Some Questions about MAC's

Thank you for reaching out to the community forum.

Kindly refer below,

* We have a group called MACs. When we install Sophos on a MAC, is it possible to auto-assign to this group?

You can use our command line option to automatically add a device to a specific group or a sub-group. You can find details here.  

* Is it possible to create scopes? E.g., that our MAC admin can only administrate MAC devices?

Yes, it is possible to create role management. You can delegate who has access and who has only helpdesk access. For more details, you may check this Document.

* Is the encryption feature only running under Windows, or can it be implemented on MACS?

Our Device Encryption on Mac manages FileVault full disk Encryption. To activate this feature on that device where the Sophos endpoint is installed, You need to Go to >My Products>Endpoint/Server>Compiters (Select the device you wish to Enable the feature)>Manage Endpoint Software



For Fresh Install, You need to download the complete Mac OS Installer for Device Encryption feature to get installed along with the Sophos Endpoint. 

Thanks for your answer.
I will look for the command line options....fine.

RBAC: That i can define roles is clear to me. But can i set a scope that e.g. a user with the role Helpdesk can only see/administrate devices with MAC OS?

Hello, Dennis Haschke ,

We appreciate your reaching out to the Sophos Community Forum.

Unfortunately, you cannot customise the helpdesk role, which can only see administrative devices with MAC-only OS. 

Regards,