Skip Navigation

Create a device SR requirements profile for 
Android Enterprise
 devices

OS update rules apply only to 
Work space only
 and 
Work and personal - full control
 devices. App update rules apply to all 
Android Enterprise
 devices. For more information on setting rules for 
Samsung Knox
 devices that use E-FOTA, see Create a device SR requirements profile for Samsung Knox devices.
  1. On the menu bar, click 
    Policies and Profiles
    .
  2. Click 
    Compliance > Device SR requirements
  3. Click  The Add icon .
  4. Type a name and description for the profile.
  5. Click the 
    Android
     tab.
  6. For 
    Work space only
     and 
    Work and personal - full control
     devices, perform the following steps to set rules for OS updates:
    1. In the 
      OS update rule
       table, click  .
    2. In the 
      Device model
       drop-down list, select a device model.
    3. In the 
      OS version
       drop-down list, select the installed OS version.
    4. In the 
      Update rule
       drop-down list, select one of the following options:
      • Select 
        Default
         to allow the user to choose when to install updates.
      • Select 
        Update automatically
         to install updates without prompting the user.
      • Select 
        Update automatically between
         to install updates between the times you specify without prompting the user. The user can choose to install updates outside of this window.
      • Select 
        Postpone up to 30 days
         to block installation of updates for 30 days. After 30 days, the user can choose when to install an update. Depending on the device manufacturer and wireless service provider, security updates might not be postponed.
    5. When you are done, click 
      Add
      .
    6. Repeat step 6 for each rule that you want to add.
    Rules set for 
    Samsung Knox
     devices that use E-FOTA take precedence over these rules.
  7. For 
    Work space only
     and 
    Work and personal - full control
     devices, if you want to specify time periods when OS updates should not occur, perform the following steps:
    1. In the 
      Suspend OS updates
       table, click  .
    2. In the 
      Start month
       drop-down list, select the month that the suspension period starts.
    3. In the 
      Start day
       drop-down list, select the day that the suspension period starts.
    4. In the 
      Duration
       drop-down list, select the length of the suspension.
      The suspension can't exceed 90 days. If you specify more than one suspension period, there must be at least 60 days between periods.
      These settings don't apply to 
      Samsung Knox
       devices that use E-FOTA.
  8. To specify an update period for apps that are running in the foreground, select 
    Enable update period for apps that are running in the foreground
    , and set the following options:
    • Start time (local device time)
      : Specifies the time when apps will start to update.
    • Duration
      : Specifies the number of hours that you will allow apps to be updated.
  9. To specify how 
    Google Play
     applies the changes to apps running in the foreground, select App auto update policy. Select one of the following options:
    • User can allow
      : The user is prompted to allow the apps to update on the device. Note that this is the default setting if you don't select the App auto update policy option
    • Always
      : The apps will always update. Note that for an app that is always running, such as 
      BlackBerry UEM Client
      BlackBerry Work
      , or 
      BlackBerry Connectivity
      , if you don't select the Enable update period for apps that are running in the foreground option, the app will not update until the user manually updates the app on the device.
    • Wi-Fi only
      : The apps will update only when the device is connected to a Wi-Fi network. Note that for an app that is always running, such as 
      BlackBerry UEM Client
      BlackBerry Work
      , or 
      BlackBerry Connectivity
      , if you don't select the 
      Enable update period for apps that are running in the foreground
       option, the app will not update until the user manually updates the app on the device.
    • Disable
      : The apps will never update.
      This profile affects the Auto-Update Apps setting in 
      Google Play
      . If you select 
      Always
      Wi-Fi only
      , or 
      Disable
      , the user cannot select a different option on the device. For example, if you select 
      Disable
       in the profile, the user cannot enable an app to update on the device. However, users can still manually update apps in 
      Google Play
      .
  10. Click 
    Add
    .
If necessary, rank profiles.