MaaS360 Mobile Device Management (MDM) Administrators Guide
MaaS360.com Copyright © 2014 Fiberlink® Corporation. All rights reserved. Information in this document is subject to change without notice. The software described in this document is furnished under a license agreement or nondisclosure agreement. The software may be used or copied only in accordance with the terms of those agreements.
MaaS360.com Table of Contents Getting Started ................................................................................................................6 Step 1: Select Platforms .................................................................................................6 Step 2: Add Devices .......................................................................................................14 Step 3: Play ........................................................................................
MaaS360.com Policies ......................................................................................................................48 Precedence .............................................................................................................50 Policy Files..............................................................................................................51 Compliance Rules ........................................................................................................
MaaS360.com Appendix A: Features List ....................................................................................................104 Device Support .............................................................................................................104 Activation and Enrollment ...............................................................................................105 Device Attributes ..................................................................................................
MaaS360.com Getting Started MaaS360 Mobile Device Management is a cloud-based multi-tenant platform that helps to monitor and manage your smartphones, tablets, and other mobile devices. MaaS360 is a comprehensive mobile device management solution that supports a variety of mobile device platforms including Apple iOS, Android, Windows Phones, BlackBerry and others. Ease of use, security and centralized management are some of the key features of MaaS360.
MaaS360.com If you will be using iOS devices, Apple requires you to have an Apple Push Notification service (APNs) certificate. MaaS360 will walk you through the process of obtaining this certificate: 1. Click Setup iOS Now. The Safari, Chrome and Firefox web browsers are recommended for this process. 2. Enter a corporate AppleID. You must use the same AppleID every year when renewing your APNs certificate. If you don’t have an AppleID, hover over Create ID? and click Apple Website.
MaaS360.com 4. The CSR will be emailed to the specified account. You can also click the download link to upload it right away. 5. After clicking the download link, you will be able to save the file. Saving it will put it in your Downloads folder by default. 6. Enter the AppleID you used in Step 2 and the password, and then click Sign in. To skip the steps necessary to generate a PEM file, click Next. Continue with Step #12.
MaaS360.com 7. Click the green Create a Certificate button. 8. Check the box next to I have read and agree to these terms and conditions and click Accept.
MaaS360.com 9. Now you need to find the file so you can upload it. Click Browse. 10. Find the CSR.txt file in your Downloads folder. Click Open. 11. When the correct file is show in the field, click Upload.
MaaS360.com 12. Click Download to download the PEM file. You will also receive this in email just like the CSR.txt file, but you will be using it in the very next step. 13. Click OK to save the PEM to your Downloads folder.
MaaS360.com 14. You will receive a confirmation message. Click Next. 15. Now you have to upload the certificate to MaaS360. Click Browse. 16. Find the file MDM_Fiberlink_Communications.pem in your Downloads folder. Click Open.
MaaS360.com 17. Enter a password. This password has no minimum security requirement. To help you remember the password, you may want to make it the same as your AppleID password. After entering it in the Create Certificate Password and Confirm Password fields, click Upload. 18. The APNs certificate has been created. Click Close. 19. MaaS360 will automatically take you to the next step, adding a device.
MaaS360.com Step 2: Add Devices Click the second tab to begin enrolling devices in MaaS360. 1. Information from your enrollment will be automatically entered in the Username, Email Address and Phone Number fields, but you can override it. Review the Domain field; it is used for email and wireless set up, and more. 2. Click Send Request. MaaS360 will send an enrollment request to the specified device. When the end user gets the enrollment request, they will be directed to download the MaaS360 app.
MaaS360.com When you are finished, click Close Quick Start to access the MaaS360 Home page. Advanced Configuration Steps Services To review and configure additional services, mouse over the Setup tab and click Services. You can see the services that have already been set up and make changes. Note: The items you see on this screen depend on the services you have purchased. For more information about any additional offerings, please contact your service representative.
MaaS360.com Laptop and Desktop Management Specifies if you are set up to use MaaS360 to manage your laptops and desktops. ActiveSync Manager Specifies if you are set up to use ActiveSync to manage devices that connect to your corporate Exchange Server using the ActiveSync protocol. Integration with Exchange 2007, Exchange 2010, Exchange 2013, Office 365 and Microsoft BPOSDedicated is supported. You will need to download and configure the MaaS360 Cloud Extender.
MaaS360.com Corporate Identifier to be used in your Enrollment URL Your corporate identifier must be entered by your users when they enroll their devices. Select Default User Authentication Mode Specify how much authentication future device enrollments will require.
MaaS360.com Prompt user to accept your corporate usage policy while adding a new device Corporate Information If checked, MaaS360 will display your usage policy to your users. They must read the policy and agree to it before downloading the MaaS360 app. When this box is checked, MaaS360 will allow you to browse to your usage policy and upload it. Any prompts for over-the-air actions scheduled for iOS 7 devices use the iOS Services Hostname.
MaaS360.com Configure Strong Authentication Select the checkbox to display the options. Allow administrators to log in only from previously registered devices MaaS360 will flag any device that has never been used to access it before, and will send the owner an email with a passcode. The person who is trying to log in must enter that passcode before accessing the portal.
MaaS360.com This screen shows the steps to download the Cloud Extender, and lists your integration options. For more information, refer to the Cloud Extender Installation Guide. Cloud Extender Settings Mouse over the Setup tab and select Cloud Extender Settings.
MaaS360.com This screen shows the different settings configured for your Cloud Extender and allows you to change them. You can click Edit to change the settings, or select an action from the menu in the upper right corner. View Audit History will allow you to see the changes that have been made previously.
MaaS360.com Enabling Auto-Quarantine If you are using ActiveSync, MaaS360 can put all devices that attempt to access your corporate resources into quarantine automatically until an administrator approves them. To configure Auto-Quarantine, perform the following steps: 1. Click Setup > Cloud Extender Settings. 2. Click Edit. 3. Change the Auto-Quarantine Settings to enable the feature, and provide an email address that will receive notifications about quarantined devices. 4.
MaaS360.
MaaS360.com MaaS360 Home Page MaaS360 has been designed to make it easy for you to get information and take action quickly and easily. Navigation and the UI The MaaS360 user interface provides an easy-to-use tab and menu navigation layout, allowing quicker access to the available applications. Tabs correspond to a related set of applications or tasks available to the portal user. The menus show the individual workflows, reports, etc. for the portal user.
MaaS360.com When you see the item you want, you can take action by clicking the link below it; you can view, locate, distribute an app, etc. In the example above, you can click the Locate link under Marketing2968 iPad to display a map that shows the device’s location. Snapshots MaaS360 also gives you a snapshot of your environment at the top of the screen. You can click one of the plus signs to add a device, user, app or document. The text of each snapshot is a link.
MaaS360.com The Home page icon shows the number of new activities that have been added to the feed. In this example, there is one new activity: You can use the filter to display specific types of activities. My Alert Center The Home page also displays My Alert Center, a dashboard of important information that you can customize to meet the needs of your organization.
MaaS360.com The alerts are red, green or blue. Security alerts can be red or green, depending on if the situation needs attention. Information alerts are blue. Each administrator can customize their own alerts. They are not specific to administrators or global unless you want them to be. • Click to add an alert • Click to refresh the data • Click to see Alert Center history • Click for the key to the alert color coding Alerts are set up using the MaaS360 Advanced Search feature.
MaaS360.com Name & Description Enter the name and description of the alert. The description will appear when you mouse over the alert. Type Specify if it is a security alert or and information alert. Security alerts will appear red or green, depending on whether the situation requires attention. Info alerts will always appear blue. Scope Indicate if the alert should be visible to you alone, or to you and the entire organization. Condition Define the alert.
MaaS360.com Click the individual alert to see details about it. Additional Navigation There are a few more items at the top right-hand corner of the screen: • Search: Begin typing a device name in this field to quickly find a device, user, app or document. • Chat Now: Click the icon to chat with a MaaS360 representative. • Help: Click the question mark to access help for MaaS360. • My Profile: Click your name to see your profile and to change it.
MaaS360.com • Click the power icon to sign out of MaaS360.
MaaS360.com Devices The Devices tab provides access to screens you can use to see your devices. You can also click the Devices link on the Home page. Inventory Select Devices > Inventory to see the Device Inventory screen, or click the Devices link on the Home page. The Device Inventory lists your devices. You can use the filter to find specific devices: Click the Reset button to remove the filter and see the complete list again. You can change the columns that are listed by: 1.
MaaS360.com At the top right-hand corner of the screen are additional buttons: • Click • Click Save Column Preferences to preserve the changes you made to the columns. • Click Go to Advanced Search to enter advanced search criteria. • Click Add Device to send an enrollment request to a device. to refresh the information. Device Views The first device view is the Summary screen. Click to refresh the information. Additional screens are available by clicking the pull-down menu.
MaaS360.com • Summary: Basic information about the device, including network and compliance information. • Hardware Inventory: Detailed hardware and storage information about the device. Click Edit to update custom attribute information. • Operating System: The OS, OS version, kernel version, API level and more. • Network Information: Detailed information about the cellular network, Wi-Fi network and more. • Location Information: A map showing the last known location of the device.
MaaS360.com • Refresh Device Information: Retrieves the most recent data from the mobile device • Last Known Location: Locates the mobile device • Send Message: Sends a message to it • Buzz Device: Sends an alert tone to help locate it in the immediate area • Lock Device: Sends a command that will lock it • Reset Device Passcode: Clears the current passcode • Selective Wipe: Deletes the Wi-Fi profile, Exchange ActiveSync profiles, and Web shortcuts configured on the device via MaaS360 policy.
MaaS360.com • Change ActiveSync Policy (EAS): Changes the policy being enforced on the device.
MaaS360.com One custom attribute, Important Device (Skip Enforcement Action), has special properties. If it is set to Yes, the device will be exempt from automated enforcement actions. You can upload a file with custom attributes so you don’t have to update each record individually. Select Devices > Custom Attributes to see the upload screen. Available for Select the group to be updated, or all users. Process Request Enter the filename with the information to be uploaded.
MaaS360.com You can see the file by clicking , and you can see any errors by clicking . Groups MaaS360 supports two kinds of groups: device groups and user groups. You can see the available groups by selecting Devices > Groups, or by selecting Users > Groups. A device group can be a non-editable default device group, an editable public group, a non-editable public group or a private device group. You can search for devices matching specific search criteria and group those devices into a device group.
MaaS360.com • Change Rule Set: Assign a compliance rule set to all devices in the device group. • Distribute App: Allows you distribute applications to devices in the group. • Distribute Document: Allows you distribute documents to devices in the group. • Edit Group: Allows you to edit the group. • Delete Group: Delete public and private device groups that you have created.
MaaS360.com Defining a Group To use a search to define a group, perform the following steps: 1. Click the Create Device Group button. 2. Enter details about the device group in the pop-up box. Enter the name of the group, a description, and specify if it is public or private. When you are finished, click Save. The search criteria will be saved and any actions that are performed will be done for all the devices in the group at that time.
MaaS360.com You can save your selections by clicking Save Column Preferences. Enrollment Requests You can see a list of the enrollment requests that were sent by selecting Devices > Enrollment Requests.
MaaS360.com Status Status of the request: • • • • New—the request was just sent Failed—an error prevented the request from being successful Complete—the device was successfully enrolled Pending—although the request was sent successfully, the device’s owner has not yet enrolled the device Device Name The registered device name. Platform Device’s platform. Request Date Date the enrollment request was created. Domain Domain provided in the request. Available for Group associated with the request.
MaaS360.com 2. Bulk Enroll: allows you to upload a .csv or .txt file with user information so you can send multiple enrollment requests simultaneously 3. Bulk Deployment: allows you to enroll multiple devices via the Apple Configurator tool Action History MaaS360 can show you all the actions that have been performed on your devices. Click Devices > Actions & Events to see the list. Device Name Name of the device. Platform Device the platform is on. MDM Device ID Device’s ID.
MaaS360.com 3. Device types (smartphone, tablet) MaaS360 has a background process that compares each of them, in order. In most cases, that is enough information to match the records. If MaaS360 cannot make an informed decision about which devices belong together, the unmatched records will appear on the Exceptions report so an administrator can merge the records manually. The matching process runs approximately every 2 minutes, and the most recent execution time is shown on the report.
MaaS360.com Users MaaS360 gives you a quick, easy way to see all your users and device groups. There are two choices on the Users tab: Directory Select Directory from the Users tab to see the User Directory. You can also click the Users link on the Home page. The User Directory shows your users. You can filter the data by status (whether the person is an active or inactive user).
MaaS360.com Click Hide users with no Devices to filter out users who have no devices managed by MaaS360, and View All Users to see the complete list again. You can get details about a particular user by clicking the View link. You can see information about the person, the groups he or she is in, and a list of the devices that they have. Click on a device’s name to see the Device View. Groups Device groups allow you to deploy policies, apps or documents to similar categories of users.
MaaS360.com Note: User Groups are also displayed on this screen. You can see any automatic actions for a device group by clicking the plus sign in the Applied Actions column. Click the Show all automated actions to expand the automated actions. Click Hide all automated actions to collapse them. You can click Show all automated actions to display them again.
MaaS360.com • Distribute Package: This option is only visible if you are using the desktop/laptop module of MaaS360.
MaaS360.com Security MaaS360 gives you the ability to customize the security you use for your devices. Policies Select Security > Policies to access the Policies screen.
MaaS360.com default. Contact your account representative for details. Type Specifies which platform the policy is designed for. Different platforms have different policy options. Version How many times the policy has been published. Last Modified The last time the policy was changed. Last Published The last time the policy was successfully published. A policy will not be published successfully if there are errors.
MaaS360.com When you are finished making changes, click Save and Publish. Your policy cannot be assigned to any devices until it has been published. Precedence Note: This feature is not enabled by default. Contact your account representative for details. In MaaS360, policies are dynamically assigned to different device groups, so the policy in force on a device can change as the circumstances change. For example, you can have a device group for a specific operating system version and assign a policy to it.
MaaS360.com Policy Files Click the Policy Files button to see uploaded mobile device policy files. You can upload certificates, images and file containing mobile device settings. Click the Upload Content button to view the Upload Policy Files pop-up box.
MaaS360.com Enter relevant name in the Content Name field. Select the desired Type. The available content types that you can upload are Certificates, Images and Device Settings. • Certificates: the Certificate type allows you to authenticate and register your mobile devices in the MaaS360 system. • Images: the Image type allows you to associate an image or a picture file with your document.
MaaS360.com The existing rules will be displayed. Rule Set Name Name of the compliance rule. It must be unique. (Actions) Click the link under the name to perform an action: • • • • • Edit: review the rule set and change it Assign: apply it to group Make Default/Clear Default: make this rule set the default Audit: view the audit history of the rule set Delete: delete the rule set Available for Specifies which groups the rules set can be applied to. Default If checked, this rule set is the default.
MaaS360.com Click Continue. The Basic Settings tab appears. Specify the platforms that the rule set will apply to, and enter the email addresses that should receive alerts for the rule set.
MaaS360.com Geo-Fencing Rules can be set up after you’ve created approved locations. You can change the policy in force on the device based on its location, or specify actions that should take place if the device is removed from one of the approved locations. Use the Monitoring Rules to monitor SIM changes, when a user’s device is roaming, and any operating system version changes. Make your changes and click the next tab. Note: Expense Management is available for an additional cost.
MaaS360.com When you are finished making changes, click Save. Compliance Log The Compliance Status Overview report displays a list of all devices that are not in compliance with the configured compliance rules. Depending on the device compliance status, the Action Status column will display the Executed, Planned and the NA (Not Available) values. NA is displayed only for devices that are configured to receive compliance status alerts.
MaaS360.com On the Privacy Settings screen, specify how you want to treat PII. Click Save when you are finished. Restrict Location Information Click to stop MaaS360 from collecting location information. This includes physical address, geographical coordinates and history, IP address and SSID. Select Applicable Ownership Types Specify which devices should be exempt from the collection of location information.
MaaS360.com Locations Select Security > Locations to set up locations that can be used for geo-fencing rules. Locations can be based on geographical locations and Wi-Fi networks. You can see the details about each location, and policies that are using it. Click the Actions pull-down menu for one of the locations to perform an action on it. You can edit the location, assign a policy to it, or delete it. Click the Location Name to see the address and range for the location.
MaaS360.com Add an Address Based Location Click Add Address based Location. Enter the address and the range, and then click Search. Enter the location name and click Add this specific location with Range.
MaaS360.com The location now appears on the Locations screen. Add a Wi-Fi based Location Click Add a Wi-Fi based Location from the Locations screen. Enter the location name, Wi-Fi SSID and MAC address. Click Add.
MaaS360.
MaaS360.com Applications The app management features of MaaS360 are accessed from the Apps tab. The App Catalog MaaS360 allows you to deploy apps to your users quickly and easily. Each app must be loaded into the MaaS360 App Catalog before it can be distributed. To access the App Catalog, mouse over Apps and click Catalog. The App Catalog lists your apps and provides basic information about them. You can sort and filter your apps by clicking on the column headings.
MaaS360.com It expands so you can indicate the type of app. 2. Specify if the app will be available to all users or a specific group, even if you do not plan to distribute the app to them right away. 3. Begin entering the name of the app. MaaS360 will present you with choices as you type.
MaaS360.com 4. Specify the app removal, security and distribution options. Note: The security policies you used when uploading it into the catalog are in effect now. Different options are displayed depending on the type of app: • iTunes App Store App: o App Source: Enter the app’s name.
MaaS360.com • • Instant Install: MaaS360 will prompt the recipient to download the app • Send Email: MaaS360 will send them an email telling them about the new app Group: Select the group of devices to receive the app and specify: • Instant Install: MaaS360 will prompt the recipient to download the app • Send Email: MaaS360 will send them an email telling them about the new app All Devices: All your devices will receive the app.
MaaS360.com • Google Play App: o App Name: Enter the app’s name.
MaaS360.com None: Load the app into the App Catalog without distributing it Specific Device: Enter the device name and specify: • Instant Install: MaaS360 will prompt the recipient to download the app. Instant Install is silent on Samsung SAFE devices • Send Email: MaaS360 will send them an email telling them about the new app Group: Select the group of devices to receive the app and specify: • Instant Install: MaaS360 will prompt the recipient to download the app.
MaaS360.com • All Devices: All your devices will receive the app. Send Email: Recipients will receive an email telling them that the app has been added to their app catalog Enterprise Windows Phone App: o Available for: Specify who can receive the app (all users or a specific group) o App Source: Upload the file.
MaaS360.com Note: iOS Web Apps are always removed if MaaS360’s control of the device is terminated or if a selective wipe is performed on it.
MaaS360.com If there are pending distributions, they will be marked with a red X. You can click the X to cancel the specified distribution. Distributing an App Click the Distribute link to choose the options you want for distributing the app. There are different options depending on the type of app.
MaaS360.
MaaS360.com 2. Browse to the file’s location and select it. Specify the region, and click Override Redeemed Code Status if you want to make it possible for the status of redeemed codes to be updated. 3. Click Upload. You can also upload a file when viewing an app by clicking and then entering the upload information. You can manage or review the status of VPP codes by performing the following: 4. Find the app. Mouse over More, and then click Manage VPP Codes.
MaaS360.com 5. You can see which devices used the codes and how many codes are still available for the app. 6. Click the Upload VPP Codes button to upload another file of codes. Click Clear VPP codes to clear any unused codes.
MaaS360.com Documents The Document Management features of MaaS360 are accessed from the Docs tab. Content Library MaaS360 allows you to distribute documents and files to your users quickly and easily. Each document must be loaded into the MaaS360 Content Library before it can be distributed. To access the Content Library, mouse over Docs and click Content Library. The Content Library lists your files and provides basic information about them.
MaaS360.com Adding Documents to the Content Library If you wish to add a new document, mouse over Docs and select Content Library. At the bottom of the page you can see how much free space is still available—you may need to delete documents before you can add the new one. Click the Add Documents button to upload documents that you wish to distribute to iOS and Android mobile devices. Enter the details about the document. Available for Specify the group that can receive the document.
MaaS360.com Select Files Browse to the file you want to add and select it. You can upload up to 15 files at a time. Document Names Enter the name you want your users to see. Tags Enter tags to help your users find the document, separated by a comma. Security Settings Specify the security settings that apply to this document: Download Policies Distribute to • Restrict Export: Users cannot open the document with another app.
MaaS360.com You can see information about the distribution, including the size of the file and any security that has been applied to it. You can also see the version history for the file. Click the red X to delete a distribution. For iOS devices, you can select Restrict Share and prevent documents from being opened with third-party apps. On Android devices it will prevent the content from going to the device.
MaaS360.com Click Add Version. Browse to the new version and click Save. Enter your password and click Continue. The version history at the bottom of the screen will reflect the change. Distribute To distribute a document, click the Distribute link under its name.
MaaS360.com Specify if an individual device, a group or all users should receive the document. If you want to distribute the document to more than one target, click . You can also enter an expiration date when MaaS360 will remove the document from an individual device, a group or all users. Click Distribute. Delete To delete a document, click the Delete link under its name. Document Settings Select Docs > Settings to specify document policies and behavior.
MaaS360.com Automatically Hide Doc Preview in App A preview of the document will not be shown for file formats like iBooks where preview is not supported. These are the default settings for all your documents. Content Sources MaaS360 integrates easily with your public environments, including SharePoint, Windows File Share content and Intranet sites. Note: If Private SharePoint is needed, you will need to install the MaaS360 Mobile Enterprise Gateway.
MaaS360.com Click Save. Click the Edit link under the site name to edit the settings, and Delete to remove the site.
MaaS360.com Expense Management Note: This module may not be enabled for all users. Contact your account representative for details. The Mobile Expense Management (MEM) module lets you enable mobile data usage tracking for specific devices. • Plans can set up in-network and roaming data usage limits. • Alerts can be set up to be automatically triggered when the user reaches or exceeds the specified threshold criteria.
MaaS360.com • Deactivate Plan: Make the plan inactive. Any devices currently assigned to the plan will not have a plan; their usage will not be tracked • View Audit History: See the actions that have been taken on the plan, including when it was published • Set Default: Make this plan the default plan Creating a New Plan To create a new plan, perform the following steps: 1. Click the Create New Plan button. 2. The Create Plan box appears. 3.
MaaS360.com Roaming Mobile data Usage Limit (MB) Specify the roaming data usage limit. 5. Click Save & Publish when you are finished defining the plan. The plan can now be deployed to users. It is only available to those in the group you originally specified in Step #3. The plan will be in Draft status until it is published. It cannot be used until it is published. Changing an Existing Plan 1. Find the plan on the Manage Plans screen. 2. Select Edit Plan from the Actions menu: 3.
MaaS360.com 3. Click Deactivate Plan on the menu. Click Continue when you see the confirmation message. The status of the plan is now Inactive. MaaS360 will no longer track usage for any devices that were assigned to it. To reactivate a plan, perform the following steps: 1. On the Manage Plans screen, make sure all plans are visible. The Show Active and Inactive Plans toggle should say Hide Inactive. 2. Click on the Actions pull-down menu for that plan, and then select Reactivate Plan. 3.
MaaS360.com 4. Click Continue. The Confirm Action message appears. 5. Click Continue. The plan has been reactivated. Viewing Audit History To see the changes that have been made to a plan, click View Audit History from the Actions menu for that plan. The Audit History screen displays changes for a plan, and when they were made.
MaaS360.com Reports MaaS360 Mobile Intelligence™ reports allows you to use enhanced reporting functions, such as the tabular presentation of reports to group associated graphs and reports, and to provide easy navigation between the reports. It also includes filters, which help you generate a variety of real-time reports or narrow down report details based on your filter criteria. To access the reports, mouse over the Reports tab and select the report family you want.
MaaS360.com • Corporate owned • Unspecified • iOS • Android • BlackBerry • Windows Phone • Time period You can save your filter so you can use it again. Click Save as Custom, and then enter a name and description for it. Note: The filter you select for one report in a family is retained for the other reports until you clear it by clicking Clear on the pull-down menu. You can subscribe to reports by clicking .
MaaS360.com You can specify the graphs and reports included in the subscription, the format (PDF or PPT), the email recipients, the delivery frequency and more. You can mouse over part of a graph to see the details about it. For example, the following shows that out of the 7 Android devices, 3 are tablets: If you click on it, MaaS360 displays the Details Report filtered to show information about those tablets: The active filters are highlighted (yellow) for the associated columns.
MaaS360.com Platform Administration Important administration tasks appear under the Portal Administration section of the Setup menu. Administrators To find or create a portal administrator, select Setup > Administrators. The Search Administrators screen appears. To find an administrator, enter one or more of the following: • Username • Email address • Select a role from the pull-down menu Click Search. If you do not enter any of the criteria, all administrators will be displayed.
MaaS360.com The Actions icons apply to the administrator. Edit the administrator’s information or roles. Reset the administrator’s password. Deactivate the administrator. Delete the administrator. View the change history for the administrator. Create Portal Administrator To create a new portal administrator: Click Add Administrator at the top of the screen. The Administrator Details screen appears. Enter the administrator’s email address and username.
MaaS360.com Click to select one or more roles to assign to the new user. When you click to select a role, the role description appears in the Role Description field. Note: A MaaS360 Portal Administrator can create Administrator accounts only with equal or lesser access rights. For example, an administrator who is assigned the Help Desk role can only create Help Desk accounts, but will be unable to create an account with more access rights (such as the Administrator).
MaaS360.com Enter your password and click Continue. You will receive a confirmation message. You can now click Create Another Administrator to perform the process again. Roles and Rights There are a number of roles in MaaS360: • Read-Only: The Read-Only role provides view-only access to all devices, policies, and applications. The Read-Only role also allows the administrator to view reports, My Alert Center, devices, policies, and the Action History report in the MaaS360 System.
MaaS360.com perform device view bulk updates, define Custom Attributes, manage MaaS360 Cloud Extenders, perform group level actions, publish policies, and Configure Services. Role Right to Access Category Description Administrator Apps - Read only App Distribution View only access to Apps. Action History Device Management Ability to view a global action history across all devices. Buzz Device Device Management Ability to buzz a device through a Device View action.
MaaS360.com Role Right to Access Category Description Mobile Analytics View only access to Mobile Metrics graphs and ability to propose new ideas. Policy Management View only access to Policies. Reports Reports Ability to view graphs and reports in the Reports tab Manage Apps App Distribution Ability to add, change or delete Apps. Action History Device Management Ability to view a global action history across all devices.
MaaS360.com Role Right to Access Category Description User Views - Generate Password Device Management Ability to generate passwords for users through the View All Users workflow. Users - Read only Device Management View only access to User View. Wipe Device Device Management Ability to wipe the device or canceling pending wipe action though a Device View action. Manage Docs Doc Distribution Ability to add, change or delete Docs.
MaaS360.com Role Right to Access Category Description Read Only Apps - Read only App Distribution View only access to Apps. Action History Device Management Ability to view a global action history across all devices. Device Management View only access to device enrollment requests. Device Management View only access to Device View (no actions). Enable Alerts Device Management Enable Alerts for Enterprise Customers.
MaaS360.com Role Right to Access Category Description Manage Device Enrollments Device Management Ability to manage device enrollment requests.
MaaS360.com Click Add Role. Enter the role’s name and a description. You can either create a new role or copy an existing one to use as a model. Creating a Role Based on an Existing Role If you want to use an existing one, select it from the pull-down menu and then click Next. The access rights for that role are already selected. You can make your changes, and then click Save.
MaaS360.com Creating a New Role Without Using a Model If you choose not to use an existing role as a model, select Create new and then click Next. On the Grant Access Rights screen none of the access rights will be selected. Select the rights you want to grant to the role, and then click Save. Managing Roles To change, delete or view a history of changes that were made to a custom role, mouse over Setup and select Roles.
MaaS360.com Select the role from the pull-down list on the Manage Role screen. It will automatically be populated with the description. Click Delete to delete the role. Click Change History to see a list of the changes made to the role. Click the View Changes link for one of the dates to see details.
MaaS360.com If you want to edit a role, click the Edit button on the Manage Role screen. The existing rights will be selected. Make your changes and click Save. Administrator Logins Report Mouse over Setup and click Administrator Logins Report. The Search Criteria screen appears. Enter a username, IP address, login date range or authentication status. If you do not enter any criteria, all the logins will be listed. Click Search.
MaaS360.
MaaS360.com Appendix A: Features List Device Support Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Kindle Fire Cloud Extender Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device Android 2.2+ √ √ √ Android 3.x √ √ √ Android 4.x √ √ √ BlackBerry OS 4 √ √ BlackBerry OS 5 √ √ BlackBerry OS 6 √ √ BlackBerry OS 7 √ √ BlackBerry OS 10 √ √ iOS 4.x (iPhone, iPad, and iPod Touch) √ √ √ iOS 5.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Kindle Fire Cloud Extender Win Phone 7.5 Win Phone 8 Windows Laptops Mac Requires Native App on Device Mac OS X Tiger, Lion, Mountain Lion √ QNX √ Symbian (Nokia) √ WebOS √ Windows Mobile 6.1 √ √ Windows Mobile 6.5 √ √ Windows Phone 7 √ Window Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender √ Certificate based Enrolled when Exchange Email is configured on Device Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 √ √ √ √ Model ID Modem Firmware Version √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ Motherboard Serial Number √ Number of Drives √ Number of Processor Cores Operating System Mac Requires Native App on Device Microsoft Auto-Update Status Model Windows Laptops √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ OS Architecture (32 vs.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Location Attributes Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Application Inventory Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Security and Compliance Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender ActiveSync Policy Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Windows Laptops Mac Data Encryption √ √ Data Leak Protection √ Cloud Extender √ Configuration Profile Name √ Configurator Supervised Mode √ √ √ Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Windows Laptops Mac Comments Requires Native App on Device Settings configured Settings Failed to Configure Kindle Fire √ Visible Passwords √ √ √ √ √ √ Android Kindle Fire Running Services Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Cloud Extender Win Phone 7.
MaaS360.com MaaS360 Services Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Windows Laptops Mac Comments Requires Native App on Device Microsoft Device Info Collection √ √ Microsoft Location Services √ √ Microsoft Push Notifications √ √ Primary Google Account √ Mobile Data Usage Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Browser History (Visited) Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Browser History (Blocked) Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Email Capabilities Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Privacy Settings Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptop Mac √ √ Requires Native App on Device Lock Device √ Lock Device- Display Message and Callback no.
MaaS360.com Group Actions Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Kindle Fire Cloud Extender Win Phone 7.
MaaS360.
MaaS360.
MaaS360.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Limit Email size to (KB) Specify the maximum size an email sent or received by the device can be. Longer messages will be truncated.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Require Encryption on the Mobile Device The device must be encrypted √ Require Manual Synchronization while Roaming If the device is roaming, it can only by synched manually √ Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Win Phone 7.
MaaS360.com Exchange ActiveSync Description - Allow Use of Facetime Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Win Phone 7.
MaaS360.com Exchange ActiveSync Description - Allow Use of YouTube - Allow Voice Dialing - Set Ratings for allowed Movies, TV Shows and Apps Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description - Allow iBookstore Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description -Enable Speaker Selection Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Configure WorkPlace Settings Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description - Enforce Device Encryption The data on the device must be encrypted if the device supports hardware encryption. On SAFE devices, the passcode policy will automatically require a 6digit alphanumeric passcode - Enforce SD Card Encryption Any SD cards used with the device must be encrypted - Visible Passwords - Allow USB Debugging - Allow SD Card - Allow SD Card Write Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device - Allow Google Crash Report The report will be sent √ SAFE 3.0+ - Allow Factory Reset The device can be restored to factory settings √ SAFE 2.0+ The device can be upgraded over the air √ SAFE 3.
MaaS360.com Exchange ActiveSync Description - Allow Microphone Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description - Allow Emergency Calls only Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device Only emergency calls can be made from the device √ SAFE 2.0+ - Allow Wi-Fi Wi-Fi can be used on the device. There is no effect on a Wi-Fi only device √ SAFE 2.0+ - Whitelisted SSIDs Network SSIDs that are allowed.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device - Allow user to add Wi-Fi networks The user can add Wi-Fi networks. This setting will be disabled if one or more Wi-Fi profiles are defined in the device’s policies. √ - Allow Data Network The user can add data networks √ - Mobile AP The device can be a mobile access point hot spot.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device - Allow Data Roaming The device can send and receive data while roaming √ - Allow Sync during Roaming The device can sync with servers while roaming √ SAFE 1.0+ - Allow Voice Roaming The user can make calls while roaming √ SAFE 3.
MaaS360.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device VPN Profile Configure your VPN profile √ Motorola, SAFE 2.0+ Email Profile Configure your Email profile √ SAFE 2.
MaaS360.
MaaS360.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device - Sync Contacts Contacts can be synced with the server √ SAFE 2.1+ - Sync Calendar Calendar events can be synced with the server √ SAFE 2.1+ - Sync Tasks Tasks can be synced with the server √ SAFE 2.1+ - Sync Notes Notes can be synced with the server √ SAFE 2.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device - Always Vibrate on New Email Notification The device will vibrate when it receives a new email √ SAFE 1.0+ - Vibrate on New Email Notification if device is silent The device will vibrate when it receives a new email and the ringer has been turned off on the device √ SAFE 1.
MaaS360.com Exchange ActiveSync Description - Show Fraud Warning Settings Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device If the user attempts to access a potentially fraudulent web site, warnings will be displayed √ SAFE 2.0+ - Allow Device discovery via Bluetooth The device can be discovered by Bluetooth √ SAFE 2.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device - Allow Data Transfer via Bluetooth Data can be transferred via Bluetooth √ SAFE 2.0+ - Allow Bluetooth Tethering Bluetooth tethering is available on the device √ SAFE 2.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Windows Phone Policies Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description - Domain Name Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Mac Policies Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description - Gatekeeper - Do not allow user to override Gatekeeper setting Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description - Configure POP Accounts Lotus Notes BlackBerry Enterprise iOS Cloud Extender Android Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Requires Native App on Device Settings for POP accounts √ Exchange ActiveSync - Prevent Moving Mail to other Accounts √ - Use only in Mail √ - Configure Internal and External Exchange Hosts √ - Enforce SSL √ - Configure no.
MaaS360.com Secure Browser Policies Exchange ActiveSync Description URL Filtering Settings Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Requires Native App on Device - Enable HTML Notification Provide custom HTML content that will appear when a user tries to access a blocked site. You can upload HTML files by clicking the Policy Files button on the Policies screen.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Description Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Compliance/Rules Engine Exchange ActiveSync Lotus Notes Cloud Extender BlackBerry Enterprise iOS Android Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise Cloud Extender iOS Android Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.5 Win Phone 8 Windows Laptops Mac Comments Requires Native App on Device Restrict Delete after Download √ Allow Whitelisted Apps √ Restrict Secure Mail √ Override Persona Policies √ Mobile Expense Management Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Kindle Fire Cloud Extender Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Device Visibility √ √ Kindle Fire √ √ √ √ √ Locate Device √ Lock Device √ √ √ Refresh Device Information √ √ √ √ √ √ √ √ √ √ √ Reset Device Passcode √ √ √ √ Win Phone 8 Windows Laptops Mac Requires Native App on Device Last Known Location Remote Device Wipe (Full) Win Phone 7.
MaaS360.com Mobility Intelligence Reports Mobile Devices Exchange ActiveSync Lotus Notes BlackBerry Enterprise iOS Android Cloud Extender Kindle Fire Win Phone 7.
MaaS360.com Cloud Extender Requires Native App on Device PC Overview √ Hardware Inventory √ Network √ Operating System √ Software √ Windows 7 & 8 Readiness √ PC Security √ Anti-Virus √ Personal Firewall √ Encryption √ Backup & Recovery √ Patches √ Cloud Extender Exchange ActiveSync Lotus Notes BlackBerry Enterprise Cloud Extender Android √ Cloud Extender for BES Kindle Fire Win Phone 7.
MaaS360.com Exchange ActiveSync Lotus Notes Cloud Extender Cloud Extender for Lotus Traveler Cloud Extender for Certificate Authority integration BlackBerry Enterprise iOS Android Kindle Fire Requires Native App on Device √ √ √ 193 Win Phone 7.
