Device group actions

With Relution 5.22, it is possible to trigger not only policies but also actions and CRON jobs through membership of device groups. This function fully replaced rule sets with Relution 26.0. Existing rule sets were not migrated to the new functionality.

The basic functionality of device groups is explained here: Device groups →

Creating actions #

Actions always belong to a device group. They are created under Devices → Device Groups in the detail view of the group, on the Actions tab, via Add. This requires the permission to create or edit device group actions.

The Add action form consists of two sections:

• General: Name, optionally Description, and Trigger. The Trigger field offers the options Event-based and CRON-scheduled.
• Action: The Action type field defines what is executed on the devices (see the Main action types section).

In the list of actions, each action can be switched on and off with the Enabled toggle. Disabled actions are not executed.

Event-based #

Event-based actions react to changes in group membership:

1. Trigger of execution defines when the action is executed: No trigger, When a device enters the group, When a device leaves the group or Both.
2. Delay of execution offers Immediately and Delayed. With Delayed, the delay is specified in Days, Hours and Minutes; the default is 90 minutes. If a device that entered the group is no longer a member when the delay expires, or a device that left the group is a member again, the action is not executed. This avoids executions for devices that belong to the group only briefly.

Event-based actions only apply to future entries and exits. Devices that are already members of the group when the action is created do not trigger the action.

CRON-scheduled #

1. Actions can be triggered on a schedule defined by a CRON expression WIKI CRON →. At each scheduled time, the action is executed for all devices that are members of the group at that moment.
2. All fields are required. Commas are used to separate individual values, and ranges and step values are accepted. Days of month and Days of week cannot both contain specific values; one of them is set to * or ?.
3. The default is a daily execution at 06:00 and 21:00 (Minutes 0, Hours 6,21, Days of month *, Months *, Days of week ?). The times refer to the time zone of the Relution server.

Common Operators #

Values are entered without spaces; otherwise the portal rejects the input as invalid.

• Asterisk (*): Represents “every” (e.g., every minute, every day).
• Question mark (?): Only for Days of month and Days of week; represents “no specific value”.
• Comma (,): Used to separate individual values (e.g., 1,15,30 for the 1st, 15th and 30th minute).
• Hyphen (-): Defines a range (e.g., 1-5 for Monday through Friday).
• Slash (/): Defines intervals (e.g., */5 for every 5 units).

Crontab Guru →

These configurations are directly valid and are applied after saving.

Main action types #

The Action type field offers the following types:

1. Delete device
2. Device action
3. Notification action
4. Change device name
5. Refresh device policy
6. Webhook

Delete device #

Description:

• This action removes the device from Relution management. What happens on the device depends on the enrollment type:
  • Fully managed Android Enterprise devices are reset to factory settings.
  • On Android Enterprise devices with a work profile or with a personal profile, only the work profile is removed; personal apps and data are preserved.
  • On all other platforms, management is removed (e.g. the MDM profile on Apple devices or the enrollment on Windows), but the device is not reset.
• Important: This action cannot be undone.
• For devices enrolled via KME (Knox Mobile Enrollment), it must be ensured that no profile is assigned in the Samsung Knox Enrollment Portal, as the device will otherwise be re-enrolled automatically after deletion (Android only).

Options:

• Android:
  • Keep the Relution Client App: yes/no
• Managed device (Android Enterprise, fully managed):
  • Keep factory reset protection (FRP) enabled: yes/no
  • Also wipe the device’s external storage (such as SD cards): yes/no
  • Message: Text displayed to users of personal devices with a work profile before the work profile is removed. It has no effect on company-owned devices.

Device action #

Description:

• Enables various individual actions on the devices.

After selection, the Details section shows the platforms on which the action is available.

Subactions:

1. Enable lost mode
   • Locks the device and enables it to be located. Can be used when a device has been lost.
   • Fields: Message, phone number, footnote, email, address, organisation name
2. Disable lost mode
   • Cancels the Lost Mode.
3. Reboot device
   • Restarts the device.
   • Field: Reason for rebooting (only Android devices without Android Enterprise and interactive whiteboards)
   • Options: Power off (only Android devices without Android Enterprise and interactive whiteboards), Notify user to reboot the device (no forced reboot), macOS 11 or later only
4. Refresh device info
   • Updates the device information stored in Relution.
5. Alert
   • Sounds an alarm on the device.
   • Field: Duration (in seconds)
6. Enable or disable Bluetooth
   • Enables or disables Bluetooth.
   • Option: Enable Bluetooth
7. Scan Device
   • Starts a Microsoft Defender antivirus scan on Windows devices.
   • Field: Scan Type (Quick Scan or Full Scan)
8. Delete local users
   • Deletes all local user accounts and data.
   • Option: Force account deletion
9. Enable or disable personal hotspot
   • Enables or disables the personal hotspot.
   • Option: Enable personal hotspot
10. eSIM Cellular Plan
    • Configures an eSIM mobile plan.
    • Field: Server URL
11. Remove Shortcut
    • Removes a shortcut from the device.
    • Fields: Label, URL
12. Request mirroring
    • Starts AirPlay playback on an Apple TV or other AirPlay-enabled device.
    • Fields: Name, MAC address, scan time (seconds), password
13. Return to Service
    • Resets the device to factory settings. Afterwards, the device tries to re-enroll in Relution automatically; this requires Activation Lock to be disabled. Available for iOS 17 or later and tvOS 18 or later.
    • Field: Wi-Fi configuration (required; selected from the enabled Wi-Fi configurations of published policies)
    • Option: Keep existing data plan (iOS only)
14. Send file to device
    • Sends a file to the device.
    • Fields: Select file, directory, do not decompress ZIP archives
15. Wipe device
    • Resets the device to factory settings.
    • Options: Keep factory reset protection (FRP) enabled, Also wipe the device’s external storage, Message, PIN, Keep existing data plan, Disable Proximity Setup
16. Install Prowise update
    • Installs a Prowise update.
    • Field: Update on
17. Lock device
    • Locks the device with the current password.
    • Fields: Message, phone number, PIN
18. Add Shortcut
    • Adds a shortcut to the device.
    • Fields: Label, URL, Open in full screen, Icon
19. Reset lock passcode
    • Resets the device password.
    • Field: New password
    • Options: Lock immediately, Require input before next reset, Do not ask at boot
20. Reset password (Windows)
    • Resets the password of a Windows user account.
    • Fields: User name, Password, Repeat password
    • Action: Generate example password
21. Shutdown device
    • Shuts down the device.
22. Stop mirroring
    • Stops AirPlay playback.
23. Locate device
    • Triggers location of the device.
24. Clear restrictions password
    • Removes the Screen Time code.
25. Enable or disable data roaming
    • Enables or disables data roaming on iOS devices. The user can change the setting again on the device.
    • Option: Enable data roaming
26. Continue in device Setup Assistant
    • Continues the device in Setup Assistant.
27. Install Media
    • Installs media on the device.
    • Field: Token selection
28. Remove Media
    • Removes media from the device.
    • Field: Token selection
29. Execute PowerShell script
    • Runs a PowerShell script on Windows devices.
30. Log out the user
    • Logs off the current user.
31. Execute shell script
    • Runs a shell script on macOS and Linux devices. The subaction is only available if the macOS companion is enabled (Settings → Relution Client Apps, switch Enable macOS companion).
32. Request device info
    • Requests specific device information (Android Enterprise, work profile on a personally owned device, Android 13 or later). The user is asked to approve the disclosure of the information.
    • Field: Type (eSIM identifier (EID))
33. Enterprise wipe
    • Removes the work profile and all policies, relinquishing the device for personal use. Apps and data of the personal profile are preserved (Android Enterprise, company-owned device with personal profile, Android 8 or later).
34. Set default apps
    • Sets the default apps for calling, messaging and web browsing on iOS devices.
    • Fields: Default Calling App and Default Messaging App (iOS 26 or later), Default Browser App (iOS 18.2 or later)
35. Enable Remote Desktop
    • Enables remote management via Apple Remote Desktop on Macs: Remote Desktop with All Users access, the ability to receive remote events, and the Observe, Control and Show being Observed options. All other options remain unchanged (macOS 10.14.4 or later).
36. Disable Remote Desktop
    • Disables remote management via Apple Remote Desktop on Macs (macOS 10.14.4 or later).

Notification Action #

Description:

• Sends notifications to device users or other people.

Recipients:

• Notify device user
• Notify other users: selection of users and user groups
• Additional email recipients: further email addresses

Message:

• Notify via e-Mail: Sends an email based on a template. Reset to template restores the default text.
• Notify via push message: The recipients receive the push message on all enrolled devices assigned to them.

Placeholders can be used in the texts; the available placeholders are shown in the form: Advanced placeholders →

Change device name #

Description:

• Changes the name of the device.

Field: Device name. Placeholders such as ${device.serialnumber} are resolved for each device. If the result is an empty name, the previous device name is kept.

Refresh device policy #

Description:

• Updates the policies applied to the device.

Webhook #

Description:

• Sends a request to an external service (e.g. another system).

Fields: URL, Method (GET, POST or PUT; POST is preselected), Headers (request headers as a list), Body

Under Test webhook parameters, Check connectivity makes the server send an OPTIONS request to the specified URL and displays the response. This shows whether the target host can be reached from the Relution server.