role at any time.

Roles Explained:

• Device Administrator at World Wide Enterprises: General (Enterprise) Walkthroughs
• Device Administrator at Retail Holding Company: Retail Walkthroughs
• Device Administrator at Five Oceans Bank: Finance Walkthroughs
• Device Administrator at Regional Health Systems: Healthcare Walkthroughs
• Tier 1 - Help Desk at Executives & Tier 2 - Help Desk at Professional Services: This role is used to show Workspace ONE UEM's ability to create fully custom roles at different organization groups depending on the needs of your organization. For example, the Tier 1 help desk admin can view apps, devices, content, etc but if you switch over to the Tier 2 help desk role the options are much more locked down.

Next, lets review some of the features of the Workspace ONE UEM Console. For this section we will use the Device Administrator at World Wide Enterprises role.

The Workspace ONE UEM console comes with preconfigured dashboards so you can quickly review your device fleet. The main dashboard is located under Hub > Overview and corresponding section dashboards are located under that section. For example you will see more dashboards under Devices and Content.

These dashboards can help you easily drill down to sets of devices, apps, and more. For example on the Device dashboard you can select "Devices seen in last 8 hours" to be taken to a list view showing all the devices that have recently checked in the last 8 hours.

The device list view can be customized using custom layouts as well as robust filters including platform, os version, compliance status and more to allow administrators to easily narrow down the devices they are looking for. If we click on the device, we will able to go into the specific menus and available options we have to manage this device.

The first page for this device is the summary tab, here you can see the overall summary of information regarding the device. For example some of the information you have at a glance is if this device is in compliance or what serial number it has. You can also see quickly if this device is in compliance.

Another available tab is the Profiles tab, that shows all the policies and configurations that have been pushed down to your device. You may click on the profile name to further load information on that specific profile.

If we click on the Apps tab, you will see a listing of all the applications installed on the device, depending on the device ownership, you will have different options available for the different applications.

Another feature of the Workspace ONE UEM console is the mutli-tenant architecture. Workspace ONE UEM uses organization groups to be able to customize your environment to match your organization's structure. For this example, we have separated our example company (World Wide Enterprises) into multiple divisions. If you click World Wide Enterprises at the top you'll see there are multiple organization groups below the top group. This allows us to set settings and policies at each of these levels with the ability to override or inherit settings from above. Once again, this structure is completely customizable.

Another feature of the Workspace ONE UEM console is the ability to assign default or custom roles to administrators at different organization groups. What this means is you could have a help desk employee assign to a locked down role just for the region they work in, while still allowing your top admins to have full access to all levels. We have created a few sample roles for you to toggle between including Tier 1 - Help Desk at Executives and Tier 2 - Help Desk at Professional Services. Just select your account in the top right and change your selected role to switch between them.

The World Wide Enterprises role has been completely configured for you so that you always have a working testing environment. From this role you can view profiles, but not add or edit them. Profiles are policies and configurations that can be pushed down to the device. For more information on adding and configuring profiles, reference the guide presented in the next section on the Sandbox Experience.

First, lets navigate to Devices > Profiles & Resources > Profiles.

We can also see how a profile is configured. Let's view the setting for the Builtin KDC SSO profile by clicking it's title.