Device Groups are used to manage the list of devices a user can access. As the User is bound directly to the Device Group, any changes to the Device Group membership are immediately applied to the user or API token.
From the User's perspective, it's like other devices in the workgroup simply do not exist.
Where and How to Manage
[ADMIN] > [WORKGROUP] > [DEVICE GROUPS]
Create a Device Group
To move a device from the Available list to the Selected list simply click-select that device. Repeat the same action to remove devices from the Selected device list.
Those devices to which you would like to apply the membership conditions
Those devices available for selection, but not selected and the membership conditions will not apply.
Device Groups are created based on one of three membership conditions:
This is a strict list of devices. Membership of this list will not change without deliberately taking action to update the member list.
This membership condition is used to deny access to a strict list of devices. Membership of the list will update automatically and new devices will become members of the group. Action is required to remove devices from the member list.
This is the most flexible membership condition. Using specific metadata keys, membership is governed by the value of those keys. This creates a fluid group membership that can be updated dynamically by changing a Device's metadata.
Like "IN", his is a strict list of devices. Membership of this list will not change without deliberately taking action to update the member list.
For each device in the selected list, optional source restrictions can be applied. By default, all sources are accessible. Simply click the source names to add/remove them to the list of selected sources. Only the selected sources will be visible to any users bound to this device group.