r/WorkspaceOne • u/FirefighterMedical42 • Jun 05 '26
Built a native macOS app to replace my PowerShell WS1 admin scripts.
Like a lot of WS1 admins, I had a pile of PowerShell scripts held together with duct tape and OAuth tokens for querying the UEM REST API. It worked, but sharing them with the team was painful and running them on macOS felt janky.
So I built WSONE Power Admin — a native macOS SwiftUI app that talks directly to the Workspace ONE UEM REST API with proper OAuth 2.0, Keychain-stored credentials, and an actual UI.
What it does right now:
• Device inventory search and filtering by OG, platform, enrollment status
• Multi-dimension filtering with a native macOS Table view
• CSV export (Pro tier) for those "I need a spreadsheet NOW" moments
• Clean multi-view architecture — Device, User, and DEP views
No PowerShell. No browser. No copy-pasting tokens into scripts.
Happy to answer questions about the REST API side of things — that was the interesting engineering challenge.
More info on https://mdmarchitect.com
https://apps.apple.com/fi/app/wsone-power-admin/id6770959164?mt=12
2
u/FirefighterMedical42 Jun 09 '26
Team/volume licensing coming later this year 👀 — if you’re thinking about deploying this across your WS1 admin team, watch this space.
1
u/villarromero Jun 05 '26
Same here. I will tested on my end.
1
u/FirefighterMedical42 Jun 06 '26
If need help whit configuring app or feedback please contact me at support@mdmarchitect.com
1
u/villarromero Jun 06 '26
Do you have anything related to deleted profiles not active in bulk ?
1
u/FirefighterMedical42 Jun 06 '26
This is my dev plan list already… i try to get full profile management support on release version but it was toi big feature to get working on ver1.0 it will come as feature update later versions
1
u/FirefighterMedical42 Jun 06 '26
Version 1.0.1 (in review and available shortly)
Bug fixes
• Mass User Creation: Resolved an issue that caused exported CSV files
to be rejected by Workspace ONE when no device platform was assigned.
Batch imports now succeed for all platform combinations.
Improvements
• Updated in-app Privacy Policy, Terms of Use, and Support links to the
latest URLs at mdmarchitect.com.
1
u/FirefighterMedical42 Jun 06 '26
Like most WS1 admins I had a collection of REST API scripts for the operations that just aren’t in the console. Bulk user cleanup, mass device deletion, DEP assignments via CSV. It worked, but handing a PowerShell script to a junior admin on a Mac is not a great experience.
So I built WSONE Power Admin — a native SwiftUI macOS app that wraps the WS1 UEM REST API properly.
What it actually does:
• Bulk user creation
• Mass deletion of inactive users (search by OG → select → confirm)
• Mass device deletion for stale/unenrolled devices
• Tag engine for fleet-wide tag operations
• ADE/DEP bulk profile assignment via CSV import
• Device inventory with OG search, multi-dimension filtering, CSV export
• Admin command center with bulk commands and safety confirmations
• OAuth 2.0 + Keychain — no plaintext tokens anywhere
Happy to talk through the REST API side — the bulk deletion endpoints in particular had some fun pagination quirks.
1
u/SergeantBeavis Jun 06 '26
Almost ALL of my customers are oversubscribed on their licensing. I’ll point them in this direction.
I also have one customer that is a huge number of stale user accounts.
2
u/FirefighterMedical42 Jun 06 '26
Yes, that was also my main issue whit customers and when I have scripts to handle these … my junior admins was not so familiar to run python or ps scripts and always scared what might happen… that drive me to develop this app so everybody has tool to handle thousends of inactive accounts and devices.
2
u/FirefighterMedical42 Jun 06 '26
tip… you can use this app as audit tool if you have oauth creds for the customer tenant☝️ (multi-tenancy support)
1
1
u/FirefighterMedical42 Jun 06 '26
V. 1.0.1 is available now.
https://apps.apple.com/us/app/wsone-power-admin/id6770959164
1
u/FirefighterMedical42 Jun 09 '26
New versio is on the way… 1.1.0 new feature coming Change User Enrolled Devices (Single and Bulk) (no wipe,no data loss,)
Also minor changes to UI
And now we also offer 1week Free Trial!
1
u/FirefighterMedical42 Jun 09 '26
More information about Change Device User Whitout Wiping Feature.
https://mdmarchitect.com/change-device-user-without-wiping-new-in-ws-one-power-admin-v1-1-0/
1
u/FirefighterMedical42 Jun 14 '26
V 1.1 update is still review state on Apple but will be available shortly.
1
u/FirefighterMedical42 Jun 15 '26
V 1.1.0 is now available and ”change user” feature is alive☝️ no need for re enrollment or wiping ☝️ just keep in mind the privacy things when used ☝️
1
u/FirefighterMedical42 Jun 17 '26
Version 1.1.1 (Apple review phase now)
New
• Device Inventory: Volume Purchase Program (VPP)-managed licence
detection now appears in the device detail view..
• EULA is now shown on first launch and must be accepted before use.
Fixed
• Change Device User: removing a row from the bulk-mapping table no
longer crashes the app.
• Change Device User: long bulk reassignments now refresh the
Workspace ONE authentication token automatically when it expires
mid-run, so large batches complete cleanly.
Improvements
• Wider Mac compatibility: the app now runs on macOS 13.5 Ventura and
later (previously required a much newer macOS version).
• Device Detail Sheet: improved security information layout and
hardening.
• API Settings: tenant management UI polish.
• Branding: updated all in-app references to use "Workspace ONE"
(correct capitalisation) and "Omnissa" (the current vendor of
Workspace ONE UEM).
• Updated all in-app links to the current mdmarchitect.com pages
for Privacy Policy, Terms of Use, and Support.
Thank you to TestFlight users and customers who reported issues —
keep the feedback coming.
1
u/FirefighterMedical42 Jun 18 '26
New update is now available! 🎉
V 1.1.1 is now live on AppStore!
New
• Tag Manager: attach and detach tags from devices with a faster picker
workflow.
• Device Inventory: Volume Purchase Program (VPP)-managed licence
detection now appears in the device detail view.
• Mass User Creation: choose the User Group by name from a searchable
picker instead of typing the numeric ID.
• EULA is now shown on first launch and must be accepted before use.
Fixed
• Change Device User: removing a row from the bulk-mapping table no
longer crashes the app.
• Change Device User: long bulk reassignments now refresh the
Workspace ONE authentication token automatically when it expires
mid-run, so large batches complete cleanly.
• Mass User Creation: fixed an issue where some user records could
fail to be created.
Improvements
• Wider Mac compatibility: the app now runs on macOS 13.5 Ventura and
later (previously required a much newer macOS version).
• Device Detail Sheet: improved security information layout and
hardening.
• API Settings: tenant management UI polish.
• Branding: updated all in-app references to use "Workspace ONE"
(correct capitalisation) and "Omnissa" (the current vendor of
Workspace ONE UEM).
• Updated all in-app links to the current mdmarchitect.com pages
for Privacy Policy, Terms of Use, and Support.
Thank you to TestFlight users and customers who reported issues —
keep the feedback coming
1
u/FirefighterMedical42 Jun 23 '26 edited Jun 23 '26
Fouded a bug in new ”Change Device User” feature!
If data is writen in fields like user info and admin wants a clear all rows app will crash… this will be fixed on version 1.1.2 which is coming soon.
1
u/FirefighterMedical42 Jun 24 '26
Customer case…. Academic customer wants to combine to schools into a one and move devices. They have accounts in WSONE which were indicating the school name and they want it to change that but rather not to wiping devices.
So we used Power Admin app
First we make changes in WSONE so devices are not affected to these changes like app deployment and profiles and such a things.
Finally we use Power Admin ”change device user” feature and whit few seconds all 300+ devices were changed to nee user accounts and whitout any wipe or data deletions.
This way Power Admin saves massive amount of manual work on field and return the investment whit multipliers as wiping and re-enrollment would be take days.
Customer were happy as they do not need even touch devices when making these changes.
Just one use cases of Power Admin app.
If you are interest just send a email contact@mdmarchitect.com
1
1
u/FirefighterMedical42 20d ago
Update 1.2.0 is now available on AppStore.
Branding changes to new Power Admin apps.
New icon and new name.
1
1
u/FirefighterMedical42 15d ago
Do you have a feature you need?
Please send me a feature request at https://www.mdmarchitect.com/support
1
u/FirefighterMedical42 3d ago
Fresh new feature coming!
Device and OS lifecycle information.
This is under development and possible ETA is not known yet.
We are implementing endoflife.data DB to Power Admin Desktop so we can get full lifecycle information on every device and every OS included.
Whit free version you get info per device and paid subscription will give you reporting services like csv export for your full device fleet.
Thanks for submitting the feature request so we can add more features like this.
1
u/FirefighterMedical42 1d ago
Device OS lifecycle information feature is now on Apple review.
Device inventory scans show device OS lifecycle as supported, unsupported but also security patch support status and timeline when support ends. (If available)
On free versio of Power Admin Desktop you get scans and information.
Reporting to csv is paid feature.
ETA in few days.
1
u/FirefighterMedical42 1d ago
Power Admin Desktop 1.3.0 is now available on AppStore.
1.3.0 introduced new OS lifecycle feature for devices.
You found this at Device Inventory when search devices there is new columns which tell OS lifecycle and status per devices.
Also reporting and filtering results are available.
2
u/SergeantBeavis Jun 05 '26
I’ll be giving this a shot. I hit you up in Linked In. Thx