home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Modifying a Non-Default Group on Multiple Tenants

Pushing a non-default Device Policy Group to a tenant creates a copy of that group that is no longer linked to the settings in the Multi-Tenancy Admin Console. To update these policies across multiple tenants, you must push a new group and move devices on each tenant into that group, then remove the old group from each tenant.

Do not remove the old Device Group from a tenant until you have moved all devices over, otherwise the devices are moved into the tenant's default group.

To modify a custom group from the MT Admin Console and push changes to one or more tenants:

  1. Create a new Policy Group in the MT Admin Console:
    1. Click Tenants in the left navigation bar.
    2. Click the Device Policy Groups tab.
    3. Click Create Group in the upper-right:


    4. Enter a name and description and click Create Group.
  2. Assign the new group to the tenant(s) you wish to update:
    1. Click the Tenants tab and click the row for the tenant you wish to view.
    2. Click the Device Policy Groups tab and scroll down to click Add device policy groups:


    3. Select the new policy group and click Add.
    4. Repeat these steps for each tenant that needs an updated version of the policy group.
  3. Move all devices from the old custom group to the updated version:
    1. From the Tenants tab, open the tenant to update and click Manage Tenant in the upper-right.
    2. Click Devices in the left navigation bar.
    3. In the search field, filter to show devices in the old device group you are updating:


    4. Click the checkbox in the header row to select all devices.
    5. In the Transfer To: dropdown, select the updated device group, then in the confirmation dialog, click Transfer.
  4. Delete the old custom group from the tenant:
    1. Return to the MT Admin Console.
    2. Click the Tenants tab and click the row for the tenant you just updated.
    3. Click the Device Policy Groups tab and scroll down to the list of device groups
    4. Click the trashcan icon to remove the old, empty device group.
  5. Repeat Steps 3 and 4 for each tenant you are updating.