Workspace ONE UEM (AirWatch) Admin Console Walkthrough

In this walkthrough we'll review the features of the Workspace ONE UEM Admin Console. Topics covered include multi-tenancy, roles based access, profiles, application management and smart groups

Overview


Before You Begin


To complete this walkthrough please make sure you have the following:

  • A valid account in the VMware TestDrive environment. If you don't yet have an account reference our Getting Started Guide.
  • Activated the Workspace ONE UEM Product for your account in the TestDrive environments.

Walkthrough Video


Section 1: Log in to the Workspace ONE UEM Admin Console


There are two different methods to navigate to the Workspace ONE UEM admin console. First, you can navigate to the Workspace ONE UEM Console from the TestDrive portal. Alternatively, you can navigate directly to the site url. 

To launch into the Workspace ONE UEM Admin Console from the TestDrive portal, you'll need to turn on Workspace ONE UEM within the TestDrive portal. To do so navigate to the TestDrive portal at portal.vmtestdrive.com. Next, click Log In in the top right.

Screen_Shot_2018-08-16_at_11.55.38_AM.png

Enter your TestDrive username and password and click log in. 

If you're having issues with your password you can always reset it on this page or send us an email at eucdemohelp@vmware.com. If you don't yet have an account reference our Getting Started Guide.

Screen_Shot_2018-08-16_at_11.57.16_AM.png

Now, you'll be logged into the TestDrive portal. Next, you'll need to locate the Workspace ONE UEM card within the Ready to Use Experiences section. Toggle the switch to the right to turn this on. Note there is another Workspace ONE UEM card under the "Sandbox Experience" section. Ensure you're choosing the product under the "Ready to Use Experiences" section.

Screen_Shot_2018-08-16_at_4.16.53_PM.png

You'll get a notification at the bottom of your screen notifying you that the service is turning on. Once it finishes you'll get another stating the service is ready to be used.

Screen_Shot_2018-08-16_at_4.18.18_PM.png

Screen_Shot_2018-08-16_at_4.19.46_PM.png

 

Alternatively, you can navigate directly to the Workspace ONE UEM Admin Console by opening your web browser of choice and browsing to the following URL:

Once you have navigated to the Console you'll need to enter your TestDrive credentials. These will be in the following format:

Username: vmwdemo\{TestDriveUsername}
Password: {TestDrivePassword}

Do not forget to enter VMWDEMO before your username as shown above and below!!!! If your username and password are still not working after including vmwdemo\ you most likely have not turned on Workspace ONE UEM in the TestDrive portal. Log in to portal.vmtestdrive.com and confirm the toggle is set to ACTIVE above the launch button next to Workspace ONE UEM.

Screen_Shot_2018-08-16_at_1.15.02_PM.png

If this is your first log in to the Workspace ONE UEM Administrative Console, you may be prompted to accept the Terms of Use. Read through the terms and then click "Accept" to continue.

Screen_Shot_2018-08-16_at_1.15.45_PM.png

You will also be asked to create a PIN and answer security questions upon your first time logging in. This PIN will be used when you attempt to perform certain actions within the admin console, like deleting a device for example. 

Screen_Shot_2018-08-16_at_1.16.05_PM.png

 

Section 2: Workspace ONE UEM Admin Console Roles


Now you will be brought for the main dashboard for your organization. Here you will see a high level summary of your entire device fleet at a glance including enrolled devices, types of ownership for those devices, and activity on when those devices last checked in with the Workspace ONE UEM environment.

Screen_Shot_2018-08-16_at_1.17.50_PM.png

You'll notice by selecting the down arrow next to your account name in the top right that World Wide Enterprises is just one of your administrator roles with the Workspace ONE UEM admin console. You can choose the drop down under account role to change to another role at any time.

Screen_Shot_2018-08-16_at_2.12.21_PM.png

Screen_Shot_2018-08-16_at_3.06.50_PM.png

Roles Explained:

  • Device Administrator at World Wide Enterprises: General (Enterprise) Walkthroughs
  • Device Administrator at Retail Holding Company: Retail Walkthroughs
  • Device Administrator at Five Oceans Bank: Finance Walkthroughs
  • Device Administrator at Regional Health Systems: Healthcare Walkthroughs
  • Tier 1 - Help Desk at Executives & Tier 2 - Help Desk at Professional Services: This role is used to show Workspace ONE UEM's ability to create fully custom roles at different organization groups depending on the needs of your organization. For example, the Tier 1 help desk admin can view apps, devices, content, etc but if you switch over to the Tier 2 help desk role the options are much more locked down. 

Section 3: Workspace ONE UEM Admin Console Features


Next, lets review some of the features of the Workspace ONE UEM Admin Console. For this section we will use the Device Administrator at World Wide Enterprises role.

Dashboards

The Workspace ONE UEM console comes with preconfigured dashboards so you can quickly review your device fleet. The main dashboard is located under Hub > Overview and corresponding section dashboards are located under that section. For example you will see more dashboards under Devices and Content.

These dashboards can help you easily drill down to sets of devices, apps, and more. For example on the Device dashboard you can select "Devices seen in last 8 hours" to be taken to a list view showing all the devices that have recently checked in the last 8 hours. The device list view can be customized using custom layouts as well as robust filters including platform, os version, compliance status and more to allow administrators to easily narrow down the devices they are looking for. If we click on the device, we will able to go into the specific menus and available options we have to manage this device.

Screen_Shot_2018-08-16_at_1.18.23_PM.pngScreen_Shot_2018-08-16_at_3.12.40_PM.png

The first page for this device is the summary tab, here you can see the overall summary of information regarding the device. For example some of the information you have at a glance is if this device is in compliance or what serial number it has. You can also see quickly if this device is in compliance. 

Screen_Shot_2018-08-16_at_3.11.06_PM.png

Another available tab is the Profiles tab, that shows all the policies and configurations that have been pushed down to your device. You may click on the profile name to further load information on that specific profile. 

Screen_Shot_2018-08-16_at_3.11.13_PM.png

If we click on the Apps tab, you will see a listing of all the applications installed on the device, depending on the device ownership, you will have different options available for the different applications. 

Screen_Shot_2018-08-16_at_3.11.19_PM.png

Multi-tenancy

Another feature of the Workspace ONE UEM admin console is the mutli-tenant architecture. Workspace ONE UEM uses organization groups to be able to customize your environment to match your organization's structure. For this example, we have separated our example company (World Wide Enterprises) into multiple divisions. If you click World Wide Enterprises at the top you'll see there are multiple organization groups below the top group. This allows us to set settings and policies at each of these levels with the ability to override or inherit settings from above. Once again, this structure is completely customizable.

Screen_Shot_2018-08-16_at_1.21.20_PM.png

Roles Based Access

Another feature of the Workspace ONE UEM admin console is the ability to assign default or custom roles to administrators at different organization groups. What this means is you could have a help desk employee assign to a locked down role just for the region they work in, while still allowing your top admins to have full access to all levels. We have created a few sample roles for you to toggle between including Tier 1 - Help Desk at Executives and Tier 2 - Help Desk at Professional Services. Just select your account in the top right and change your selected role to switch between them.

Screen_Shot_2018-08-16_at_2.12.21_PM.png

Profiles

The World Wide Enterprises role has been completely configured for you so that you always have a working testing environment. From this role you can view profiles, but not add or edit them. Profiles are policies and configurations that can be pushed down to the device. For more information on adding and configuring profiles, reference the guide presented in the next section on the Sandbox Experience.  

First, lets navigate to Devices > Profiles & Resources > Profiles.

 

Screen_Shot_2018-08-16_at_3.32.15_PM.png

We can also see how a profile is configured. Let's view the setting for the Builtin KDC SSO profile by clicking it's title.

Screen_Shot_2018-08-16_at_3.58.01_PM.png 

Section 4: Device Enrollment and Your Workspace ONE UEM Sandbox


This wraps up the basic console walkthrough.

Next, you can enroll devices to this environment using the below guides.

Experience Workspace ONE on iOS

Experience Workspace ONE on Android

Experience Workspace ONE on MacOS

Experience Workspace ONE on Windows 10

Experience Workspace ONE on Chromebooks

Also, if you'd like a completely blank instance of the Workspace ONE UEM product with full admin rights, you can visit our Workspace ONE UEM Sandbox guide to learn how to get access.

Workspace ONE UEM Sandbox Walkthrough

For Additional Support


Review Our Knowledge Base

 

Have more questions? Submit a request

Article is closed for comments.