User manual
Documentation for Cerberus Enterprise MDM
Introduction
Cerberus Enterprise is a comprehensive EMM solution, designed to help you secure and manage your ...
Setup
Device provisioning overview
Cerberus Enterprise supports device management for both Android and Apple platforms. You can conf...
Device Provisioning - Android
Supported devices
In general, any device running Android 6+ with Google Play Services is compatible with Cerberus E...
Enrollment tokens
Cerberus Enterprise uses enrollment tokens to start the Android device enrollment (provisioning) ...
Personally-owned devices
Devices owned by employees can be set up with a work profile. A work profile provides a self-cont...
Company-owned devices for work and personal use
Setting up a company-owned device with a work profile enables the device for both work and person...
Company-owned devices for work use only
Full device management is suitable for company-owned devices intended exclusively for work purpos...
Zero-touch
IT admins can provision company-owned devices using the zero-touch enrollment method, outlined in...
Authenticate Using Google enrollment
Authenticate Using Google enrollment (also referred to as Google Authentication for Enrollment) l...
Device Provisioning - Apple
Apple provisioning overview
Cerberus Enterprise supports enrolling and managing iPhones, iPads and Macs. Apple provisioning r...
Apple manual enrollment (Enrollment Profile)
Cerberus Enterprise supports manual enrollment for Apple devices using a QR code, an enrollment U...
Apple Automated Device Enrollment (ADE)
Automated Device Enrollment (ADE) integrates with Apple Business (formerly Apple Business Manager...
Apple account-driven enrollment
With account-driven enrollment, users enroll their iPhone, iPad or Mac by signing in with their w...
Policies overview
The Policies section of the dashboard (Dashboard → Policies) lists all policies in your account a...
Policies - Android
Summary
Android policies are the core entities of the system: they define the rules that are applied and ...
App management
In this section, you can set policies related to app availability, installation, updates, and per...
Kiosk mode
With kiosk mode, you can restrict a device's functionality to a single app or multiple apps. Choo...
Security
In this section, you can configure security-related policies. Security risk actions Choose what...
Multimedia
In this section, you can configure camera/microphone behavior, USB data access, printing, and dis...
Cellular
In this section, you can configure cellular-related policies. 1. Airplane mode Controls whether...
Networking
In this section, you can configure networking-related policies. Wi‑Fi configurations can be provi...
System
In this section, you can configure system-related policies. 1. Minimum API level The minimum al...
Location and geofences
This panel groups the Android policy settings that control device location reporting, location en...
User management
Add user disabled Whether adding new users and profiles is disabled. For devices where management...
Personal usage
When provisioning a company-owned device for work and personal use, you can specify some rules to...
Cross-profile policies
Only applies to devices with personal and work profiles. Cross-profile copy/paste Whether text co...
Status reporting
In this section, you can configure which data should be retrieved from the device. The status dat...
Misc
1. Easter egg game disabled Whether the Easter egg game in Settings is disabled. 2. Skip first ...
Compliance rules
If a device or work profile fails to comply with any of the policy settings listed below, Android...
Policies - Apple
Apple policies
Apple policies define management settings that Cerberus Enterprise applies to Apple devices via M...
Apps & profiles
This section documents how to configure managed applications and account payloads for Apple devic...
Kiosk and Home Screen
The Kiosk and Home Screen section of the Apple Policy Editor locks devices into one app, chooses ...
Passcode
The Passcode settings section controls device passcode requirements and related security rules (f...
Restrictions
The Restrictions sections control which OS features are allowed on managed Apple devices. In the ...
Networking
The Networking section of the Apple Policy Editor configures Wi-Fi networks and VPNs on the devic...
Software updates
The Software updates section of the Apple Policy Editor keeps the devices up to date: it can requ...
macOS
The macOS section of the Apple Policy Editor manages the security, privacy and login settings of ...
Location and geofences
The Location and geofences section of the Apple Policy Editor defines areas, for example a site o...
Accounts
The Accounts section of the Apple Policy Editor adds mail, Exchange, Google, calendar, contacts a...
Compliance rules
The Compliance rules section of the Apple Policy Editor sets requirements for the devices of the ...
Device Status
Device overview
Open a device from Dashboard → Devices by clicking the device row. The page title shows the devic...
Location map
This page documents the device-specific location tools available in Device overview. The panel co...
SIMs management
The device page provides a SIMs management panel. On Android devices it manages the SIMs and eSIM...
Commands
The device page provides a Commands panel to send remote commands to a managed device. Available ...
Dashboard location map
The dashboard location map provides a global view of the latest known position of devices that ar...
Private apps
From this section of the dashboard, you can upload your own private Android apps or create web ap...
Certificate management
The dashboard includes a Certificates section to import, view, and delete certificates. Clicking ...
Event rules
Event rules let you automate reactions to supported device events. Open Dashboard → Event rules t...
Devices
Users
Account
Multi-tenancy
Multi-tenancy overview
The Multi-tenancy section is available to MSP and enterprise manager accounts that manage multipl...
Managed enterprises
The Enterprises page (Dashboard → Enterprises) is the control center for managed enterprise acces...
Enterprise switching
The enterprise switcher in the top toolbar lets multi-tenancy users move between delegated enterp...
Sub-accounts
The Sub-accounts page (Dashboard → Sub-accounts) is available to main multi-tenancy accounts. It ...
Insights
Here are some articles that delve into how MDM can help your business: What is Kiosk Mode? A Guid...