Apple Device Management
Endpoint Detection & Response
Mac Device Management
iOS Device Management
Assignment Maps
Resources Hub
Kandji Blog
Customer Stories
Mac Admins Community
Security Details
MDM Comparison Guide
Customer Support
Product Updates
Customer Login
Kandji Status
Register a Deal
Become a Partner
Technology Partners
Partner Portal
About Kandji
News & Press
Why Kandji?
Introducing Assignment Rules
Blueprints are the cornerstone of Kandji’s device management platform. They streamline how you organize configurations and software and continually enforce parameters for managed devices. And now, we’ve made Blueprints smarter with assignment rules. These rules determine whether or not a custom app or script library item runs on the devices assigned to a given Blueprint.
For example, you might have a Blueprint called Staff that contains all of your company’s Mac computers . You want to install one custom app on all Mac computers with Intel processors and another on all your Mac computers with Apple silicon.
With assignment rules, instead of creating two separate Blueprints based on processor architecture, you add both custom apps to your Staff Blueprint. Then add assignment rules for each of the two custom apps that assess whether the computers in the Blueprint have Intel or Apple silicon processors. When the Mac computers check in with Kandji, they are evaluated against the assignment rules, and Kandji installs the appropriate custom app.
Assignment rules use device attributes, including:
- Supervision status
- Enrollment type
- FileVault status
To implement assignment rules, edit a custom app or script library item. The library item has a new Rules section, where you can construct rules using inputs, operators, and values. Inputs are the device attributes listed above. Depending on the input, operators can include standard values such as Is , Is Not , Is One Of , Contains , and so on. You can build complex rulesets by combining multiple rules. When you assign the custom app or script to a Blueprint, the subset of devices in that Blueprint where the rules evaluate to true will receive the library item.
.png?width=2492&name=Rules-2@2x+shadow%20(1).png "assignment rules kandji")
Assignment rules give admins more flexibility and, in turn, reduce the number of Blueprints that exist only to cover edge cases. It adds another layer of configurability to Blueprints, on top of our recent release allowing multiple instances of Auto Apps and Managed OSes. This added configurability makes Blueprints more powerful than ever before—and this is just the start.
For more on how assignment rules work and how to implement them, check out our What’s New in Kandji? video and the Using Assignment Rules support article.
See Kandji in Action
Experience Apple device management and security that actually gives you back your time.
Get Started Contact Us
Start Free Trial Contact Us
Kandji adds new device management capabilities including Declarative Device Management for passcode policies
Kandji has announced several new innovations to its Device Harmony platform. These new features aim to help businesses keep their Apple devices secure and productive, making it easier for them to manage and protect their devices.
Declarative Device Management
Kandji’s Device Harmony platform now includes Declarative Device Management, an industry-first for active management on supervised devices. Declarative Device Management allows businesses to apply configurations faster and receive real-time data from their devices. This update shifts the passcode policies for iOS and iPadOS so that they are applied using configuration declarations instead of legacy configuration profiles.
Track lost iOS devices
Kandji’s platform now also includes Lost Mode, which allows businesses to track lost iPhone and iPad devices. This feature does not require iCloud, Location Services, or any action from the device user, making it easy for businesses to locate lost devices and protect their data. Lost Mode builds on the capabilities provided by the Apple MDM framework by adding additional automations. For example, it will alert the administrator if the lost device moves more than 50 meters, and it will automatically enable Lost Mode in case of a reset.These and other features make Lost Mode a valuable addition for businesses that rely on iPhone and iPad devices.
User Attributes in Assignment Rules
Kandji also now offers advanced flexibility for administrators with User Attributes in Assignment Rules. This feature allows administrators to use attributes such as departments, user groups, or job titles, as defined by their IdP, to determine whether a Blueprint should be applied to a specific device. This added level of customization allows a single Blueprint to adapt to the needs of different users across an organization, reducing the number of Blueprints that need to be maintained. This can save time and effort for administrators, allowing them to focus on other tasks.
New security enhancements
Kandji also announced several new integrations with third-party services to enhance the security and productivity of its Device Harmony platform. The first of these is Okta Device Trust integration, which is built on the Okta Identity Engine. This integration ensures that only managed devices can access Okta-secured apps, helping businesses to implement a zero-trust security model. Kandji’s integration will also feed into other Okta products, such as its passwordless authentication via FastPass.
Another new integration is Kandji Passport’s support for Google Workspace. This allows users to log in to their Mac computers using their Google Workspace credentials, streamlining the login process and providing an additional layer of security. These new integrations provide valuable new capabilities for businesses using Kandji’s Device Harmony platform.
Learn more about what’s new with Kandji in its December webinar .
FTC: We use income earning auto affiliate links. More.
Check out 9to5Mac on YouTube for more Apple news:
Tips, feedback, corrections and questions can be sent to [email protected].
Bradley Chambers's favorite gear
MacBook Air
The MacBook Air is the best value on the market for laptops.
AirPods Pro 2
The best day to day headphones for iOS and macOS.
Manage push notifications
No recent searches
Popular Articles
Sorry! nothing found for
Getting Started with Assignment Maps
By Emalee Firestein
Learn how to create an Assignment Map and apply Library Items and Parameters
Assignment Maps can be created from scratch or by using one of Kandji's built-in templates to align with device security best practices.
Creating an Assignment Map
Adding library items, adding parameters, deleting items from an assignment map.
- Navigate to the Blueprints page in the Kandji web app.
- Click the New Blueprint button.
- Choose to start from scratch or use one of Kandji’s pre-built templates.
- Name your Assignment Map, and give it an optional description.
- Click Create Blueprint .
Editing an Assignment Map
Once your Assignment Map has been created, you can add Library Items and Parameters to build out your configuration.
- Once your Assignment Map is open, select Edit Assignments .
- Use the Search bar to locate Library Items.
- Shift+click to select multiple Library Items in a row.
- Command+click to select multiple Library items not in a row.
- Filter Library Items by the currently assigned blueprint, making it easy to select all and drop them into your preferred Assignment Node.
- Use a second browser tab to switch between a live editing session in your Assignment Map and your Library view. The Library Item Bank will automatically refresh as you create new Library Items.
- Once you've added your desired Library Items, you can begin configuring conditional blocks and assignment nodes. See our Advanced Assignment Maps Configuration support article for more info.
- Once your Assignment Map is open, click Parameters at the top of the Assignment Map.
- If you choose to add Parameters individually, you can toggle them as described in our Modifying a Classic Blueprint support article.
- Deleting an Assignment Node will delete all its rules and Library Item assignments. You will be asked to confirm deletion.
- Deleting a Library Item will remove it from the Assignment Map, but will not delete the Library Item. You will not be asked to confirm removal.
- Deleting a Conditional Block will delete its children, including all Library Item assignments contained within it. You will be asked to confirm deletion.
Assignment Maps
We have Introduced Assignment Maps, a new type of Blueprint for deploying configurations to devices.
Like Classic Blueprints, Assignment Maps are collections of Library Items that are deployed to specified groups of devices. Unlike Classic Blueprints, Assignment Maps consist of conditional blocks—groups of if/else conditions that can evaluate user and device-specific data. Within those blocks, assignment nodes determine which apps, settings, and other configurations will be deployed to the devices and users that meet the chosen criteria. Assignment Maps can accommodate common deployment scenarios, including scoping by user location, department, or even device-specific identifiers such as asset tags.
The same Library Item can be used multiple times in the same map, with different rules applied. For example, if an app is needed in North America for Sales and also in APAC but only for Marketing, the map could be nested by both location and department and the same Library Item could be referenced, with the appropriate logic, in two different places.
Assignment Maps also include a device lookup feature to facilitate investigations into why a given configuration was delivered to a given device. This allows the admin to search by device or user, select a device, and examine the path it took through the Assignment Map to see how Library Items were assigned.
Assignment Maps intentionally allow for Library Items that might conflict with one another. In such cases, Library Items that are placed farthest right on a map—which should mean they are scoped more specifically—take priority over items placed to the left. Such conflicts are resolved automatically and called out on the map for admins.
To build a new Assignment Map, admins can click the New Blueprint button and choose Assignment Map. They can build a map from scratch or start with one of Kandji’s pre-built templates.
To make migrating to Assignment Maps easier for existing customers, all existing Library Items can be used with or without rules defined on Assignment Maps, without affecting or referencing existing Blueprint assignments or Assignment Rules applied at the Library Item level. Admins can filter the list of Library Items by Blueprint, in order to easily select and add Library Items from existing Blueprints to new maps. Parameters configured on an existing Classic Blueprint can be imported into Assignment Maps, as well.
For more details, see our support article .
- Privacy Policy
- Your Privacy Choices
- Accessibility
Subscribe to updates
IMAGES
VIDEO
COMMENTS
Assignment rules enable the application of Library Items to devices based on specific conditions defined by a Kandji administrator. These conditions can be derived from device attributes, user attributes, or other criteria stored in integrated identity providers (IdPs) like Okta, Google Workspace, OneLogin, or Microsoft Entra ID.
Back in September, Kandji introduced assignment rules. These rules took a core component of Kandji device management—Blueprints—and made them even smarter. We've now dramatically expanded the scope of what assignment rules can do and how they're defined. First, some context: Blueprints allow you to define sets of configurations and ...
Then add assignment rules for each of the two custom apps that assess whether the computers in the Blueprint have Intel or Apple silicon processors. When the Mac computers check in with Kandji, they are evaluated against the assignment rules, and Kandji installs the appropriate custom app. Assignment rules use device attributes, including: OS ...
Then add assignment rules for each of the two custom apps that assess whether the computers in the Blueprint have Intel or Apple silicon processors. When the Mac computers check in with Kandji, they are evaluated against the assignment rules, and then Kandji installs the appropriate custom app. Assignment rules use device attributes, including:
Master Kandji Library Item settings: assign to Blueprints, select device families, & set specific rules for seamless Apple device management. Learn about options available in Library Item Assignment settings At the top of each Library Item, there is a settings box for Assignment. ... Assignment Rules are configurable rules that determine more ...
Capabilities of Assignment Maps. Define rules once and apply them to multiple Library Items. Create complex conditions like "full-time employees" AND in North America AND in the Pacific time zone. Assign the same Library Item in different ways without needing multiple Blueprints. Automatically prioritize items based on their position on the ...
Kandji's Assignment Maps directly addresses this need by automating the assignment of settings and applications, ensuring that the desired configurations are deployed efficiently and accurately.
Group Product Manager Kim Connelly tells you about some exciting new updates to assignment rules.
SAN FRANCISCO, June 05, 2024 (GLOBE NEWSWIRE) -- Kandji, the Apple device management and security platform, today announced Assignment Maps, a new feature that streamlines the configuration of ...
When editing your Assignment Maps, click the + to add a Conditional Block. In the conditional block, click the pencil icon to configure the Assignment Rules that should apply to the If condition. Optionally, click the + to add an else if condition and configure Assignment rules there, as well. Continue adding Library Items that you want to ...
ㅤ We've updated assignment rules so you can attach them to a much longer list of library items. ... Move users onto Kandji via an existing MDM platform. Compliance. Map settings to compliance benchmarks in minutes. Integrations. Combine Kandji with the rest of your software stack to save even more time and effort.
14 min read. Today, Kandji is excited to introduce Assignment Maps—an entirely new way to manage and secure fleets of Apple devices. They're highly visual, highly flexible, and will give admins incredible control over how the Apple devices they manage are configured, without clutter or confusion. In the words of one early tester, "Wow!
Kandji's Assignment Maps expounds on the intuitiveness and clarity of Kandji Blueprints, adding greater automation, flexibility, and granularity.
User Attributes in Assignment Rules. Kandji also now offers advanced flexibility for administrators with User Attributes in Assignment Rules. This feature allows administrators to use attributes ...
Assignment Maps can be created from scratch or by using one of Kandji's built-in templates to align with device security best practices. Creating an Assignment Map; Editing an Assignment Map. ... Deleting an Assignment Node will delete all its rules and Library Item assignments. You will be asked to confirm deletion.
Kandji Assignment Maps are a powerful way to visually define a grouping of apps & configurations to be assigned to Apple devices, providing maximum flexibility. ... Instead of groups of rules and payloads, work within an infinite canvas that can hold all your creativity and logic. Designed to help your team do more.
Switching blueprints does not remove applications that were previously installed. I've seen sudo rm -rf "filepath.app" and tested it out on an unassigned device, but that looks like it leaves a lot of .plist and other files behind. Their support mentioned getting the uninstaller scripts from the app provider, but that doesn't seem ...
Tags are a new way to group devices locally in Kandji and can be used with Assignment Rules on both Classic Blueprints and Assignment Maps. Tags differ from an Asset Tag, which can also be set for a device but only supports one value and is usually used specifically for inventory purposes. Tagging a Device; Managing Tags; Adding or Removing ...
(a) Assignment by the Chair of the Judicial Council . When a petition for coordination is granted, the Chair of the Judicial Council must either assign a coordination trial judge to hear and determine the coordinated actions or authorize the presiding judge of a court to assign the matter to judicial officers of the court in the same manner as assignments are made in other civil cases, under ...
Assignment Maps are a new type of Blueprint offering additional scoping flexibility over Classic Blueprints on a highly visual interactive map. Kandji recommends Assignment Maps for any size deployment as they provide the flexibility needed to grow, and most importantly, adapt, over time as things change without the need to create many like ...
Assignment rules now support assignments based on one or more serial numbers. Learn more in our support article . ... Move users onto Kandji via an existing MDM platform. Compliance. Map settings to compliance benchmarks in minutes. Integrations. Combine Kandji with the rest of your software stack to save even more time and effort.
They can build a map from scratch or start with one of Kandji's pre-built templates. To make migrating to Assignment Maps easier for existing customers, all existing Library Items can be used with or without rules defined on Assignment Maps, without affecting or referencing existing Blueprint assignments or Assignment Rules applied at the ...