Rule based mobile device management delegation
Rule-based mobile device management delegation is disclosed. A set of rules are applied to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions. The mobile device is managed according to a policy associated with the assigned management partition.
1. A method, comprising:
applying, by a processor, a set of rules to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions;
managing the mobile device according to a policy associated with the assigned management partition, wherein the policy at least in part describes an access of the mobile device to objects scoped within the assigned management partition, wherein the access of the mobile device to content associated with unassigned partitions is limited;
determining a change to the set of rules;
applying the changed set of rules to the attributes to reassign the mobile device to a second management partition included in the plurality of management partitions;
removing a configuration associated with the assigned management partition from the mobile device; and
applying a configuration associated with the second management partition to the mobile device.
2. The method of claim 1 , further comprising:
applying the configuration associated with the assigned management partition to the mobile device.
3. The method of claim 1 , wherein applying the set of rules further comprises:
determining that the attributes associated with the mobile device satisfy a rule in the set of rules; and
assigning, based at least in part on the determination, the mobile device to a partition associated with the rule.
4. The method of claim 3 , wherein determining that the attributes associated with the mobile device satisfy the rule further comprises:
applying the set of rules to the attributes associated with the mobile device to determine a score associated with each rule in the set of the rules;
determining a rule in the set of rules that is associated with a highest score; and
assigning the mobile device to a partition associated with the rule.
5. The method of claim 1 , further comprising determining that the attributes associated with the mobile device have been updated.
6. The method of claim 1 , wherein applying the set of rules further comprises:
applying a plurality of rules in the set of rules to attributes associated with the mobile device;
determining that the attributes do not satisfy any of the plurality of rules; and
assigning the mobile device to a default management partition based at least in part on the determination.
7. The method of claim 1 , further comprising:
determining a change to the attributes associated with the mobile device; and
applying the set of rules to the changed attributes to reassign the mobile device to another partition included in the plurality of management partitions.
8. The method of claim 1 , further comprising
reassigning the mobile device from the assigned management partition to the second management partition.
9. The method of claim 1 , wherein rules in the set of rules each correspond to one of the plurality of management partitions.
10. The method of claim 1 , wherein the set of rules comprises a plurality of rules arranged in an order.
11. The method of claim 1 , wherein the management partitions include a default partition and a rule-associated partition.
12. The method of claim 1 , wherein the plurality of management partitions are associated with management domains.
13. The method of claim 1 , further comprising:
assigning objects associated with the mobile device to one or more of a device management domain and a content management domain associated with the assigned management partition.
14. The method of claim 1 , further comprising:
providing an administrator associated with the assigned management partition permissions to manage or access the mobile device.
15. The method of claim 1 , further comprising:
providing a support organization associated with the assigned partition helpdesk functionality in relation to the mobile device.
16. The method of claim 1 , further comprising:
providing, to the user of the mobile device, access to content associated with the assigned management partition.
17. The method of claim 1 , further comprising:
restricting access in the context of the mobile device to content not associated with the assigned management partition.
18. A system, comprising:
a processor; and
a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:
apply a set of rules to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions;
manage the mobile device according to a policy associated with the assigned management partition, wherein the policy at least in part describes an access of the mobile device to objects scoped within the assigned management partition, wherein the access of the mobile device to content associated with unassigned partitions is limited;
determine a change to the set of rules;
apply the changed set of rules to the attributes to reassign the mobile device to a second management partition included in the plurality of management partitions;
remove a configuration associated with the assigned management partition from the mobile device; and
apply a configuration associated with the second management partition to the mobile device.
19. The system recited in claim 18 , wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to:
apply the configuration associated with the assigned management partition to the mobile device.
20. A computer program product, the computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:
applying a set of rules to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions;
managing the mobile device according to a policy associated with the assigned management partition, wherein the policy at least in part describes an access of the mobile device to objects scoped within the assigned management partition, wherein the access of the mobile device to content associated with unassigned partitions is limited;
determining a change to the set of rules;
applying the changed set of rules to the attributes to reassign the mobile device to a second management partition included in the plurality of management partitions;
removing a configuration associated with the assigned management partition from the mobile device; and
applying a configuration associated with the second management partition to the mobile device.