Home Device Management Managing Device Groups and Assignments

Managing Device Groups and Assignments

Last updated on Apr 17, 2026

Managing Device Groups and Assignments

Device groups let you organize your enrolled devices by grade level, building, device type, or any other criteria. Groups make it easy to assign filtering policies, manage classroom sessions, and generate targeted reports.


Before You Begin

  • Admin access to the KyberGate dashboard
  • At least one enrolled device to start creating groups
  • A plan for how you want to organize devices (by grade, building, department, etc.)

Understanding Device Groups

Device groups in KyberGate serve three main purposes:

  1. Policy assignment — Assign different filtering policies to different groups (e.g., stricter filtering for elementary, more open for high school)
  2. Reporting — Generate reports and analytics filtered by group
  3. Organization — Keep your device inventory manageable as you scale

Devices can belong to multiple groups simultaneously (e.g., a device can be in both "5th Grade" and "Building A" groups).


Creating a Device Group

  1. Navigate to Devices → Groups
  2. Click Create Group
  3. Enter:
    • Group Name — Use a clear, descriptive name (e.g., "Elementary iPads," "HS Chromebooks," "Library Devices")
    • Description (optional) — Add context for other admins
  4. Click Create

Adding Devices to a Group

Method 1: Individual assignment

  1. Go to Devices
  2. Click on a device to open its detail page
  3. Under Groups, click Edit
  4. Select the groups to add the device to
  5. Click Save

Method 2: Bulk assignment

  1. Go to Devices
  2. Use the checkboxes to select multiple devices
  3. Click Actions → Assign to Group
  4. Select the target group
  5. Click Apply

Method 3: Automatic assignment via directory sync If you've integrated Google Workspace, Clever, or ClassLink:

  • Devices can be automatically assigned to groups based on the student's Organizational Unit, grade level, or school building
  • Go to Settings → Integrations → Directory Sync → Group Mapping to configure automatic assignment rules

💡 Pro Tip: Use automatic group assignment whenever possible. It eliminates manual work and ensures new devices are immediately placed in the correct group with the right filtering policy.


Assigning Policies to Groups

  1. Go to Web Filtering → Policies
  2. Select the policy you want to assign
  3. Click Assignment
  4. Select one or more device groups
  5. Click Save

Policy priority: If a device belongs to multiple groups with different policies, KyberGate uses the most restrictive policy. To override this, you can assign a specific policy directly to an individual device.


Managing Group Membership

Removing devices from a group:

  1. Go to Devices → Groups
  2. Click on the group
  3. Select the devices to remove
  4. Click Remove from Group

Deleting a group:

  1. Go to Devices → Groups
  2. Click the three-dot menu on the group
  3. Select Delete Group
  4. Confirm the deletion
  5. Note: Deleting a group does not delete the devices — they remain enrolled but unassigned from that group

Best Practices for Group Organization

Strategy Example Groups Best For
By grade level K-2, 3-5, 6-8, 9-12 Schools with age-appropriate filtering needs
By building Elementary, Middle School, High School Districts with multiple buildings
By device type iPads, Chromebooks, MacBooks Mixed-device environments
By purpose 1:1 Devices, Cart Devices, Library, Lab Shared vs. personal device management
By department Math, Science, English, Art Subject-specific filtering needs

💡 Pro Tip: Start simple with 3–5 groups. You can always add more granularity later. Over-segmenting from the start creates management overhead.


Troubleshooting

Devices not automatically assigned to groups:

  • Verify your directory sync integration is active and healthy
  • Check the group mapping rules under Settings → Integrations
  • Force a directory sync by clicking Sync Now

Policy not applying to a group:

  • Confirm the policy is published (not in draft mode)
  • Check that the policy is assigned to the correct group
  • Wait 2–3 minutes for policy propagation

Device appears in wrong group:

  • Check if the device was manually assigned or auto-assigned
  • Review your automatic assignment rules
  • Manually move the device to the correct group

Related Articles