Congratulations!  You've just found a bug on MobiControl v14.2.0!   I did a quick test on permission control a moment ago, and confirmed that the web console UI does not hide what should have been hidden on the device view based on your requirements.

I suggest you to open an official support case with Soti support team.

Glad  to hear I'm not crazy. I will do so, thank you.

I've checked further.  It's doable in v14.2, though the interface is not as clean as in the case for v13.4, in which all disallowed actions are totally removed from the GUI.  On v14.2, disallowed action items are shown, but the final button to initiate the action is made inactive in each case.

The required permission settings are as follows:

  Global permissions : enable only "MobiControl Access", "Web Console Access" and "Configure Devices/Device Groups"

  Device-Group permissions  :  enable only "Send Action Commands", "Send Messages" and "View Groups"

You can still contact Soti support to see if the UI can be refined to totally hide the disallowed action items on the device view.

Hi Zachary,

In my previous post, I have clarified that it is a UI design setback compared to earlier versions and not a bug, and given details on what should be configured to allow sending messages only.

To avoid audience of this forum from getting misled, I must point out what you showed in your screenshots set something more than merely allowing sending messages as said in your discussion topic.  Rather, profiles can also be revoked, assigned and possibly edited.

Yeah for some reason I received no email about your reply yesterday or I would not have added anything further. I understand one of the screenshots has a "checked" check box which gives full control, but explain that is incorrect in the text. I will delete my post so as to not add confusion.