Product Documentation

Managing Delivery Groups

May 02, 2016

Device configuration and management typically involves creating resources (policies and apps) and actions in the XenMobile console and then packaging them using delivery groups. The order in which XenMobile pushes resources and actions in a delivery group to devices is referred to as the deployment order. This article describes how to add, manage, and deploy delivery groups; how to change the deployment order of resources and actions in delivery groups; and how XenMobile determines deployment order when a user is in multiple delivery groups that have duplicate or conflicting policies.

Delivery groups specify the category of users to whose devices you deploy combinations of policies, apps, and actions. Inclusion in a delivery group is usually based on users' characteristics, such as company, country, department, office address, title, and so on. Delivery groups give you greater control over who gets what resources and when they get them. You can deploy a delivery group to everyone or to a more narrowly defined group of users.

Deploying to a delivery group means sending a push notification to all users with iOS, Windows Phone, and Windows tablet devices who belong to the delivery group to reconnect to XenMobile, so that you can reevaluate the devices and deploy apps, policies, and actions; users with other platform devices receive the resources immediately if they are already connected or, based on their scheduling policy, the next time they connect.

The default AllUsers delivery group is created when you install and configure XenMobile. It contains all local users and Active Directory users. You cannot delete the AllUsers group, but you can disable the group when you do not want to push resources to all users.

Deployment Ordering

Deployment order is the sequence in which XenMobile pushes resources to devices. When determining deployment order, XenMobile applies filters and control criteria, such as deployment rules and deployment schedule, to policies, apps, actions, and delivery groups. Before adding delivery groups, consider how the information in this section relates to your deployment goals.

Here's a summary of the main concepts related to deployment order:

  • Deployment order: The sequence in which XenMobile pushes resources (policies and apps) and actions to a device.
  • Deployment rules: XenMobile uses the deployment rules that you specify for device properties to filter policies, apps, actions, and delivery groups. For example, a deployment rule might specify to push the deployment package when a domain name matches a particular value.
  • Deployment schedule: XenMobile uses the deployment schedule that you specify for actions, apps, and device policies to control deployment of those items. You can specify that a deployment occurs immediately, on a particular date and time, or according to deployment conditions.

The following table shows those and other criteria that you can associate with specific objects or resources to filter them or control their deployment.

Object/Resource

Filter/Control Criteria

Device policy

Device platform

Deployment rule (based on device properties)

Deployment schedule

App

Device platform

Deployment rule (based on device properties)

Deployment schedule

Action

Deployment rule (based on device properties)

Deployment schedule

Delivery group

User/Groups

Deployment rule (based on device properties)

It is very likely that, in a typical environment, multiple delivery groups become assigned to a single user, with the following possible results:

  • Duplicate objects exist within the delivery groups.
  • A specific policy is configured differently in more than one delivery group that is assigned to a user.

When either of those situations occur, XenMobile calculates a deployment order for all of the objects that it must deliver to a device or act upon. The calculation steps are independent of the device platform.

Calculation steps:

  1. Determine all of the delivery groups for a specific user, based upon the filters of user/groups and the deployment rules.
  2. Create an ordered list of all resources (policies, actions and apps) within the selected delivery groups that apply based on the filters of device platform, deployment rules and deployment schedule. The ordering algorithm is as follows:

a. Place resources from delivery groups that have a user-defined deployment order ahead of those without one. The rationale for this is described after these steps.

b. As a tie-breaker among delivery groups, order resources from delivery groups by delivery group name. For example, place resources from delivery group A ahead of those from delivery group B.

c. While sorting, if a user-defined deployment order is specified for resources of a delivery group, maintain that order. Otherwise, sort the resources within that delivery group by resource name.

d. If the same resource appears more than once, then remove the duplicate resource.

Resources that have a user-defined order associated with them deploy prior to resources without a user-defined order. A resource can exist in multiple delivery groups assigned to user. As indicated in the steps above, the calculation algorithm removes redundant resources and only delivers the first resource in this list. By removing duplicate resources in that way, XenMobile enforces the order defined by the XenMobile administrator.

For example, suppose that you have two delivery groups as follows:

  • Delivery group A: With unspecified order for resources (RES); contains RES1 and RES2.
  • Delivery group B: With specified order for resources; contains RES3 and RES2. In this case, you want to deliver RES3 before RES2.

If the calculation algorithm only ordered deployment groups by name, XenMobile would perform the deployment in this order: RES1, RES2, RES3. XenMobile would ignore RES2, a duplicate, from delivery group B.

However, the calculation algorithm places resources from delivery group B higher in the list over those from delivery group A, so that XenMobile deploys in this order: RES3, RES2, RES1. XenMobile ignores RES2 from delivery group A, as it is a duplicate. That algorithm therefore respects the order specified by the XenMobile administrator.

To add a delivery group

1. In the XenMobile console, click Configure > Delivery Groups. The Delivery Groups page appears.

localized image

2. From the Delivery Groups page, click Add. The Delivery Group Information page appears.

localized image

3. In the Delivery Group Information page, enter the following information:

Name: Type a descriptive name for the delivery group.

Description: Type an optional description of the delivery group.

4. Click Next. The Delivery Group User page appears.

localized image

5. In the Select User Groups page, enter the following information:

a. Select domain: From the list, select the domain from which to choose users.

b. Include user groups: Do one of the following:

- Click Search to see a list of all user groups in the selected domain.

- Type a full or partial group name in the search box, and then click Search to limit the list of user groups.

c. In the list of user groups, click the groups you want to add. The selected groups appear in the Selected user groups list.

localized image

To remove a user group from the Selected user groups list, do one of the following:

- Click Search to see a list of all user groups in the selected domain.

- Type a full or partial group name in the search box, and then click Search to limit the list of user groups.

User groups in the Selected user groups list have check marks next to their name in the resulting list. Scroll through the list and clear the check box next to each group you want to remove.

d. Or/And: Select whether users may be in any group (Or) or whether they must be in all groups (And) for the resource to be deployed to them.

e. Deploy to anonymous user: Select whether to deploy to unauthenticated users in the delivery group.

Note: Unauthenticated users are users whom you were not able to authenticate, but you allowed their devices to connect to XenMobile anyway.

6. Expand Deployment Rules and then configure the following settings: The Base tab appears by default.

localized image

a. In the lists, click options to determine when the policy should be deployed.

(1) You can choose to deploy the policy when all conditions are met or when any conditions are met. The default option is All.

(2) Click New Rule to define the conditions.

(3) In the lists, click the conditions, such as Device ownership and BYOD, as shown in the preceding figure.

(4) Click New Rule again if you want to add more conditions. You can add as many conditions as you would like.

b. Click the Advanced tab to combine the rules with Boolean options.

localized image

The conditions you chose on the Base tab appear.

c. You can use more advanced Boolean logic to combine, edit, or add rules.

(1) Click ANDOR, or NOT.

(2) In the lists that appear, choose the conditions that you want to add to the rule and then click the Plus sign (+) on the right-hand side to add the condition to the rule.

At any time, you can click to select a condition and then click EDIT to change the condition or Delete to remove the condition.

(3) Click New Rule again if you want to add more conditions.

In this example, the device ownership must be BYOD, the device local encryption must be True, and the device mobile country code cannot be only Andorra.

localized image

7. Click Next. The Delivery Group Resources page appears. You optionally add policies, apps, or actions for the delivery group here. To skip this step, under Delivery Group, click Summary to see a summary the delivery group configuration; otherwise, do the following:

Note: To skip a resource, under Resources (optional) click the resource you want to add and follow the steps for that resource.

To add policies

localized image

a. Scroll through the list of available polices to find the policy you want to add, or to limit the list of policies, type a full or partial policy name in the search box and then click Search.

b. Click a policy and drag it into the right-hand box.

c. Repeat steps a and b to add more policies.

localized image

d. To remove a policy resource, click the X next to the policy name.

e. Click Next to move to the Apps resource page. If you are not adding more resources, under Delivery Group, click Summary. Either the Apps resource page appears or the Summary page appears.

To add Apps

localized image

a. Scroll through the list of available apps to find the app you want to add, or to limit the list of apps, type a full or partial app name in the search box and then click Search.

b. Click an app and drag it into either the Required Apps box or the Optional Apps box.

c. Repeat steps a and b to add more apps.

localized image

d. To remove an app resource, click the X next to the app name.

e. Click Next to move to the Actions resource page. If you are not adding more resources, under Delivery Group, click Summary. Either the Actions resource page appears or the Summary page appears.

To add Actions

localized image

a. Scroll through the list of available actions to find the action you want to add, or to limit the list of actions, type a full or partial action name in the search box and then click Search.

b. Click an action and drag it into the right-hand box.

c. Repeat steps a and b to add more actions.

localized image

d. To remove an action resource, click the X next to the action name.

e. Click Next. The Summary page appears.

localized image

8. On the Summary page, you can review the options you have configured for the delivery group and change the deployment order of resources. Click Back to return to previous pages to make any necessary adjustments to the configuration. Click Deployment Order to reorder the resource deployment order; for more information on changing deployment order, see To change deployment order.

9. Click Save to save the delivery group.

To change deployment order

1. Click the Deployment Order button. The Deployment Order dialog box appears.

Deployment order dialog box


2. Click on a resource and drag it to the location from which you want it deployed. After you change the deployment order, XenMobile deploys resources in the list from top to bottom.

3. Click Save to save the deployment order.

To edit a delivery group

  1. On the Delivery Groups page, choose the delivery group you want to edit by selecting the check box next to its name or by clicking in the line containing its name.
  2. Click Edit.
    Note: Depending on how you selected the delivery group, the Edit command appears above or to the right of the delivery group.

    Delivery group edit


    Delivery group edit

    The Delivery Group Information edit page appears.

     

    Delivery group edit page

     

  3. Add or change the Description.
    Note: You cannot change the name of an existing group.
  4. Click Next. The Select User Groups page appears.

     

    Delivery group user page

     

  5. In the Select User Groups pane, enter or change the following information:
    1. Select domain: In the list, select the domain from which to choose users.
    2. Include user groups: Do one of the following:
      • Click Search to see a list of all user groups in the selected domain.
      • Type a full or partial group name in the search box, and then click Search to limit the list of user groups.
    3. In the list of user groups, click the groups you want to add. The selected groups appear in the Selected user groups list.

       

      Select user groups

       

      Note: To remove user groups, click Search, and then in the list of user groups, clear the check box next to the group or groups you want to remove. You can type a full or partial group name in the search box and then click Search to limit the number of user groups displayed in the list.
    4. Or/And: Select whether users may be in any group (Or) or whether they must be in all groups (And) for deployment.
    5. Deploy to anonymous user: Select whether to deploy to unauthenticated users in the delivery group.
      Note: Unauthenticated users are users whom you were not able to authenticate, but whose devices you allowed to connect to XenMobile.
  6. Expand Deployment Rules and then configure the following settings: The Base tab appears by default.

     

    Deployment rules

     

    1. In the lists, click options to determine when the policy should be deployed.
      1. You can choose to deploy the policy when all conditions are met or when any conditions are met. The default option is All.
      2. Click New Rule to define the conditions.
      3. In the lists, click the conditions, such as Device ownership and BYOD, as shown in the preceding figure.
      4. Click New Rule again if you want to add more conditions. You can add as many conditions as you would like.
    2. Click the Advanced tab to combine the rules with Boolean options.

       

      Advanced deployment rules with base rules

       

      The conditions you chose on the Base tab appear.
    3. You can use more advanced Boolean logic to combine, edit, or add rules.
      1. Click AND, OR, or NOT.
      2. In the lists that appear, choose the conditions that you want to add to the rule and then click the Plus sign (+) on the right-hand side to add the condition to the rule.

        At any time, you can click to select a condition and then click EDIT to change the condition or Delete to remove the condition.

      3. Click New Rule again if you want to add more conditions.

        In this example, the device ownership must be BYOD, the device local encryption must be True, and the device mobile country code cannot be only Andorra.

        Advanced deployment rules complete

         

  7. Click Next. The Delivery Group Resources page appears. Add or delete policies, apps, or actions here. To skip this step, under Delivery Group, click Summary to see a summary of the delivery group configuration.

    When you are done modifying a resource, click Next or under Delivery Group, click Summary.

    Either the next resource page appears or the Summary page appears.


    Delivery group summary page

  8. On the Summary page, you can review the options you have configured for the delivery group and change the deployment order of resources. Click Back to return to previous pages to make any necessary adjustments to the configuration. Click Deployment Order to reorder the resource deployment order; for more information on changing deployment order, see To change deployment order.
  9. Click Save to save your changes.

To enable and disable the AllUsers delivery group

Note: AllUsers is the only delivery group that you can enable or disable.
  1. From the Delivery Groups page, choose the AllUsers delivery group by selecting the check box next to AllUsers or by clicking in the line containing AllUsers. Then do one of the following:
    Note: Depending on how you selected AllUsers, the Enable or Disable command appears above or to the right of the AllUsers delivery group.

    Delivery group disable


    Delivery group disable

    • Click Disable to disable the AllUsers delivery group. This command is only available if AllUsers is enabled (the default).

      Disabled appears under the Disabled heading in the delivery group table.


      Delivery group disabled

    • Click Enable to enable the AllUsers delivery group. This command is only available if AllUsers is currently disabled.

      Disabled disappears from under the Disabled heading in the delivery group table.

To deploy delivery groups

Deploying to a delivery group means sending a push notification to all users with iOS, Windows Phone 8.1, and Windows 8.1 tablet devices who belong to the delivery group to reconnect to XenMobile, so that you can reevaluate the devices and deploy apps, policies, and actions; users with other platform devices receive the resources immediately if they are already connected or, based on their scheduling policy, the next time they connect.

Note: For updated apps to appear in the Updated Available list in the Worx Store on users' Android devices, you must first deploy an App Inventory policy to the users' devices.
  1. On the Delivery Groups page, do one of the following:
    • To deploy to more than one delivery group at a time, select the check boxes next to the groups you want to deploy.
    • To deploy to a single delivery group, either select the check box next to its name or click the line containing its name.
  2. Click Deploy.
    Note: Depending on how you select a single delivery group, the Deploy command appears above or to the right of the delivery group.

    Delivery group deploy


    Delivery group deploy

    The Deploy Devices dialog box appears.
  3. Verify that the groups to which you want to deploy apps, policies, and actions are listed and then click Deploy. The apps, policies, and actions are deployed to the selected groups based on device platform and scheduling policy.
    You can check deployment status on the Delivery Groups page in one of these ways:
    • Look at the deployment icon under the Status heading for the delivery group, which indicates any deployment failure.


      Delivery group deployment status

    • Click the line containing the delivery group to display an overlay that indicates Installed, Pending, and Failed deployments.


      Delivery group deployment status

To delete delivery groups

Note: You cannot delete the AllUsers delivery group, but you can disable the group when you do not want to push resources to all users.
  1. On the Delivery Groups page, do one of the following:
    • To delete more than one delivery group at a time, select the check boxes next to the groups you want to delete.
    • To delete a single delivery group, either select the check box next to its name or click the line containing its name.
  2. Click Delete.
    Note: Depending on how you select a single delivery group, the Delete command appears above or to the right of the delivery group.

    Delivery group delete


    Delivery group delete

    The Delete dialog box appears.
  3. Click Delete on the Delete dialog box.
    Important: You cannot undo this action.