Administration Guide

Local Navigation

Configuring application control policies

When you add a BlackBerry® Java® Application to a software configuration so that you can install the application on BlackBerry devices, you must specify an application control policy that you want to apply to the BlackBerry Java Application. Application control policies control the data and APIs that BlackBerry Java Applications can access on BlackBerry devices, and the external data sources and network connections that BlackBerry Java Applications can access.

The BlackBerry Administration Service includes a standard application control policy for BlackBerry Java Applications that you classify as required, optional, or not permitted. You can change the default settings of the standard application control policies or create custom application control policies for a BlackBerry Java Application.

For more information about configuring settings for application control policy rules, visit www.blackberry.com/go/serverdocs to see the BlackBerry Enterprise Server Express Policy Reference Guide.

Standard application control policies

The BlackBerry® Enterprise Server Express includes the following standard application control policies.

Application control policy

Description

Standard Required

When you apply the application control policy to a BlackBerry® Java® Application, rule settings require that the BlackBerry Java Application be installed and permitted to run on BlackBerry devices. BlackBerry devices install the application automatically.

Standard Optional

When you apply the application control policy to a BlackBerry Java Application, rule settings make the BlackBerry Java Application optional on the BlackBerry device. Users can install and run the BlackBerry Java Application on their BlackBerry devices.

Standard Disallowed

When you apply the application control policy to a BlackBerry Java Application, rule settings prevent users from installing the BlackBerry Java Application on BlackBerry devices. Users cannot install and run the BlackBerry Java Application on their BlackBerry devices.

Change a standard application control policy

When you add a BlackBerry® Java® Application to a software configuration, you must assign an application control policy to the BlackBerry Java Application. Based on the requirements of your organization's environment, you can change the default settings for the standard application control policies.
  1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Software > Applications.
  2. Click Manage default application control policies.
  3. Click the standard application control policy that you want to change.
  4. Click Edit application control policy.
  5. On the Access settings tab, in the Settings section, change the settings for the standard application control policy.
  6. Click Save all.

Create custom application control policies for a BlackBerry Java Application

After you add a BlackBerry® Java® Application to the application repository, you can configure the application to use the standard application control policies, or you can create custom application control policies for the application. If you want a BlackBerry Java Application to use custom application control policies, you must create the custom application control policies before you add the application to a software configuration. When you add the application to a software configuration, you can select which custom application control policy you want to apply to the application.

If you add the BlackBerry Java Application to multiple software configurations and you assign different custom application control policies to the BlackBerry Java Application in the different software configurations, you must set the priority for the custom application control policies. This priority determines which custom application control policy the BlackBerry Policy Service applies if you assign multiple software configurations to a user account.

  1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Software > Applications.
  2. Click Manage applications.
  3. Search for a BlackBerry Java Application.
  4. In the search results, click a BlackBerry Java Application.
  5. In the Application versions section, click the version of the application that you want to create a custom application control policy for.
  6. Click Edit application.
  7. On the Application control policies tab, in the Settings section, select the Use custom application control policies option.
  8. Perform any of the following tasks:

    Task

    Steps

    Create an application control policy for required BlackBerry Java Applications.

    1. In the Required application name field, type a name for the application control policy.
    2. In the Settings section, configure the settings for the application control policy.
    3. Click the Add icon.
    4. Repeat steps a to c for each application control policy that you want to create.

    Create an application control policy for optional BlackBerry Java Applications.

    1. In the Optional application name field, type a name for the application control policy.
    2. In the Settings section, configure the settings for the application control policy.
    3. Click the Add icon.
    4. Repeat steps a to c for each application control policy that you want to create.

    Create an application control policy for BlackBerry Java Applications that are not permitted.

    1. In the Disallowed application name field, type a name for the application control policy.
    2. Click the Add icon.
  9. If necessary, in each section, click the up and down arrows to set the priority for the application control policies.
  10. Click Save all.

IT policy rules take precedence on the device

IT policy rule settings override application control policy rule settings. For example, if you change the Allow Internal Connections IT policy rule to No for BlackBerry® devices, and if the devices have an application control policy set that allows a specific application to make internal connections, the application cannot make internal connections.

The device revokes an application control policy and resets if the permissions of the application it is applied to become more restrictive. On supported devices, users can make application permissions more restrictive than what the BlackBerry® Enterprise Server Express administrator sets but users cannot make the permissions less restrictive.


Was this information helpful? Send us your comments.