AirWatch Account Permission Requirements for Integration

Views:

Mobile Security supports the integration with AirWatch. To integrate Mobile Security with AirWatch, you need to have an AirWatch account with required permissions for the communication between the Mobile Security server and AirWatch.

You can create account on AirWatch with three different permission options:

Option 1: Create an AirWatch Administrator account for the communication with all permissions

On the AirWatch administration console, navigate to Accounts → Administrators → List View → Add → Add Admin, and create account with the following role and permissions:
```
AirWatch Administrator
AirWatch Admins (Internal or External) Access to all except 
"dangerous" console features.
```
Option 2: Create a user with API ONLY with all REST API permissions

On the AirWatch administration console, navigate to Accounts → Administrators → List View → Add → Add Admin, and create account with the following role and permissions:
```
API Only
Only provides access to REST APIs
```

Option 3: Create a user with API ONLY with customized REST API permissions

This option allows you to select the specific REST APIs that Mobile Security uses.

Do the following:

On the AirWatch administration console, navigate to Accounts → Administrators → Roles, and create a role with the specific REST APIs permissions that Mobile Security uses, as shown in the following table:

Category	Name
Admin User Management	Search Admin User
WTag Management	Create Tag
	Search Tag
	Add Devices to the Tag
	Remove Devices from Tag
	Retrieve Devices with Specific Tag
Smart Group Management	Create Smart Group
	Search Smart Groups
	Delete Smart Groups
Application Group Management	Create Application Group
	Search Application Group
	Retrieve Application Group Details
	Add Application to an Application Group
	Delete Application from the Application Group
Application Management	Internal Application Install : Upload Application Chunks (iOS and Android)
Application Management	Internal Application Install : Begin Internal Application Install
Device Management	Retrieve Device Information
	Device Extensive Search
	Device Count Info

Navigate to Accounts → Administrators → List View → Add → Add Admin, and add an account with the newly created role.

Note

The AirWatch REST permission settings page does not have permission for each API, but provides a lot of API series (such as, Admin API, APPs API, etc.). Contact AirWatch technical support to know which REST API permissions need to be enabled on the settings page.