Sophos Mobile
3 About Sophos Mobile Admin
Sophos Mobile Admin is the central instrument for managing devices with Sophos Mobile. It is the web interface of the server used for device management. With the web portal you can implement a corporate policy for the use of devices and apply it to the devices that are enrolled with Sophos
Mobile.
In Sophos Mobile Admin you can:
• Configure the system, for example personal settings or platform-specific settings.
• Configure compliance policies and define actions to be taken if devices no longer comply with the
rules specified. See Compliance policies
(page 33).
• Enroll devices with Sophos Mobile. See
Add devices (page 41).
• Provision new devices. See
Enroll devices (page 42).
• Install apps on enrolled devices. See
Apps (page 292).
•
Define security policies for devices. See Policies (page 99).
• Create task bundles to bundle several tasks and transfer them to the devices in one transaction.
See
Task bundles
(page 281).
•
Configure settings for the Self Service Portal. See Configure Self Service Portal (page 27).
• Carry out administrative tasks on devices, for example reset the password of devices, lock or wipe
devices if they are lost or stolen, unenroll devices. See Manage devices
(page 50).
•
Create and view reports. See Reports (page 8).
3.1 Dashboard
Note
This section applies to the Dashboard page of regular administrators. For the super administrator, the Dashboard page is used to manage customers. See the Sophos Mobile super administrator guide .
The customizable Dashboard is the regular start page of Sophos Mobile and provides access to the most important information at a quick glance. It consists of several widgets providing information about:
• Devices, all or per group
• Compliance status by platform or for all devices
• Managed status by platform or for all devices
• The SSP registration status
• The managed platform versions
You can also add devices from the Dashboard. See
Use the Add device wizard
(page 44).
The following options are available to customize the Dashboard:
• To add a widget to the page, click Add widget.
• To remove a widget from the page, click the Close button in its header.
Copyright © Sophos Limited 3
4
Sophos Mobile
• To reset the page to its default layout, click Restore default layout.
• To rearrange the widgets on the page, drag a widget header.
3.2 Table views
In Sophos Mobile Admin, many pages display information in a tabular form.
These tables have common controls that you can interact with.
Above the table:
• Use the Show or hide columns icon to configure which table columns are visible.
• Enter text in the Search all fields field to only display data rows that contain that text in any column.
In the table:
• Click a column header to sort the table rows by that property. Click again to revert the sort order.
• Click an entry name to perform the default action on that entry (usually Edit).
• Click the blue triangle next to an entry name to perform more actions on that entry.
Below the table:
• Use the navigation buttons to display a specific table page.
• Use the Export icon to export either the whole table or the current page to a Microsoft Excel file or a CSV file. If you have configured a row filter, only the currently visible rows are exported.
3.3 Prerequisites
Before using Sophos Mobile Admin:
• You need a computer connected to the internet and equipped with a web browser. For information on supported browsers and the relevant versions, see the Sophos Mobile release notes.
• The super administrator must have created a customer (a tenant whose devices are managed in
Sophos Mobile). For further information, see the Sophos Mobile super administrator guide .
Note
For Sophos Mobile as a Service, a customer is predefined. Super administrators are not supported for Sophos Mobile as a Service.
• You need a Sophos Mobile user account and the relevant credentials for logging in to Sophos
Mobile Admin. The credentials consist of customer, user and password.
3.4 User roles
Sophos Mobile administrators have different roles. The role affects what an administrator can do.
The available roles are:
Copyright © Sophos Limited
Role
Administrator
Limited Administrator
Reporting
Content admin
Helpdesk
Read-only
App Group Administrator
Duo API
Sophos Mobile
Description
This role can perform all available actions.
This role can enroll and manage devices, but cannot specify essential settings and cannot manage other administrators.
This role can view the list of devices and is able to create reports. For example, an auditor or an employee who needs to document the settings in Sophos Mobile.
This role is intended for employees responsible for uploading, updating or removing documents. Usually this role is assigned to a person outside the IT department. The permissions are set to limit visibility and access only the content in the
Documents menu.
This role can perform actions for support purposes, including enrolling devices and installing apps. This role does not have access to critical functions, such as defining settings and creating, deleting or editing devices/device groups, packages and policies.
This role has read-only access to all settings that are available to the Administrator role.
This role can manage app groups. A typical user is an administrator that accesses the Sophos Mobile web service interface to create, update or read app groups.
This role is required for integration with the Duo Security authentication software. Administrators with the Duo API role can access the Sophos Mobile web service interface for requesting the management status of devices.
See Duo Security integration
(page 85).
Tip
Your Sophos Mobile product delivery includes the Role Editor. Role Editor lets you easily modify existing user roles or create your own custom roles. You can find it in the %MDM_HOME%\tools
\Wizard folder, where %MDM_HOME% is the Sophos Mobile installation folder.
Related tasks
Create administrators (page 352)
3.5 Change your password
You can change your password any time after you have logged in to Sophos Mobile Admin:
1. On the menu sidebar, under SETTINGS, click Setup > General, and then click the Change
password tab.
2. Enter your old password, a new one and confirm it.
Copyright © Sophos Limited 5
Sophos Mobile
3. Select Save.
3.6 Password recovery
If you have forgotten your password for Sophos Mobile Admin, you can reset it.
1. In the Login dialog box of Sophos Mobile Admin, click Forgot password?
The Reset password dialog box is displayed.
2. Enter your account information and click Reset password.
You receive an email with a link for resetting your password.
3. Click the link.
The Change password dialog box is displayed.
4. Enter a new password, confirm it and click Change password.
Your password has been changed and you are logged in to Sophos Mobile Admin.
6 Copyright © Sophos Limited
