iOS

and

iPadOS

: Compliance profile settings

This setting creates a compliance rule to ensure that devices are not jailbroken. A device is jailbroken when a user or attacker bypasses various restrictions on a device to modify the OS.

If you select this setting, users cannot complete new activations on a jailbroken device, regardless of the enforcement action that you set.

This setting creates a compliance rule to ensure that devices do not have apps installed that were not assigned to the user.

This setting does not apply to devices with the

User privacy

activation type.

This setting creates a compliance rule to ensure that devices have required apps installed.

This setting creates a compliance rule to ensure that devices do not have a restricted OS version installed. You can select the restricted OS versions.

If you select this setting, users cannot complete new activations for devices that are not compliant, regardless of the enforcement action that you set.

This setting creates a compliance rule to restrict device models. You can select the devices models that are allowed or restricted.

If you select this setting, users cannot complete new activations for devices that are not compliant, regardless of the enforcement action that you set.

This setting creates a compliance rule to ensure that devices are not out of contact with

UEM

for more than a specified amount of time. You specify the number days that a device can be out of contact with

UEM

before it is considered out of compliance.

This setting creates a compliance rule that allows you to select the

BlackBerry Dynamics

library versions that cannot be activated. You can select the blocked library versions.

This setting creates a compliance rule to monitor whether

BlackBerry Dynamics

apps are out of contact with

UEM

for more than a specified amount of time. The enforcement action is applied to

BlackBerry Dynamics

apps.

The "Base connectivity interval on authentication delegate apps" setting specifies that the connectivity verification is based on when an authentication delegate app connects to

UEM

. This setting applies only if an authentication delegate is specified in a

BlackBerry Dynamics

profile.

The "Last contact time" setting specifies the number days a device can be out of contact with

UEM

before the device is considered out of compliance.

BlackBerry Dynamics

apps don’t prompt users for compliance for this rule. If you set the “Prompt behavior” setting to “Prompt for compliance”, the user is not prompted. If the device is able to contact

UEM

, the device returns to compliance when the user opens the

BlackBerry Dynamics

app.

This setting creates a compliance rule that reacts to screen captures of

BlackBerry Dynamics

apps on devices.

The "Maximum number of screen captures within period" setting specifies the number of allowed screen captures within a specified time period.

The "Enforcement action for BlackBerry Dynamics apps" setting specifies the action that occurs if the user exceeds the allowed number of screen captures.

This setting creates a compliance rule for

UEM

to periodically check for restricted apps. Add apps to the restricted apps list in the profile by selecting the apps from the UEM restricted app list or by selecting a built-in app (supervised devices only).

When you select this setting and a restricted app is installed on a device, a warning message and a link is displayed in the Managed devices screen in the console. When you click the link, a list of apps that are putting the device out of compliance is displayed. The list of restricted apps is also sent to the user in the compliance notification.

For supervised devices, enforcement actions for this rule are not applicable. Users are automatically prevented from installing restricted apps. If restricted apps (either built-in or installed by the user) are already installed, those apps are automatically removed from the device.

This setting creates a compliance rule that specifies a list of apps that can be installed on devices. All other apps are not allowed. Add apps to the allowed apps list in the profile by selecting apps from the UEM app list or by selecting built-in apps. Some apps are included in the allowed list by default.

This setting is valid only for supervised devices.