Managing devices with IT policies
You can use IT policies to manage the security and behavior of devices in your organization. An IT policy is a set of rules that control features and functionality on devices. You can configure rules for all device types in the same IT policy. The device OS determines the list of features that can be controlled using IT policies and the device activation type determines which rules in an IT policy apply to a specific device. Devices ignore rules in an IT policy that to not apply to them.
BlackBerry UEMincludes a Default IT policy with preconfigured rules for each device type. If no IT policy is assigned to a user account, a user group that a user belongs to, or a device group that a user's devices belong to,
BlackBerry UEMsends the Default IT policy to a user's devices.
BlackBerry UEMautomatically sends an IT policy to a device when a user activates it, when you update an assigned IT policy, or when a different IT policy is assigned to a user account or device.
BlackBerry UEMon-premises synchronizes daily with the
BlackBerry Infrastructureover port 3101 to determine whether any updated IT policy information is available. In If updated IT policy information is available,
BlackBerry UEMretrieves it and, by default, stores the updates in the
BlackBerry UEMdatabase. Administrators with the "View IT policies" and "Create and edit IT policies" permissions are notified about the update when they log in. If your organization's security policy does not allow automatic updates, you can turn off the automatic updates and import updates into
BlackBerry UEMmanually. for more information, see Importing IT policy and device metadata updates.
Updated IT policy information is applied automatically in
For more information about the IT policy rules for each device type, download the Policy Reference Spreadsheet.