Using the example of the Organization Group drop-down list to the left,
any profiles, features, applications and other MDM settings can be set at
the top World-Wide Enterprises level.
Then, settings can be inherited down to child Organization Groups, such
as Asia/Pacific and EMEA or even further down to Australia ►
Manufacturing Division or Australia ► Operations Division ► Corporate.
Alternatively, you may choose to override settings at a lower level and
alter only setting you want to change or keep. These settings can be
altered and/or carried down at any level.
Before setting up your Organization Group hierarchy in the AirWatch Admin Console, decide the layout of the groupings
first to best make use of settings, applications and resources. For example, review the following configuration options:
Delegated Administration – Do you want a subgroup to be maintained by a sub-administrator? You can delegate
administration of sub-groups to lower level administrators by restricting their visibility to a lower Organization
– Corporate administrators have access here, and can view everything in the environment.
– LA manager has access here and can manage only those devices.
– NY manager has access here and can manage only those devices.
System Settings – Settings can be applied at different levels in the Organization Group tree and inherited down.
They can also be over-ridden at any level. Settings include device enrollment options, authentication methods,
privacy settings and branding.
– Overall company establishes enrollment against the company AD server.
– Driver devices override the parent’s authentication and allows token enrollment.
– Warehouse devices Inherit the AD settings from the parent group.
Device Use Case – Are there different device configurations to consider? Is there a particular group of devices that
will receive access to certain configurations/applications/resources? A profile can be assigned to one or several
Organization Groups. Devices in those groups can then receive that profile. Refer to the Profiles section for more
Additionally, AirWatch recommends configuring devices using profile, application and content settings according to
attributes such as device make and model, ownership type or user groups before creating organization groups.
– Executive devices cannot install applications and have access to the Wi-Fi sales network.
– Sales devices are allowed to install applications and have VPN access.
Once you've decided and established the Organization Group hierarchy, you may choose to inherit parent group settings
down through all child groups below. Alternatively, you may choose to override various settings at each group level.