AirWatch Account Permission Requirements for Integration Parent topic

Mobile Security supports the integration with AirWatch. To integrate Mobile Security with AirWatch, you need to have an AirWatch account with required permissions for the communication between the Mobile Security server and AirWatch.
You can create account on AirWatch with three different permission options:
  • Option 1: Create an AirWatch Administrator account for the communication with all permissions
    On the AirWatch administration console, navigate to AccountsAdministratorsList ViewAddAdd Admin, and create account with the following role and permissions:
    AirWatch Administrator
    AirWatch Admins (Internal or External) Access to all except 
    "dangerous" console features.
  • Option 2: Create a user with API ONLY with all REST API permissions
    On the AirWatch administration console, navigate to AccountsAdministratorsList ViewAddAdd Admin, and create account with the following role and permissions:
    API Only
    Only provides access to REST APIs
  • Option 3: Create a user with API ONLY with customized REST API permissions
    This option allows you to select the specific REST APIs that Mobile Security uses.
    Do the following:
    1. On the AirWatch administration console, navigate to AccountsAdministratorsRoles, and create a role with the specific REST APIs permissions that Mobile Security uses, as shown in the following table:
      Category
      Name
      Admin User Management
      Search Admin User
      WTag Management
      Create Tag
      Search Tag
      Add Devices to the Tag
      Remove Devices from Tag
      Retrieve Devices with Specific Tag
      Smart Group Management
      Create Smart Group
      Search Smart Groups
      Delete Smart Groups
      Application Group Management
      Create Application Group
      Search Application Group
      Retrieve Application Group Details
      Add Application to an Application Group
      Delete Application from the Application Group
      Application Management
      Internal Application Install : Upload Application Chunks (iOS and Android)
      Internal Application Install : Begin Internal Application Install
      Device Management
      Retrieve Device Information
      Device Extensive Search
      Device Count Info
    2. Navigate to AccountsAdministratorsList ViewAddAdd Admin, and add an account with the newly created role.
    Note
    Note
    The AirWatch REST permission settings page does not have permission for each API, but provides a lot of API series (such as, Admin API, APPs API, etc.). Contact AirWatch technical support to know which REST API permissions need to be enabled on the settings page.