Goal
Devices enroll automatically via Zero-touch, automatically enter the target group, and automatically apply group policies such as app publish, app update, and device policy. If kiosk behavior is needed, you can also associate a kiosk policy with the group.
Step 1: Create a Group
Note: Auto Group is available in KC Essential. KC Enhanced supports Manual Group only.
Create an Auto Group
Go to 1️⃣ Device Module → 2️⃣ Device Groups, click 3️⃣ Create Group, then select 4️⃣ Auto Group.
Configure the grouping rules. Devices that match the rules will be automatically added to this group.
Notes:
Delivery auto-grouping: Used for out-of-the-box delivery. Devices are automatically added after hitting the delivery rules; if a device hits multiple delivery groups, the system selects the primary delivery group based on the priority set for the groups and automatically applies its associated strategy.
Tag auto-grouping: Used for automatic tags for filtering/statistics/batch operations. Devices can be added to multiple tag groups simultaneously, but no strategies/configurations will be automatically applied. It is equivalent to simply tagging devices without delivery.
Automatic addition/removal of devices: When enabled, devices registered subsequently that meet the rules will be automatically added/removed from this group. When disabled, it only applies to currently registered devices, and subsequent devices will not be automatically added.
Click Create Group to finish creating the Auto-Group:
After creation, open the group Details page and confirm the rules are configured correctly.
Step 2: Associate Policies
This quick start only explains how to associate policies to a group. For policy fields and detailed settings, refer to each policy guide.
2.1 Associate Device Policy
In the group’s policy section, associate the device policy that should apply to this group.
✅ Verify: The group details page shows the associated device policy.
2.2 Associate App Publish Policy
Associate the app publish policy used to deliver apps to devices in this group.
✅ Verify: The group details page shows the associated app publish policy.
2.3 Associate App Update Policy
Associate the app update policy used to control app update behavior for devices in this group.
✅ Verify: The group details page shows the associated app update policy.
If kiosk behavior is needed, you can also associate a kiosk policy here.
Step 3: Create a Configuration
Go to Enrollment → Configuration and click Create Configuration.
Fill in the naming rule, and select the target group created in Step 1 under Associated Group.
Fill in Wi-Fi and Google customer info as needed.
Save the configuration.
✅ Verify: The configuration appears in the list, and the Associated Group is the target group.
Step 4: Create Zero-touch Enrollment and Reference the Configuration
Go to Enrollment → Zero-touch Enrollment and click Enrollment Configuraiton.
On the Zero-touch page, choose between the available options: KMA Zero-touch, GMA Zero-touch, or IMA Zero-touch.
Below is an example of KMA Zero-touch
Select the device(s) to configure and reference the configuration created in Step 3.
Note: If you don’t see devices here, please contact KiwiCloud Support. Devices will appear here only after the system admin has assigned device ownership, and then you can set them as Zero-touch devices.
Step 5: Device Auto-enroll and Apply Policies
Ensure the device is turned on and the network is available. If Wi-Fi information is set in the configuration, the Wi-Fi information must meet the requirements specified in the configuration.
After the device reaches the home screen, it will complete Zero-touch enrollment automatically. In the admin console, you will see the device automatically applies the Configuration, joins the group automatically, and the group-associated policies take effect.
In the device list, open device details to confirm policies are associated and applied automatically.
