In this walkthrough we'll review the features of the Workspace ONE UEM Admin Console. Topics covered include multi-tenancy, roles based access, profiles, application management and smart groups
- Walkthrough Video
- Section 1: Log in to the Workspace ONE UEM Console
- Setting up your PIN
- Security Questions
- Section 2: Workspace ONE UEM Admin Console Roles
- Section 3: Workspace ONE UEM Admin Console Features
- Roles Based Access
- Section 4: Device Enrollment and Your Workspace ONE UEM Sandbox
Before You Begin
To complete this walkthrough please make sure you have the following:
- A valid account in the VMware TestDrive environment. If you don't yet have an account reference our Getting Started Guide.
- Activated the Workspace ONE UEM Product for your account in the TestDrive environments.
Section 1: Log in to the Workspace ONE UEM Admin Console
There are two different methods to navigate to the Workspace ONE UEM admin console. First, you can navigate to the Workspace ONE UEM Console from the TestDrive portal. Alternatively, you can navigate directly to the site url.
To launch into the Workspace ONE UEM Admin Console from the TestDrive portal, you'll need to turn on Workspace ONE UEM within the TestDrive portal. To do so navigate to the TestDrive portal at portal.vmtestdrive.com. Next, click Log In in the top right.
Enter your TestDrive username and password and click log in.
Now, you'll be logged into the TestDrive portal. Next, you'll need to locate the Workspace ONE UEM card within the Ready to Use Experiences section. Toggle the switch to the right to turn this on. Note there is another Workspace ONE UEM card under the "Sandbox Experience" section. Ensure you're choosing the product under the "Ready to Use Experiences" section.
You'll get a notification at the bottom of your screen notifying you that the service is turning on. Once it finishes you'll get another stating the service is ready to be used.
Alternatively, you can navigate directly to the Workspace ONE UEM Admin Console by opening your web browser of choice and browsing to the following URL:
Once you have navigated to the Console you'll need to enter your TestDrive credentials. These will be in the following format:
Do not forget to enter vmwtd.com\ before your username as shown above and below!!!! If your username and password are still not working after including vmwtd.com\ you most likely have not turned on Workspace ONE UEM in the TestDrive portal. Log in to portal.vmtestdrive.com and confirm the toggle is set to ACTIVE above the launch button next to Workspace ONE UEM.
You will also be asked to create a PIN and answer security questions upon your first time logging in. This PIN will be used when you attempt to perform certain actions within the admin console, like deleting a device for example.
Section 2: Workspace ONE UEM Admin Console Roles
Now you will be brought for the main dashboard for your organization. Here you will see a high level summary of your entire device fleet at a glance including enrolled devices, types of ownership for those devices, and activity on when those devices last checked in with the Workspace ONE UEM environment.
You'll notice by selecting the down arrow next to your account name in the top right that World Wide Enterprises is just one of your administrator roles with the Workspace ONE UEM admin console. You can choose the drop down under account role to change to another role at any time.
- Device Administrator at World Wide Enterprises: General (Enterprise) Walkthroughs
- Device Administrator at Retail Holding Company: Retail Walkthroughs
- Device Administrator at Five Oceans Bank: Finance Walkthroughs
- Device Administrator at Regional Health Systems: Healthcare Walkthroughs
- Tier 1 - Help Desk at Executives & Tier 2 - Help Desk at Professional Services: This role is used to show Workspace ONE UEM's ability to create fully custom roles at different organization groups depending on the needs of your organization. For example, the Tier 1 help desk admin can view apps, devices, content, etc but if you switch over to the Tier 2 help desk role the options are much more locked down.
Section 3: Workspace ONE UEM Admin Console Features
Next, lets review some of the features of the Workspace ONE UEM Admin Console. For this section we will use the Device Administrator at World Wide Enterprises role.
The Workspace ONE UEM console comes with preconfigured dashboards so you can quickly review your device fleet. The main dashboard is located under Hub > Overview and corresponding section dashboards are located under that section. For example you will see more dashboards under Devices and Content.
These dashboards can help you easily drill down to sets of devices, apps, and more. For example on the Device dashboard you can select "Devices seen in last 8 hours" to be taken to a list view showing all the devices that have recently checked in the last 8 hours. The device list view can be customized using custom layouts as well as robust filters including platform, os version, compliance status and more to allow administrators to easily narrow down the devices they are looking for. If we click on the device, we will able to go into the specific menus and available options we have to manage this device.
The first page for this device is the summary tab, here you can see the overall summary of information regarding the device. For example some of the information you have at a glance is if this device is in compliance or what serial number it has. You can also see quickly if this device is in compliance.
Another available tab is the Profiles tab, that shows all the policies and configurations that have been pushed down to your device. You may click on the profile name to further load information on that specific profile.
If we click on the Apps tab, you will see a listing of all the applications installed on the device, depending on the device ownership, you will have different options available for the different applications.
Another feature of the Workspace ONE UEM admin console is the mutli-tenant architecture. Workspace ONE UEM uses organization groups to be able to customize your environment to match your organization's structure. For this example, we have separated our example company (World Wide Enterprises) into multiple divisions. If you click World Wide Enterprises at the top you'll see there are multiple organization groups below the top group. This allows us to set settings and policies at each of these levels with the ability to override or inherit settings from above. Once again, this structure is completely customizable.
Roles Based Access
Another feature of the Workspace ONE UEM admin console is the ability to assign default or custom roles to administrators at different organization groups. What this means is you could have a help desk employee assign to a locked down role just for the region they work in, while still allowing your top admins to have full access to all levels. We have created a few sample roles for you to toggle between including Tier 1 - Help Desk at Executives and Tier 2 - Help Desk at Professional Services. Just select your account in the top right and change your selected role to switch between them.
The World Wide Enterprises role has been completely configured for you so that you always have a working testing environment. From this role you can view profiles, but not add or edit them. Profiles are policies and configurations that can be pushed down to the device. For more information on adding and configuring profiles, reference the guide presented in the next section on the Sandbox Experience.
First, lets navigate to Devices > Profiles & Resources > Profiles.
We can also see how a profile is configured. Let's view the setting for the Builtin KDC SSO profile by clicking it's title.
Section 4: Device Enrollment and Your Workspace ONE UEM Sandbox
This wraps up the basic console walkthrough.
Next, you can enroll devices to this environment using the below guides.
Also, if you'd like a completely blank instance of the Workspace ONE UEM product with full admin rights, you can visit our Workspace ONE UEM Sandbox guide to learn how to get access.
For Additional Support