Profile priority

Profile priority

When multiple profiles are associated with a device, the policies and restrictions will be applied based on profile priority. Profile priority works as follows:
  1. For iOS devices - the most secure policies and restrictions of all the associated profiles will be applied.
  2. For Android devices - the policies and restrictions of the recently associated profile will be applied.
For example, you can apply two profiles containing different camera permissions and passcode policies to a single device.

Profile 1 (associated first): Restricts camera and set minimum passcode length as 4
Profile 2 (associated second): Allows camera and set minimum passcode length as 6

The configurations in the above example will be prioritized and applied to devices as given below:
  1. For iOS devices, the most secure configurations will be applied. So the user will be restricted from using the camera (as it is more secure than allowing them to use the camera) and they will be prompted to set a passcode with at least 6 characters (because longer passwords are more secure). The end result is a combination of both profiles.
  2. For Android devices, the configurations of the recently associated profile will be applied. As Profile 2 is the recent profile here, the user will be allowed to use the camera and they will be prompted to set a passcode with at least 6 characters.

    • Related Articles

    • Profiles in Zoho One - Overview

      After enrolling devices with Zoho One, you can create and associate them with profiles. Profiles are used to impose policies (such as passcode, Wi-Fi, and VPN policies) to configure the device, and restrictions (such as camera and app restrictions) ...

    • Devices in Zoho One - Overview

      In Zoho One, devices are classified based on their: Enrollment method Enrollment status Management status Based on enrollment method BYOD devices Bring Your Own Device (BYOD) devices are the personal devices of users that are enrolled in Zoho One ...

    • Disassociate profiles

      You can disassociate a profile from a specific device or group. Once a profile is dissociated, the policies and restrictions configured within that profile will no longer apply to the selected device or group. For example, if the profile had a ...

    • Associate profile

      You can create one or more profiles and associate them to the required devices or groups. Once you associate a profile to the device, all restrictions and policies configured within that profile will be applied to that device. For example, if the ...

    • Enroll BYOD devices

      The Bring Your Own Device (BYOD) enrollment enables users to enroll their personal devices. You can enroll your devices in the following ways: By sharing enrollment links to users or groups through email. By generating an enrollment link to enroll ...