A device is automatically registered in Mobile Administrator when your app store client is installed on that device and the device owner has logged in with the correct credentials. You can organize the registered devices in groups, and you can assign existing device policies to these groups. See Policy Types for an overview of the policies that can be defined. You can manage a registered device remotely when the mobile device management has been allowed on this device. It is then possible, for example, to remotely lock or wipe a device, which is very helpful when a device was lost or stolen.

To organize and manage the devices of other users, you need the site-level permissions Manage Devices and Wipe Devices. To assign device policies to devices, you need the site-level permission Assign Policies. See also Overview of Site-Level Permissions. These site-level permissions are not required if users want to remotely manage their own devices. When the mobile device management has been allowed on the device, each user can, for example, remotely lock or wipe the own device.