Sophos Mobile
2
2 Super administrator
In Sophos Mobile, a customer is a tenant whose devices are managed. For every customer, one or more administrator accounts exist.
Besides these regular customers and administrators, there is a super administrator customer and a related super administrator. The role of this super administrator is to set up Sophos Mobile after installation and to create and manage customers. The first super administrator account and the super administrator customer are created during Sophos Mobile installation. A super administrator can create additional super administrators later on.
For information on the initial creation of the super administrator and the super administrator customer during installation, see the Sophos Mobile installation guide .
2.1 Super administrator tasks
The following list provides an overview of the tasks that the super administrator can perform. For detailed information see the respective sections of this guide.
The super administrator can:
• Create other super administrator accounts.
• Manage Sophos Mobile licenses.
• Start the First steps wizard to perform initial configuration of the Sophos Mobile server.
• Configure technical contact information. Customer administrators can use this as a template for providing contact information for users of the Sophos Mobile Control app and the Self Service
Portal.
• Create and manage customers.
• Create reports for all customers.
• Define configuration items like policies, task bundles, apps or settings and then transfer them to customers.
• Renew APNs certificates for all customers in one step.
• Define a default customer for the Self Service Portal login.
• Configure connections to EAS proxy servers.
• Configure connections to third-party Network Access Control systems, to enable network access management for the managed devices.
• Configure access to Sophos Mobile Admin and the Self Service Portal.
• Add a custom logo to the login pages of Sophos Mobile Admin and the Self Service Portal.
• Configure file size limits for uploaded apps and documents.
• Configure the title that is shown in the Sophos Mobile Control app.
• Configure logging of actions by administrators when they are logged in to the web portal.
• Configure system messages that are displayed on the login pages of Sophos Mobile Admin and the
Self Service Portal.
• Download server log files.
Copyright © Sophos Limited
Sophos Mobile
2.2 Super administrator customer
The super administrator customer offers a specific view of the Sophos Mobile web portal that is adapted to super administrator tasks. The differences are based on these two facts:
• The super administrator does not manage devices or users.
• The super administrator is allowed to configure Sophos Mobile system settings.
2.3 Log in as super administrator
1. Open the Sophos Mobile Admin web address that you configured during installation of Sophos
Mobile.
2. In the login dialog, enter the super administrator customer name and the credentials of the super administrator, then click Login.
2.4 Switch to a different customer
As super administrator, you can switch from the super administrator customer to a regular customer.
The administrator currently logged in and the current customer are displayed in the page header.
To switch to a different customer:
1. In the page header, click the current customer name to open the list of available customers.
The super administrator customer is the first item in the list and is marked by an asterisk.
2. Select the customer to whom you want to switch.
The Dashboard page for the selected customer is displayed.
Tip
As super administrator, you can switch to a different customer: On the Customers page, click the blue triangle next to the customer to whom you want to switch and then click Choose.
For a description of Sophos Mobile Admin for regular customers, see the Sophos Mobile administrator help .
2.5 Create additional super administrators
To create additional super administrators for the super administrator customer:
1. On the menu sidebar, under SETTINGS, click Setup > Administrators.
2. On the Show administrators page, click Create administrator.
3. Enter the account details for the new super administrator.
• When External LDAP directory is selected as user directory for the super administrator, you can click Lookup user via LDAP to select an existing LDAP account.
• When Internal directory or None is selected as user directory, enter the relevant data in the
Login name, First name, Last name, and Email address fields.
Copyright © Sophos Limited 3
Sophos Mobile
4. In the Role list, select the Administrator user role.
5. Under Authentication, set the password for the new super administrator.
For a local account, enter a one-time password that the super administrator must change at first login.
For an LDAP account, you can either use the LDAP password for authentication, or enter a onetime password.
6. Click Save to create the super administrator account.
The new super administrator is created and displayed on the Show administrator page.
Forward the credentials (login name, super administrator customer name and one-time password) to the relevant person.
4 Copyright © Sophos Limited
