Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.17
  3. Administration
  4. Managing device features
  5. Enforcing compliance rules for devices
  6. Compliance profile settings
  7. Common: Compliance profile settings

Common: Compliance profile settings

iOS
,
iPadOS
, and
Android
 devices

For each compliance rule that you select on the device tabs, choose the action that you want
BlackBerry UEM
 to perform if a user's device is not compliant.
Common: Compliance profile setting
Description
Prompt behavior
This setting specifies whether
BlackBerry UEM
 prompts the user to correct a compliance issue and gives the user time to fix the issue before taking action, or whether
BlackBerry UEM
 takes immediate action.
Possible values:
  • Prompt for compliance
  • Immediate enforcement action
Prompt method
This setting specifies how
BlackBerry UEM
 prompts the user to correct a compliance issue.
Possible values
  • Device notification
  • Email and device notification
BlackBerry Dynamics
 apps don’t send email notifications to users.
BlackBerry Dynamics
 apps provide only device notifications, regardless of this setting.
For compliance rules that apply to the device, the default value is "Email and device notification." For compliance rules that apply only to
BlackBerry Dynamics
 apps, the default value is "Device notification."
This setting is valid only if "Prompt behavior" is set to "Prompt for compliance."
Prompt count
This setting specifies the number of times the user is prompted to correct a compliance issue.
The default value is "3."
This setting is valid only if "Prompt behavior" is set to "Prompt for compliance."
Prompt interval
This setting specifies the amount of time between prompts, in minutes, hours, or days.
The default value is "4 hours."
This setting is valid only if "Prompt behavior" is set to "Prompt for compliance."
Enforcement action for device
This setting specifies the action that
BlackBerry UEM
 takes on devices that are not compliant.
Possible values:
  • Monitor and log:
    BlackBerry UEM
     identifies the compliance violation but takes no enforcement action on the device.
  • Untrust: On
    iOS
    ,
    iPadOS
    ,
    macOS
    ,
    Android
    , and
    Windows
     devices, this option prevents the user from accessing work resources and applications from the device. Data and apps are not deleted from the device.
    On
    iOS
     and
    iPadOS
     devices, the work email account is removed from the native email app. Users must restore the email account settings to the app after the device returns to compliance.
  • Delete only work data
  • Delete all data
  • Remove from server: On
    iOS
    ,
    iPadOS
    ,
    Android
    , and
    Windows
     devices, a device can be deactivated from
    BlackBerry UEM
     if it violates the "Out of contact" rule.
The default value is "Monitor and log."
This setting is not valid for devices activated with
User privacy
.
On devices activated with "
Work and personal - user privacy
," you cannot delete all data on a user's device. If you select, "Delete all data"
BlackBerry UEM
 performs the same action as "Delete only work data."
For
Samsung Knox Workspace
 devices that have only a work space, if you select "Delete only work data," "Delete all data," or "Remove from server," all data will be deleted from the device.
For supervised
iOS
 and
iPadOS
 devices, enforcement actions for the "Restricted app is installed" rule are not applicable. Users are automatically prevented from installing restricted apps.
Enforcement action for
BlackBerry Dynamics
 apps
This setting defines what happens with
BlackBerry Dynamics
 apps when a device is not in compliance.
Possible values:
  • Do not allow
    BlackBerry Dynamics
     apps to run
  • Delete
    BlackBerry Dynamics
     app data
  • Monitor and log:
    BlackBerry UEM
     identifies the compliance violation but takes no enforcement action
The default value is "Monitor and log."

Windows 10
 and
macOS
 devices

For each compliance rule that you select on the device tabs, choose the action that you want
BlackBerry UEM
 to perform if a user's device is not compliant.
Common: Compliance profile setting
Description
Enforcement action
This setting specifies the action that
BlackBerry UEM
 takes on devices that are not compliant.
Possible values:
  • Prompt for compliance
  • Untrust: On
    Windows
     devices, this option prevents the user from accessing work resources and applications from the device. Data and apps are not deleted from the device.
    Untrust is not supported for
    BlackBerry Dynamics
     apps.
  • Delete only work data
  • Delete all data
  • Remove from server: On
    Windows
     devices, a device can be deactivated from
    BlackBerry UEM
     if it violates the "Out of contact" rule.
  • None: Identifies a compliance violation but takes no action.
The default value is "Prompt for compliance."
Prompt method
The possible values are:
  • Email notification
  • Device notification
  • Both
The default value is "Both."
This setting is valid only if the "Enforcement action" is set to "Prompt for compliance."
Device notifications are not supported on
Windows 10
 devices.
Prompt count
This setting specifies the number of times the user is prompted to correct the breach.
The default value is "3."
This setting is valid only if the "Enforcement action" is set to "Prompt for compliance."
Prompt interval
This setting specifies the amount of time between prompts, in minutes, hours, or days.
The default value is "4 hours."
This setting is valid only if the "Enforcement action" is set to "Prompt for compliance."
Prompt interval expired action
This setting defines what happens when the user has received the total number of prompts as defined in Prompt count, and the does not correct the breach.
Possible values:
  • None
  • Untrust: On
    Windows
     devices, this option prevents the user from accessing work resources and applications from the device. Data and applications are not deleted from the device.
    Untrust is not supported for
    BlackBerry Dynamics
     apps. Use an alternate enforcement action.
  • Delete only work data
  • Delete all data
The default value is "Untrust."
This setting is valid only if the "Enforcement action" is set to "Prompt for compliance".
Enforcement action for
BlackBerry Dynamics
 apps
This setting defines what happens with
BlackBerry Dynamics
 apps when a device is not in compliance.
Possible values:
  • Delete
    BlackBerry Dynamics
     app data
  • Do not allow
    BlackBerry Dynamics
     apps to run
The default value is "Delete
BlackBerry Dynamics
  app data."