Key

BlackBerry UEM

features

BlackBerry UEM Self-Service

reduces support requests and lowers IT costs for your organization while giving users the option to manage their devices in a timely manner. Using

BlackBerry UEM Self-Service

, users can perform tasks like activating or switching devices, changing their device passwords remotely, deleting device data, or lock their lost or stolen devices, and address other critical support requirements.

You can integrate

BlackBerry UEM

with

BlackBerry Workspaces

,

BlackBerry Enterprise Identity

, and

BlackBerry 2FA

that allow you to add value to your organization's

BlackBerry UEM

instance.

BlackBerry UEM

is a comprehensive app management platform for all devices. You can deploy apps from all major app stores, including

App Store

,

Google Play

,

Windows Store

, and

BlackBerry World

storefront.

You can share administrative duties with multiple administrators who can access the administration consoles at the same time. You can use roles to define the actions that an administrator can perform and reduce security risks, distribute job responsibilities, and increase efficiency by limiting the options available to each administrator. You can use predefined roles or create your own custom roles.

You can use local, built-in user authentication to access the management console and self-service console, or you can integrate with the

Microsoft Active Directory

or LDAP company directories that you use in your organization's environment (for example,

IBM Domino

Directory).

BlackBerry UEM

supports connections to multiple directories. You can have any combination of both

Microsoft Active Directory

and LDAP.

You can also configure

BlackBerry UEM

to automatically synchronize the membership of a directory-linked group to its associated company directory groups when the scheduled synchronization occurs.

When you configure the settings for directory-linked groups, you can select offboarding protection. Offboarding protection requires two consecutive synchronization cycles before device data or user accounts are deleted from

BlackBerry UEM

. This feature helps to prevent unexpected deletions that can occur because of latency in directory replication.

To integrate

BlackBerry UEM Cloud

with your company directory you must install the

BlackBerry Connectivity Node

. You can install one or more instances of the

BlackBerry Connectivity Node

.

You can migrate users, devices, groups, and other data from an on-premises

BlackBerry UEM

source database to a new on-premises or

BlackBerry UEM Cloud

instance.

If you have configured

BlackBerry UEM

to manage Google Play accounts can migrate

Android Enterprise

devices from an on-premises

BlackBerry UEM

server to

BlackBerry UEM Cloud

or another on-premises

BlackBerry UEM

server.

You can migrate

BlackBerry Dynamics

users from on-premises

BlackBerry UEM

(version 12.13 or later) to a

BlackBerry UEM Cloud

.

Cisco Identity Services Engine

(ISE) is network administration software that gives an organization the ability to control whether devices can access the work network (for example, permitting or denying

Wi-Fi

or VPN connections). You can create a connection between

Cisco ISE

and

BlackBerry UEM

on-premises so that

Cisco ISE

can retrieve data about the devices that are activated on

BlackBerry UEM

.

Cisco ISE

checks device data to determine whether devices comply with your organization’s access policies.

You can set up regional connections for enterprise connectivity features by deploying one or more

BlackBerry Connectivity Node

instances in a dedicated region. This is known as a server group. Each

BlackBerry Connectivity Node

includes

BlackBerry Secure Connect Plus

, the

BlackBerry Gatekeeping Service

, the

BlackBerry Secure Gateway

,

BlackBerry Proxy

, and the

BlackBerry Cloud Connector

. You can associate enterprise connectivity and email profiles with a server group so that any users who are assigned those profiles use a specific regional connection to the

BlackBerry Infrastructure

when using

BlackBerry Connectivity Node

components. Deploying more than one

BlackBerry Connectivity Node

in a server group also allows for high availability and load balancing.

You can activate and manage certain

Android

-based, head-worn wearable devices in

BlackBerry UEM

. For example, you can manage

Vuzix M300 Smart Glasses

. Smart glasses provide users with hands-free access to visual information such as notifications, step-by-step instructions, images, and video and allow users to issue voice commands, scan bar-codes and use GPS navigation. Examples of

BlackBerry UEM

management capabilities that are supported include: Device activation using QR code, IT policies,

Wi-Fi

and VPN profiles, app management and location services.

For

iOS

and

Android

devices, if you want to protect data in

Microsoft Office 365

apps using the MAM features of

Microsoft Intune

, you can use Intune to protect app data while using

BlackBerry UEM

to manage the devices.

Intune

provides security features that protect data within apps. For example,

Intune

can require that data within apps be encrypted and prevent copying and pasting, printing, and using the Save as command. You can connect

UEM

to

Intune

, allowing you to manage Intune app protection policies from within the

UEM

management console.