Jump to:navigation, search
Wiki










































Creating and managing users in the Mobile Security Portal

Last adaptation to the version: 2.22

New:
  • Adaptation to the new design of Apple Business
notempty
This article refers to a Beta version
Access: portal.securepoint.cloud General User


Introduction

Users can be connected directly to a device or role.
Users can also be assigned to a profile or an app.

notempty
If you have a large number of devices and users, it is recommended that you map the assignment using roles.

notempty
When using BYOD, a user must be assigned to a device.

Overview of the user administration

In the user overview, new users can be created, existing ones edited and deleted. The view of the users can be displayed in the list or tile view. In addition, details on existing users can be displayed and the list of users can be updated.

General options

Field / Button Description
Overview of the user administration
Search Search for specific character strings in user names
 Sort
Clicking this button opens a menu where the tiles can be sorted according to specific criteria
Name Name
Ascending/Descending Displays the search results alphabetically ascending/descending
  Add user The following information can be entered:
 Sync DEP Users Synchronizes the Apple DEP users with the Securepoint Mobile Security
 Connect RSP user
  • Only displayed for logged-in  RSP
    Securepoint Reseller Portal
    users
  • This button links this  RSP user account to the Securepoint Unified Security Portal
  • The user's settings are adopted and they receive the role USC-Administrator
    More about the role in the wiki article
 Download CSV Exports the user data to a file: users.csv
The file contains the fields (comma separated):
"username","firstname","lastname","email","comment","roles"
 Import users
Select the import format:
  • CSV: Imports user data in .csv format. The required header schema with the field names is displayed. The order of the fields is irrelevant. This schema can be copied using the  Copy schema button.
notempty
Certificates are not imported via .csv!
  • Entra ID: Imports user data from an Entra ID. Further information on this can be found in the wiki article Integrate users from an Entra ID. Duplicates will be ignored

Show / hide details: If you have a large number of users, it can be useful for clarity to hide the display of the linked roles and devices.
/

Switch between lists and grid view.

Refreshing the display


User options

The button in the upper right corner of each user tile provides the following options:

Edit User

 Edit View and change user settings. For details, see Add User.
  Delete Deletes the user from the portal. The deletion must be confirmed with OK.
 Reset password Sends an email to the specified email address and prompts the user to set a new password and configure two-factor authentication with a time-based one-time password (TOTP).
notempty
New as of:1.25
Changing the two-factor authentication after the password reset is optional.

Tile details

Caption Description
 Email: The user’s email address
 Roles: User roles
 Devices: The devices assigned to the user
Clicking on the device label takes you to this device tile
 VPP Apple ID:
  • Displays the user’s linked managed Apple ID, if available
  • notempty
    : 2.22
    An icon indicates the status of the managed Apple ID
    • The Managed Apple ID is linked and ready for assignment
    • The Apple VPP user has been invited, but the invitation has not yet been accepted. The assignment will become available as soon as the user accepts it
    • No matching Apple VPP user could be found for this Managed Apple ID. Please enter a new Managed Apple ID or save the user again to repeat the process.
 Permissions: Displays the permissions for this user



Add user

  Add user The following information can be entered:
Caption Value Description Datei:MS 2.5 Allgemein Benutzer hinzufügen-en.png
Add user
Username Username Unique user name
First name First name At least 2 characters
Last name Last name At least 2 characters
Email Email A valid email address to which an invitation to the portal can be sent.
Link with managed Apple ID    When activated   , the managed Apple ID from Apple Business or Apple School Manager can be entered in order to be able to manage an organization's apps on private devices
Managed Apple ID john.appleseed@apple.com Enter the managed Apple ID from Apple Business or Apple School Manager
Variable 1, 2, 3     This value can be used with $variable1$ / $variable2$ / $variable3$ in profiles
User Certificate
notempty
New as of: 2.7
None Under  Mobile Security  Certificate existing certificates can be selected.
This value can be used with $user_cert$in iOS profiles in the tabs

Networks, Email & Exchange ActiveSync, and Certificates.

Comment Comment Optional
Roles Roles Optional Roles/permissions can be assigned to the user
notempty
Users who are assigned the role admin can log into the portal and make changes!

Password

The   Save button opens a dialog in which the user's password is configured. A password reset email is generated and sent to the displayed email address.
It is the previously entered email address
 Abort Closes the dialog
Password dialog window
 Add User only The new user is created without a password
notempty
It is not possible to log in to the portal without a password.
 Send email to set password Sends a password reset email to create a new or, in this case, initial password.
It also activates two-factor authentication for this user.

Create user with Managed Apple ID

  1. Create a Managed Apple ID in Apple Business/Apple School Manager
    • Open the Apple Portal at https://business.apple.com respectively https://school.apple.com
    • Log in to Apple Business:
      The user account for the setup must have the permission Administrator or Personmanager
    • Click on your own name at the bottom of the sidebar: Menu Settings and / Accounts
    • Select button Add and fill in all mandatory fields
or
  1. Connecting Apple Portal to an Entra AD
    Users in the Apple portal automatically have a managed Apple ID
  2. Create local user
    1. Create  Add user or edit /  Edit a new user in the Securepoint Unified Security Portal  General  Users ( see above )
    2. Link local user to Managed Apple ID
      • Activate Link to managed Apple ID   
      • Managed Apple-ID alice@tttpoint.de
        Enter the Apple ID you created earlier
      •   Save
  3. notempty
    New as of: 2.22
    Once saved, the managed Apple ID is verified
    • If the verification fails, no new user is created
    • If the verification is successful, a new user is created or an existing one is updated
      Missing VPP users are re-registered by Apple
    • An icon in the user tile indicates the status of the verification