This document outlines the Asana policy for consulting and staffing vendors (external partners) purchasing and onboarding laptops for resources working on Asana projects. Asana strongly recommends the use of Chromebooks for external partners. However, if the work being completed cannot be done on a ChromeOS device, the following steps outline the process for utilizing Apple Mac computers. Windows devices are prohibited from use by external partners unless specifically approved by the Head of Asana IT.  All vendors are required to supply devices, per the guidelines below, for resources working outside of the United States.

Laptop Standards

Chromebooks (ChromeOS)

Chromebook specifications should meet the following minimum requirements:

• Intel i7 Processor

• 16GB memory

MacBooks

• Engineering and Design Roles

• MacBook specifications should meet the following minimum requirements:

• Processor M series (no more than three generations back from current M series chipset)

• 32GB memory

• Other Roles

• MacBook specifications should meet the following minimum requirements:

• Processor M series (no more than three generations back from current M series chipset)

• 16GB memory

Options for Device Provisioning and Deployment

• If the employee/resource is located within the United States, Asana IT can send a managed device. Asana IT requires a minimum of one week notice for delivery.

• If the employee/resource is located outside of the United States, the following steps can be taken for the vendor to purchase a device locally for deployment:

  • The vendor will need to set up a partnership with an Authorized Apple Reseller (AAR) and share Asana’s ABM Organization ID with them, while sharing the Reseller’s number with Asana IT to add to our instance.

  • Purchase a blank device through the AAR to be linked to Asana's Apple Business Manager instance via our Organization ID.

  • Once the steps above have been completed, a confirmation acknowledgement needs to be established between the vendor and the Asana DRI to validate the enrollment of the purchased device and track to whom the device is currently assigned.

Requirements for "Blank" Devices

Asana requires a macOS device to have the bare minimum:

• Encryption

• EDR Tool

• Backup Service

• Ability to be tracked/managed

Our General Onboarding sets up all of the above and can be kicked off by authenticating with Jamf Connect at the Login Window of the device. The device needs to be factory new or wiped before going through this process.

Project Completion and Deprovisioning Vendor Hardware

When a vendor-purchased device is finished being used for Asana purposes, Asana IT can release the device from Asana's Apple Business Manager instance. The vendor can then repurpose the device as they see fit. In these instances, the Asana DRI should follow the standard internal offboarding process to alert Asana's IT team to release the device.

Deprovisioning and Returning an Asana Owned Device

If an Asana-owned device was provisioned and the vendor resource relationship has ended or the device is no longer needed, the Asana DRI should submit a request to recover the asset back to Asana HQ.

NOTE: If a device is deprovisioned from Asana’s Apple Business Manager instance, the vendor will need to reestablish a connection with the reseller prior to redeployment. For this reason, it is recommended to keep a stock of devices to be deployed with Asana, if there are plans to continue the partnership.

FAQ

• How do we confirm the device is enrolled properly in the ABM account?

  • Confirmation can be established by the Asana DRI and Asana IT to validate the vendor device is properly enrolled in the correct MDM.   Additionally, when the device is factory restored, during the setup process it will note the device is linked to Asana’s instance.

• If there are questions or concerns related to IT, who can the vendor contact?

  • For any IT-related questions, please reach out to your Asana contact, who can follow up internally with the Asana IT team.

• How can I find an Authorized Apple Reseller?

  • If you need to find a local Authorized Apple Reseller, you can use Apple's website to find one in your area.   https://locate.apple.com/

• If the contracted work is completed, but the device is still associated with Asana's account, how do I have this removed?

  • If the relationship between the vendor and Asana has concluded, and the device has not been removed from Asana's management, you can contact your Asana DRI, who can then follow up directly with the Asana IT team to remove the device.