Web Console Guide

Web Console Guide

The console lives at https://coremdm.web.app/console.html (reach it from the landing page via Manage). Sign in with the same Firebase account your devices are enrolled under.

The device grid

After sign-in you see every device you own, with:

• Name (custom name, or the model) and OS version
• ONLINE / OFFLINE badge (online = status: online and seen in the last 5 minutes) and an ALARM badge
• IMEI / serial when available
• Quick actions: Sound Alarm and Manage →
• A search box (matches name, custom name, IMEI, serial)
• Summary counters: total / online / offline / alarming

Renaming a device

Open a device and click the ✎ pencil next to its name in the header. Enter a friendly name (blank reverts to the model). The name updates everywhere immediately.

The management modal — 7 tabs

Tab	Contents
Commands	Sound/Stop alarm, Lock screen, Reboot, Apply Full Lockdown. Queued commands appear under Pending Commands with a Cancel button. See Commands and Command Queue.
App Policies	Block install/uninstall/sideloading, hide Play Store, hide browsers, Block Social Media, disable camera, disable screen capture.
Installed Apps	The apps the device reported (name · package · version). Set each to Allowed / Blocked (suspended, won't open) / Hidden (removed from launcher), with search and counts. See App Management.
System	Prevent safe boot / factory reset / developer options, block add-user & user-switch, lock the status bar, and set the minimum lock-screen PIN length (4/6/8).
Hardware	Lock Wi-Fi / cellular / Bluetooth / VPN config, block USB file transfer, disable the Bluetooth radio, block outgoing calls, block SD card, protect MDM from uninstall.
Network	Enforce a Private DNS hostname, toggle the content filter VPN, manage kiosk allowed packages. See Content Filter and DNS and Kiosk Mode.
Danger	Wipe device (factory reset) behind a confirmation.

Every policy is a toggle that writes policies.<key> to the device document; see Policies Reference for exactly what each one does.

Super-admin view

The account defined as isSuperAdmin in firestore.rules (currently yybambi23@gmail.com) gets an extra Admin button, which exposes:

• A read-only view of all devices (not just owned)
• The audit log (who did what, when)
• Enrollment-token / device-inventory management — pre-register devices by IMEI and issue/renew/revoke tokens (see Enrollment and Provisioning)

Audit log

Admin actions (login, lock, wipe, policy changes, renames, command cancels, lockdown) are written to audit_logs with the actor's email, the device, details, and a timestamp. Only the super-admin can read them.

Notes

• Changes are live — toggling a policy writes to Firestore and the device applies it within a second if online, or on next reconnect if offline.
• If a toggle shows a "Missing or insufficient permissions" error, the security rules aren't current — see Security Rules and Troubleshooting.