> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# BlueApp for MobileIron Threat Defense Actions

The BlueApp for MobileIron Threat Defense provides a set of orchestration actions that you can use to identify and manage assets in your USM Anywhere environment. The following table lists the available actions from the BlueApp.

**Actions for the BlueApp for MobileIron Threat Defense**

| Action                                             | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Wipe Device                                        | Run this action to remotely wipe the contents of a user's device.<br /><br />You can enter a message that will be displayed on the device before it is wiped.<br /><br />Once the device is wiped, it returns to factory default settings.                                                                                                                                                                                                                                                                                                |
| Change Password                                    | Run this action to remotely issue a new password for a user's device.<br /><br />The password must have at least 12 characters, including at least 1 special character, 1 uppercase character, 1 lowercase character, and 1 number.                                                                                                                                                                                                                                                                                                       |
| Send Message                                       | Run this action to send a message directly to a user.<br /><br />You can choose to send a message either though the email registered to the phone, by push notification, or both.                                                                                                                                                                                                                                                                                                                                                         |
| Delete User                                        | Run this action to delete a user.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| Retrieve Events                                    | Run this action to retrieve events from zConsole.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| Retrieve Matched Assets                            | Run this action to retrieve matched assets from MobileIron Cloud.                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| Scan MobileIron Users                              | Run this action to scan the users from MobileIron.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| Send Message                                       | Run this action to send a message to the selected device from a user.                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| Send Message                                       | Run this action to send a message to the selected device from an alarm.                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| Send Message                                       | Run this action to send a message to the selected device from EV.                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| Change Password from Alarm                         | Run this action to change the password for a user from an alarm.                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| Change Password from Event                         | Run this action to change the password for a user from an event.                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| Change Password                                    | Run this action to change the password for a user.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| Wipe Device from Alarm                             | Run this action to wipe a device from an alarm.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| Configure to Device/Device Group from Alarm        | Run this action to configure the device or device group from an alarm.                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| Configure Device/Device Group from Event           | Run this action to configure the device or device group from an event.                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| Configure Device/Device Group from User            | Run this action to configure the device or device group from the user.                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| Create or assign a Device to a Device Group        | Run this action to create or add an existing device to the MobileIron Device Group.<br /><br />Click **Associated User Details**, **Device Application List**, or **Device Compliance Status** to see more details on the device.                                                                                                                                                                                                                                                                                                         |
| Create or Assign a User to a User Group            | Run this action to create or add an existing user to a User Group.<br /><br />Click **Associated User Groups** to see details on the device's current group associations.                                                                                                                                                                                                                                                                                                                                                                 |
| Assign a Policy to a Device Group                  | Run this action to assign a policy to the selected device group.<br /><br />Click **Device Details**, **Associated Device Groups**, **Associated Configurations**, or **Associated Policies** to see more details related to the device.<br /><br />Click **Available Configurations** or \*\*Available Policies \*\*to see a list of all configurations and policies available.<br /><br />Click **Associated Policies** in the action window, and select a dynamically generated list of policies from the All Policies drop-down list. |
| Assign a Configuration to a Device or Device Group | Run this action to assign a user configuration to the selected device group.<br /><br />Click **Associated Configurations** to see a list of the current configurations for the device.                                                                                                                                                                                                                                                                                                                                                   |
| Lock Device                                        | Run this action to remotely lock a user's device.<br /><br />Click **Device Details**, **Device Application List**, or \*\*Device Compliance Status \*\*to see more details on the device.                                                                                                                                                                                                                                                                                                                                                |
| Unlock Device                                      | Remotely unlock a user's device.<br /><br />Click **Device Details**, **Device Application List**, or \*\*Device Compliance Status \*\*to see more details on the device.                                                                                                                                                                                                                                                                                                                                                                 |
| Restart Device                                     | Run this action to remotely restart a user's device.<br /><br />Click **Device Details**, **Device Application List**, or **Device Compliance Status** to see more details on the device.<br /><br />Click **Device Details**, **Device Application List**, or **Device Compliance Status** to see more details on the device.                                                                                                                                                                                                            |
| Retire Device                                      | Run this action to remotely retire a user's device.<br /><br />Click **Device Details**, **Device Application List**, or **Device Compliance Status** to see more details on the device.<br /><br />When you retire a device, all management features are removed. This also deletes documents, configurations, and profiles.<br /><br />If the device is registered as a corporate-owned device, it reverts to factory default settings.                                                                                                 |

**To view information about these actions in USM Anywhere**

1. In USM Anywhere, go to **Data Sources > BlueApps**.
2. Click the **Available Apps** tab.
3. Search for the BlueApp, and then click the tile.
4. Click the **Actions** tab to display information for the supported actions.
5. Click the **History** tab to display information about the executed orchestration actions.

## Launch Actions from USM Anywhere

You can launch an action directly from alarms or events. If you want to apply an action to similar events that occur in the future, you can also [create orchestration rules](rules-alienapp-mobileiron) directly from the action applied to an alarm or event.

1. Go to **Activity > Alarms** or **Activity > Events**.
2. Click the alarm or event to open the details.
3. Click **Select Action**.
4. In the Select Action dialog box, select the **MobileIron** tile.
5. For the App Action, select the action you want to launch.
6. Enter the name of the category you want the IP address added to, if applicable.
7. Click **Run**.

   After USM Anywhere initiates the action for an alarm or event, it displays a confirmation dialog box.

   If you want to create a rule to apply the action to similar items that occur in the future, click **Create rule for similar alarms** or **Create rule for similar events** and [define the new rule](rules-alienapp-mobileiron). If not, click **OK**.