Profiles assigned to users have a higher priority than profiles assigned to devices. In the case of the priority profiles, the relevant group rather than the individual device or user is prioritized. This means:

Rule: Priority profiles assigned to user groups have a higher priority than those assigned to individual users. These have higher priority than priority profiles assigned to device directories. Priority profiles assigned to an individual device have the lowest priority.


Master profile hierarchy


Higher priority

than...

user-specific profiles

device-specific profiles

further away from the user/device

closer to the user/device



User master profiles


Higher priority

than...

organizational unit

other groups

other groups

primary group