I feel like I’m missing something obvious here.
I’m trying to create a custom role for a partner so they can manage only their specific devices. I’m looking under Admin > Roles, but I don’t see any option to select a device group inside the role settings. Do I need Super Admin access to unlock that feature? Or am I just blind?
38 Views
You’re looking at the wrong spot! The Role only defines what they can do (like Wipe, Install Apps, etc.). You define which devices they can touch (the Scope) when you actually create the Technician user.
Go to Admin > Technicians > Add Technician. You’ll see the “Device Group Scope” dropdown right there under the Role selection.
Yeah, it’s designed that way, so you don’t have to create a million duplicate roles.
If the scope was baked into the Role, you’d need a separate “GB Role,” “US Role,” and “France Role.” This way, you just make one “Partner Role” and assign it to different people with different scopes.
Ah, I totally glazed over that field on the invite screen. I was trying to hard-code it into the permission set. That makes way more sense now. Thanks guys!
Don't have an account? Sign up
