Can System Manager give different access depending on the user logged in?

[BYoungIM]

Lets take a laptop or an ipad that is a shared device. QUestion is can System Manager change the policies and blocked features (camera access for examp[le) based on the logged in user or AD, rhater than being tied to the device itself?

[ekramer]

No.  There is only one option for access level for the organization as a whole (None / Read-Only / Full) and s secondary option on a per-network basis (None / Full / Read-Only / Monitor-Only).

[BlakeRichardson]

@BYoungIM You could implement settings using Geofencing or user based profiles. If they are students you can use Apple Classroom. 

[PaulF]

Yes, this is indeed possible.

1. Create a new Setting and ensure that this is a USER profile

 2. Add a restriction that, say, disables the camera

3. Under Targets, change this to point to a user tag (Say an AD one, or in the case below, an ASM Class of students)

 

Your camera, after a few minutes, should now be disabled

[nbv]

@BYoungIM this is 100% correct. I'd like to add that you will need to create the user/group tag first then assign it to your preferred user/group. Without the tag being assigned to anybody, nobody will get the settings.