User configuration

Creating and managing users in the Mobile Security Portal

Last adaptation to the version: 2.7

New:

Note regarding certificates for CSV user import
New parameter: User certificate

New section: Create user with managed Apple ID

Last updated:

Update Connect RSP users

notempty

This article refers to a Beta version

General Benutzer

Introduction

Users can be connected directly to a device or role.
Users can also be assigned to a profile or an app.

notempty

If you have a large number of devices and users, it is recommended that you map the assignment using roles.

notempty

When using BYOD, a user must be assigned to a device.

Overview of the user administration

In the user overview, new users can be created, existing ones edited and deleted. The view of the users can be displayed in the list or tile view. In addition, details on existing users can be displayed and the list of users can be updated.

General options

Field / Button	Description	Overview of the user administration
Search	Search for specific character strings in user names
Add user	The following information can be entered:
Sync DEP Users	Synchronizes the Apple DEP users with the Securepoint Mobile Security
Connect RSP user	Only displayed for logged-in RSP Securepoint Reseller Portal users This button links this RSP user account to the Securepoint Unified Security Portal The user's settings are adopted and they receive the role USC-Administrator More about the role in the wiki article
Download CSV	Exports the user data to a file: users.csv The file contains the fields (comma separated): "username","firstname","lastname","email","comment","roles"
Import users	Select the import format: CSV: Imports user data in .csv format. The required header schema with the field names is displayed. The order of the fields is irrelevant. This schema can be copied using the Copy schema button. notempty Certificates are not imported via .csv! Entra ID: Imports user data from an Entra ID. Further information on this can be found in the wiki article Integrate users from an Entra ID. Duplicates will be ignored
	Show / hide details: If you have a large number of users, it can be useful for clarity to hide the display of the linked roles and devices.
/	Switch between lists and grid view.
	Refreshing the display

User options

The button in the upper right corner of each user tile provides the following options: Edit User
Edit	View and change user settings. For details, see Add User.
Delete	Deletes the user from the portal. The deletion must be confirmed with OK.
Reset password	Sends an email to the specified email address and prompts the user to set a new password and configure two-factor authentication with a time-based one-time password (TOTP). notempty New as of:1.25 Changing the two-factor authentication after the password reset is optional.

Add user

Add user The following information can be entered:
Caption	Value	Description	Datei:MS 2.5 Allgemein Benutzer hinzufügen-en.png Add user
Username	Username	Unique user name
First name	First name	At least 2 characters
Last name	Last name	At least 2 characters
Email	Email	A valid email address to which an invitation to the portal can be sent.
Link with managed Apple ID		When activated , the managed Apple ID from Apple Business Manager or Apple School Manager can be entered in order to be able to manage an organization's apps on private devices
Managed Apple ID	john.appleseed@apple.com	Enter the managed Apple ID from Apple Business Manager or Apple School Manager
Variable 1, 2, 3		This value can be used with $variable1$ / $variable2$ / $variable3$ in profiles
User Certificate notempty New as of: 2.7	None	Under Mobile Security Certificate existing certificates can be selected. This value can be used with $user_cert$in iOS profiles in the tabs Networks, Email & Exchange ActiveSync, and Certificates.
Comment	Comment	Optional
Roles	Roles	Optional

Password
The Save button opens a dialog in which the user's password is configured. A password reset email is generated and sent to the displayed email address. It is the previously entered email address
Abort	Closes the dialog		Password dialog window
Add User only	The new user is created without a password notempty It is not possible to log in to the portal without a password.
Send email to set password	Sends a password reset email to create a new or, in this case, initial password. It also activates two-factor authentication for this user.

Create user with Managed Apple ID

Create a Managed Apple ID in ABM/ASM
- Open the Apple Portal at https://business.apple.com respectively https://school.apple.com
- Log in to Apple Business Manager ABM:
  The user account for the setup must have the permission Administrator or Personmanager
- Click on your own name at the bottom of the sidebar: Menu Settings and / Accounts
- Select button Add and fill in all mandatory fields

or

Connecting Apple Portal to an Entra AD
Users in the Apple portal automatically have a managed Apple ID
- Select Save button
- Further instructions in the Apple document for creating managed Apple IDs
Create local user
1. Create Add user or edit / Edit a new user in the Securepoint Unified Security Portal General Users ( see above )
2. Link local user to Managed Apple ID
  - Activate Link to managed Apple ID
  - Managed Apple-ID alice@tttpoint.de
    Enter the Apple ID you created earlier
  - Save

Introduction

Overview of the user administration

General options

User options

Edit User

Add user

Password

Create user with Managed Apple ID