Assigning an IT policy or profile to a user group
When you assign an IT policy or profile to a user group, it is assigned to all members of the group. You can assign an IT policy and the following profiles to a user group:
| IT policy or profile |
Assignment |
|---|---|
| IT policy |
You can assign only one IT policy to a user group. If an IT policy is already assigned to the group, you can replace the existing IT policy with a different IT policy. |
| Exchange ActiveSync profile, proxy profile, compliance profile, activation profile |
For each of these profiles, you can assign only one instance to a user group. If a profile is already assigned to the group, you can replace the existing profile with a different profile of the same type. |
|
CA certificate profile, shared certificate profile, VPN profile, Wi-Fi profile, web content filter profile |
For each of these profiles, you can assign more than one instance to a user group. |
BES10 Cloud uses predefined rules to determine which IT policy or profile to assign to a user account (for example, if a user is a member of multiple groups that have different IT policies).

