Access Management

Device Guardian Access Management 1.0

Overview

Device Guardian Access Management (DGAM) enhances device management and access by streamlining operations. A kiosk display delivers instant visibility into the Device Guardian system, enabling effortless monitoring of device availability within the local area, ensuring accountability through worker-device assignments, and ensuring that devices are fully charged for the next shift.

Quickly locate missing devices by identifying the current and previous users, as well as the reason for the missing status, and initiate recovery with Device Guardian. This enhances local visibility, boosts workflow efficiencies, and facilitates the swift recovery of missing devices.

As an extension of Device Guardian, DGAM’s features and functionality are built upon the core capabilities of Device Guardian. This section provides guidance on the installation and use specific to DGAM. Any features not covered here are part of Device Guardian and are discussed in the respective Device Guardian sections.


Install

Device Guardian Access Management (DGAM) requires the installation of Device Guardian on both kiosks and devices, as well as DGAM-specific licenses to access its functionality. To procure these licenses, visit the Licensing guide.

Installation for both kiosks and devices:

Install Device Guardian on both kiosks and devices; see Device Guardian installation for details. DGAM requires the following permissions to be granted for both kiosks and devices:

  • Camera Permission - Needed to scan the registration QR code, essential for registering the device with a kiosk.
  • Location Permission - Required to determine the device’s geographical position, crucial for location-based services or GPS-related functionalities.
  • Music and Audio Permission - Enables access and control of the device’s audio features, including playing or managing audio within the application, such alarms.
  • Notifications Permission - Allows the application to send notifications to the user, ensuring effective communication of important updates or alerts.
  • Files and Media Permission - Specific to Android 11, required to read from or write to the device’s storage, allowing access or modification of files and media content while adhering to Android 11’s scoped storage policies.

Kiosks:

Devices:


Import DataWedge Profile

Zebra's DataWedge application facilitates barcode scanning in DGAM. A specific DataWedge profile must be imported on devices being registered to a kiosk.

Steps to Import DataWedge Profile:

  1. Download the DataWedge Profile.
  2. Copy the File to Your Device: Transfer the DataWedge profile to the device’s internal storage.
  3. Import the Profile into DataWedge: Open the DataWedge app on your device (installed by default). image
    • From the top-right menu, select Settings. image
    • Select Import Profile. Browse to the file location from step 2. The profile is imported.
      image        image
  4. Verify Import: Return to the main screen of DataWedge to ensure the profile named "DGAM” is listed. image

Register Device to Kiosk

Register devices with a designated kiosk to update the kiosk dashboard data and enable device monitoring within the kiosk. This is accomplished by using the device to scan a barcode displayed on the kiosk.

Steps to register a device to the kiosk:

  1. On the mobile device, open the Device Guardian app.
  2. Tap the top-right menu and select Register to Kiosk. image
  3. A screen appears allowing you to scan a barcode. image
  4. On the kiosk, tap the top-left menu. image
  5. Select Register / Sync. image
  6. Tap Register Device. image
  7. While on the screen from step 3, use the mobile device to scan either the QR code or barcode, completing the device registration to the specific kiosk.
    image        image

Kiosk Dashboard

The kiosk dashboard features three prominent cards that display device counts:

  • Available - Devices currently charging with no user signed in
  • In Use - Devices authenticated via Identity Guardian, indicating active use
  • Missing - Devices with unknown locations

image

Kiosk Dashboard

Tapping any card provides detailed information on the corresponding devices:

  • Device Name
  • Battery Level
  • Serial Number
  • Alias Name
  • Asset Type (Device or Peripheral)
  • Last User
  • Last Access Point
  • Last Updated

image

Missing Devices with device information

Dashboard actions:

  • Data Sorting - Organize data by tapping on visible column names, making it easier to manage and analyze information.
  • Data Filtering - Apply filter options based on specific columns, such as Device Name and Battery Level, to quickly target relevant data points. Tap Add Filter and select the desired columns for filtering.

Web Portal

This section focuses on the web portal areas specific to DGAM. Sections not covered here pertain Device Guardian, which are detailed in Device Guardian configuration and dashboard.

Single Sign On Integration (SSO) (Admin Settings > Single Sign On Integration) is accessible only to administrators and managers. For more information on SSO integration, see Device Guardian's Single Sign-On (SSO).


Welcome Dashboard

The DGAM Welcome Dashboard (Dashboard > Welcome Dashbaord) provides an intuitive dashboard that displays real-time data at-a-glance. It features three prominent cards that display device counts:

  • Available - Devices currently placed on charge
  • In Use - Devices where users have been authenticated with [Identity Guardian][/identityguardian]
  • Missing - Devices removed from charging

image

Welcome Dashboard guide

Tapping any card provides detailed information on the corresponding devices:

  • Device Name
  • Battery Level
  • Serial Number
  • Alias Name
  • Asset Type (Device or Peripheral)
  • Last User
  • Last Access Point
  • Last Updated

image

Device Summary of Available Devices


Kiosk

Kiosk (under Admin Setup > Kiosk) displays kiosks that are enrolled to the server, along with the site it is assigned to.

image

Kiosk guide


Kiosk Device

Kiosk Device (under Admin Settings > Kiosk Device) displays all devices registered with a kiosk, displaying various device data, including their Status:

  • Available - Devices currently placed on charge
  • In Use - Devices where users have been authenticated with [Identity Guardian][/identityguardian]
  • Missing - Devices removed from charging

image

Kiosk Device guide


Edit Kiosk Device

Steps to edit a device registered with a kiosk:

  1. In the DGAM web portal, go to Admin Settings > Kiosk Device. Click on the edit (pen) icon for the desired device to modify.
  2. Enter the appropriate information to update. Select one of the following for the Status:
    • Available
    • In Use
    • Missing
  3. Click Update.

image

Steps to edit a device registered with a kiosk


Reports

The Reports section provides insights into device and user activity, offering detailed data on device statuses, historical usage, and user activity.


Devices

The Devices report (under Reports > Devices) provides current device information, including:

  • Device Name - Device model with serial number
  • User Name - Name of the user logged into the device
  • Kiosk - Name of the kiosk with which the device is registered
  • Site - Name of the site where the device is located
  • Last Status Update - Timestamp of the most recent update
  • Status Reason - Information provided when a device is marked as missing; this is derived from the "state_change_reason" in the Device Tracking State API.
  • Status:
    • Missing - The device is removed from the powered cradle and a user has not logged in for 2 minutes.
    • Lost - The device location is unknown, and it is marked as missing to facilitate recovery efforts.
    • Decommissioned - The device is no longer licensed and is considered out-of-service.
    • Recommissioned - The device was decommissioned and is now reinstated into the active device pool.

Use the filter to refine the report by status. The Export Data button exports the report as a .CSV file.

image

Devices report based on status


Historical Reports

Historical reports provide device data from the past six months, focusing on device use, status, and user metrics. These reports are divided into four categories.


Cabinet Devices

The Cabinet Devices report provides device usage data for devices registered to a particular kiosk-managed cabinet, including:

  • Device Name - Device model with serial number
  • User Name - Name of the user logged into the device
  • Number of Logins - Total count of user logins
  • Average Logged In - Total user login time divided by the number of logins
  • Average Logging In - Average time it takes for users to either remove the device from charging to log in the device or place it back on the charger

image

Cabinet Devices Report


Device Status

The Device Status report provides the previous and current states of the kiosk, including timestamps for the state changes. The report includes:

  • User Id - User identifier, available if the device is in the "in_use"; otherwise, this field is empty.
  • Kiosk Name - Name of the kiosk
  • Previous State Time - Timestamp of the previous state's occurrence
  • Previous State Device's prior state: missing, on_charge, or in_use
  • New State Time - Timestamp of when the device transitioned to its current state
  • New State - Current state of the device: missing, on_charge, or in_use
  • Battery Percentage - Battery level at the time when the new state was reported

image

Device Status Report


User Devices

The User Devices report provides user login information, including:

  • Device Name - Model and serial number of the device
  • User Name - Name of the user
  • Number of Logins - Total count of user logins on the device
  • Logged In (Minutes) - Total duration the user has been logged into the device
  • Avg Logged In (Minutes) - Average duration of user login sessions
  • Logging In (Minutes) - Time taken for the user to login after retrieving the device from the kiosk-controlled cabinet

image

User Devices Report


User Metrics

The User Metrics report provides device usage details for the specific user over a given time period. The report includes:

  • Device Name - Model and serial number of the device
  • Kiosk Name - Name of the kiosk
  • Logged In At - Timestamp of user's login
  • Handover/Returned At - Timestamp indicating when the user logged out and returned the device
  • Usage Time (Minutes)- Total duration the user was logged into the device

image

User Metrics Report


APIs

Device Guardian Access Management utilizes the same APIs as Device Guardian. For more information, refer to the APIs section.


See Also