XenMobile

Enrollment profiles

An enrollment profile specifies the following:

  • Device management enrollment options for Android

    Enrollment profiles control how Android devices are enrolled if Android Enterprise in enabled for your XenMobile deployment. Enrollment profiles determine whether Android devices are enrolled in:

    • Default Android Enterprise mode (fully managed or work profile)
    • Legacy (device administrator) mode
  • Whether to limit the number of devices a user can enroll

    If the device limit is reached, an error message lets the user know that they exceeded the device registration limit.

When you create a delivery group, you can use the default enrollment profile named Global or specify a different enrollment profile.

Enrollment profiles, delivery groups, and enrollment

Enrollment profiles and delivery groups interact as follows:

  • You can attach an enrollment profile to one or more delivery groups.

  • If a user belongs to multiple delivery groups that have different enrollment profiles, the name of the delivery group determines the enrollment profile used. XenMobile Server selects the delivery group that appears last in an alphabetized list of delivery groups. For example, suppose that you have the following:

    • Two enrollment profiles, named “EP1” and “EP2”.
    • Two delivery groups, named “DG1” and “DG2”.
    • “DG1” is associated with “EP1”.
    • “DG2” is associated with “EP2”.

    If the enrolling user is in both the “DG1” and “DG2” delivery groups, XenMobile Server uses the “EP2” enrollment profile to determine the enrollment type for the user.

  • Deployment order applies only to devices in a delivery group that has an enrollment profile configured for MDM (device management).

  • After a device enrolls, some changes to an enrollment profile require re-enrollment:

    • Changing the configuration to downgrade a device from MDM+MAM to MAM or MDM enrollment. A downgrade might occur when you update an enrollment profile or move a device to a different delivery group.
    • Adding MAM to an enrollment profile that’s configured for MDM.
    • Moving a device that’s enrolled in MDM to a delivery group configured for MDM+MAM. That change impacts new device enrollments only. Existing device enrollments aren’t impacted.
    • Adding MDM to an enrollment profile that’s configured for MAM.

To create an enrollment profile

  1. In the XenMobile Server console, go to Configure > Enrollment Profiles.

  2. On the Enrollment Info page, type a descriptive name for the profile. Select a value to limit the number of devices per user. By default, a user can enroll unlimited devices. The limit applies to the sum of MAM or MDM managed Android, iOS, and Windows devices that a user enrolls.

  3. On the Android Enterprise page, select an enrollment type.

    Enrollment Profile page for Android

    By default, the Global enrollment profile enrolls:

    • New and factory reset Android Enterprise devices as fully managed devices.
    • BYOD Android Enterprise devices as work profile devices.

    For more information, see Android Enterprise.

  4. On the Assignment page, attach one or more delivery groups to the enrollment profile.

    A user might belong to multiple delivery groups that have different enrollment profiles. In that case, the name of the delivery group determines the enrollment profile used. XenMobile selects the delivery group that appears last in an alphabetized list of delivery groups. To create delivery groups, go to Configure > Delivery Groups.

Enrollment profiles