Device management

Mobile device inventory management

Otukan shows each managed device's hardware, software, ownership and policy state, marks when every field was last reported, and lets you search and export it.

  • One record per device

    Hardware, software, ownership and management state sit together in a single device record, so one search answers the question an auditor or help desk asks.

  • Every field dated

    Otukan shows when each value was last reported by the device, so an old answer cannot pass for a current one.

  • Privacy by ownership

    Corporate-owned devices report what the platform allows for full control; personally owned devices report only the work side.

Blind spots Otukan brings into view

An inventory is only useful if it exposes the devices that need attention. These are the gaps Otukan looks for.

Devices gone silent

  1. Detect

    Otukan compares each device's last check-in with the interval its group expects.

  2. Respond

    Overdue devices are marked stale and can be filtered into a follow-up list.

  3. Report

    The stale list shows device, assigned user, group and time since last contact.

Update backlog

  1. Detect

    OS versions and Android patch levels are grouped by model and device group.

  2. Respond

    Administrators target the lagging group with an OS update policy from the same view.

  3. Report

    Version distribution per group is available to view and export.

Missing required apps

  1. Detect

    Installed managed apps are compared with the list the group requires.

  2. Respond

    A missing or outdated app is queued for managed installation.

  3. Report

    Devices out of line with their app list are flagged in the record.

Unassigned hardware

  1. Detect

    Records without an assigned user or with an unexpected group are highlighted.

  2. Respond

    The device is reassigned or moved to its correct group from the console.

  3. Report

    Assignment changes are logged against the administrator who made them.

What the inventory records

Each field group answers a different operational question, and each is reported through the platform's own management framework.

  • Hardware identity

    Manufacturer, model and serial number, where the enrolment mode exposes them, so a record matches the device in someone's hand.

  • Operating system state

    OS version and, on Android, the security patch level, so update backlogs are visible per model and group.

  • Managed apps

    Which managed apps are installed and at which version, compared with what the device's group requires.

  • Ownership and assignment

    Corporate or personal ownership, assigned user, enrolment mode and device group, recorded when the device enrols.

  • Policy status

    Whether the device has applied its group's policy, with any setting that failed or drifted called out.

  • Check-in history

    Last contact with the management service, so silent or offline devices surface before anyone asks for them.

How it works

  1. Agree the fields

    We confirm which inventory fields matter to your operations, per platform and ownership model.

  2. Enrol and report

    Each device reports its state at enrolment and again at every check-in.

  3. Date every value

    Otukan stores when each field was last reported and marks values older than expected.

  4. Search and group

    Administrators filter by any field and save the result as a reusable view.

  5. Export by role

    Authorised roles export the view they are allowed to see, for audit or planning.

Administrators can rely on four kinds of fleet state in Otukan: what the device is (manufacturer, model, serial number where the mode exposes it), what it runs (OS version, Android patch level, managed apps), who it belongs to (ownership, user, group) and whether it is in line (policy status, last check-in). Every value carries the time the device last reported it, so reported state is never passed off as live state. Personally owned devices show only their work side. Search, saved views and role-limited export turn the record into daily answers.

Inventory scope

Otukan builds the inventory from what each platform’s management framework reports, then keeps it in one record per device. The field groups below are the backbone of that record.

Field groupExample fieldsAndroid (Android Enterprise)iOS and iPadOS (Apple device management)
Hardware identityManufacturer, model, serial numberReported on corporate-owned devices; withheld from a work profile on personal devicesReported on corporate-owned devices; not revealed under User Enrollment
SoftwareOS version, managed apps and versionsOS version and security patch level; apps inside the managed profile or deviceOS version; managed apps only on User Enrollment
OwnershipCorporate or personal, enrolment modeSet by the provisioning pathSet by the enrolment path
AssignmentUser, device group, siteRecorded by Otukan at enrolmentRecorded by Otukan at enrolment
Management statePolicy status, last check-inReported by the device policy controllerReported in response to management queries

The columns are not mirror images. Each platform decides what an administrator may read in each mode, and Otukan follows those rules rather than filling gaps with guesses.

Ownership decides the view

On a corporate-owned device, the organisation sees the full managed picture. On a personally owned device, the record stops at the work profile or the managed apps and accounts. This keeps inventory useful for support and audit while leaving personal data where it belongs.

Freshness

A device record is a report, not a live feed. Otukan makes the difference visible.

  • Reported state. What the device told the management service at its last check-in, shown with that time.
  • Requested refresh. An administrator asks an online device to report again, and the record updates when it answers.
  • Stale state. Values older than the group’s expected check-in interval are marked, and the device joins the stale list.
  • Offline state. A device out of contact keeps its last known values, labelled with their age, until it reconnects.

This matters most when a decision rests on the record. A help desk operator confirming an app version, or an auditor checking policy status on a given date, can see exactly how old the answer is. For the audit trail of administrator actions, see MDM audit reporting.

Operations

The inventory earns its keep in daily work: finding a device, grouping a problem and handing evidence to someone else.

Search and grouping

Administrators filter by any recorded field, such as model, OS version, group, policy status or last check-in, and combine filters to isolate a problem. A filter can be saved as a view: “Android devices behind on patch level at the northern sites”, for example, becomes a list the regional team opens every morning.

Views for each team

The same records answer different questions for different people, and each team keeps its own saved views.

  • Help desk. One user’s devices, their managed apps and the last check-in, found by searching the user’s name while the caller is still on the line.
  • Security. Devices behind on OS version or patch level, or with a policy that failed to apply.
  • Procurement and planning. Models and ages by unit, ahead of a hardware refresh.

Export and its limits

Authorised roles export a view for audit, planning or an asset register. An export contains only the fields and device groups that role is permitted to see, so a regional administrator cannot export the whole fleet, and personal-device fields stay out unless your policy explicitly allows them. Exports reflect the recorded state at the moment of export, with each value’s report time included.

Inventory then drives action: a stale or non-compliant device can be locked, restarted or re-enrolled. Those actions are covered on MDM remote device management. The other management workflows, from setup to retirement, are covered on device management capabilities.

Inventory is one part of Otukan mobile device management, which is covered on the product overview.

Common questions

  • Can administrators see personal apps on staff-owned phones?

    No. On Android, a work profile keeps personal apps outside the administrator's view, and hardware identifiers are withheld from it. On Apple devices, User Enrollment exposes only managed apps and managed accounts, and does not reveal the serial number. Otukan records what each mode permits and nothing beyond it, which is the reason staff accept enrolment.

  • How current is the information in the inventory?

    As current as the device's last report. Devices report at enrolment and at each check-in, and an administrator can request a fresh report from any online device. Otukan shows the time every value was reported and marks anything older than the group's expected interval, so an older report always carries its age.

  • Can inventory data feed our asset register?

    Yes, through export. Authorised roles export any saved view, limited to the fields and groups their role covers, and the export can be loaded into your asset or service management records. The exchange format and any scheduled transfer are agreed with you during rollout, with personal-device fields left out by default.

See your fleet as it really stands

Tell us whether the fleet is your own or supplied to customers, your Android and iOS mix, and which inventory questions you struggle to answer today. We never request exports of your current device records or any administrator login.

Or request a technical demo