Activation types:

Android

devices

This activation type maintains privacy for personal data but lets you manage work data using commands and IT policy rules. This activation type creates a work profile on the device that separates work and personal data. Work and personal data are both protected using encryption and password authentication.

To allow

Google Play

app management for

Android Enterprise

devices, select

Add Google Play to the workspace

. This setting is enabled by default. If the device does not have access to

Google Play

, then this setting must be deselected and the

BlackBerry UEM

Enroll app must be used from a secondary device during the activation process.

To enable

BlackBerry Secure Connect Plus

and

Knox Platform for Enterprise

support, you must select the

When activating Android Enterprise devices, enable premium UEM functionality such as BlackBerry Secure Connect Plus

option.

Users do not have to grant Administrator permissions to the

BlackBerry UEM Client

.

This activation type lets you manage the entire device using commands and IT policy rules. This activation type creates a work profile on the device that separates work and personal data. Data in the work space is protected using encryption and a method of authentication such as a password, PIN, pattern, or fingerprint. This activation type supports the logging of device activity (SMS, MMS, and phone calls) in

BlackBerry UEM

log files (if it runs

Android

10 or earlier).

To allow

Google Play

app management for

Android Enterprise

devices, select

Add Google Play account to the work space

. This setting is enabled by default. If the device does not have access to

Google Play

, then this setting must be deselected.

Following activation,

Work and personal - full control

devices have only a limited set of the standard pre-installed apps, such as Camera, Phone, and Settings, in the personal space. The list of retained pre-installed apps depends on the device vendor and OS version. 

To enable

BlackBerry Secure Connect Plus

and

Knox Platform for Enterprise

support, you must select the

When activating Android Enterprise devices, enable premium UEM functionality such as BlackBerry Secure Connect Plus

option.

To specify whether

BlackBerry UEM

can limit activation by device ID, select

Allow only approved device IDs

.

This activation type requires the device to be reset to factory default settings before activating. If the

BlackBerry UEM Client

is deleted or the work profile is removed from the device, it is automatically reset to factory default settings.

During activation users must grant Administrator permissions to the

BlackBerry UEM Client

.

This activation type lets you manage the entire device using commands and IT policy rules. This activation type requires the user to reset the device to factory settings before activating. The activation process installs a work profile and no personal profile. The user must create a password to access the device. All data on the device is protected using encryption and a method of authentication such as a password.

To allow

Google Play

app management for

Android Enterprise

devices, select

Add Google Play to the workspace

. This setting is enabled by default. If the device does not have access to

Google Play

, then this setting must be deselected and the

BlackBerry UEM

Enroll app must be used from a secondary device during the activation process.

During activation, the device installs the

BlackBerry UEM Client

automatically and grants it Administrator permissions. Users cannot revoke the Administrator permissions or uninstall the app.

Following activation,

Work space only

devices have only a limited set of the standard pre-installed apps, such as Camera, Phone, and Settings, plus any apps you have assigned with a required disposition. The list of retained pre-installed apps depends on the device vendor and OS version. 

To enable

BlackBerry Secure Connect Plus

and

Knox Platform for Enterprise

support, you must select the

When activating Android Enterprise devices, enable premium UEM functionality such as BlackBerry Secure Connect Plus

option.

To specify whether

BlackBerry UEM

can limit activation by device ID, select

Allow only approved device IDs

.

This activation type requires the device to be reset to factory default settings before activating. If the

BlackBerry UEM Client

is deleted or the work profile is removed from the device, it is automatically reset to factory default settings.

This activation type lets you manage the device using commands and IT policy rules. A separate work space is not created on the device, and there is no added security for work data.

If the device supports

Knox

MDM, this activation type applies the

Knox

MDM IT policy rules. If you do not want to apply

Knox

MDM policy rules, clear the

Activate Samsung KNOX on Samsung devices that have the MDM controls activation type assigned

check box.

During activation, users must grant Administrator permissions to the

BlackBerry UEM Client

.

You can use the

User privacy

activation type to provide basic control of devices, including work app management, while making sure that users' personal data remains private. With this activation type, no separate container is installed on the device. To provide security for work data you can install

BlackBerry Dynamics

apps. Devices activated with

User privacy

can use services such as Find my Phone and Root Detection, but administrators cannot control device policies.

You can also use the

User privacy

activation type to activate

Chrome

OS devices to allow you to install and manage

Android

BlackBerry Dynamics

apps.

This activation type supports the

BlackBerry 2FA

solution for devices that

BlackBerry UEM

does not manage. This activation type does not provide any device management or controls, but allows devices to use the

BlackBerry 2FA

feature. To use this activation type, you must also assign the

BlackBerry 2FA

profile to users.

When a device is activated, you can view limited device information in the management console, and you can deactivate the device using a command.

This activation type is supported only for

Microsoft Active Directory

users.

For more information, see the BlackBerry 2FA content.

This activation type maintains privacy for personal data, but lets you manage work data using commands and IT policy rules. This activation type does not support the

Knox

MDM IT policy rules. This activation type creates a separate work space on the device and the user must create a password to access the work space. Data in the work space is protected using encryption and a method of authentication such as a password, PIN, pattern, or fingerprint. The user must also create a Screen lock password to protect the entire device and will not be able to use USB debugging mode.

During activation, users must grant Administrator permissions to the

BlackBerry UEM Client

.

This activation type lets you manage the entire device using commands and the

Knox

MDM and

Knox Workspace

IT policy rules. This activation type creates a separate work space on the device and the user must create a password to access the work space. Data in the work space is protected using encryption and a method of authentication such as a password, PIN, pattern, or fingerprint. This activation type supports the logging of device activity (SMS, MMS, and phone calls) in

BlackBerry UEM

log files (if it runs Android 11 or earlier).

During activation users must grant Administrator permissions to the

BlackBerry UEM Client

.

This activation type lets you manage the entire device using commands and the

Knox

MDM and

Knox Workspace

IT policy rules. This activation type removes the personal space and installs a work space. The user must create a password to access the device. All data on the device is protected using encryption and a method of authentication such as a password, PIN, pattern, or fingerprint. This activation type supports the logging of device activity (SMS, MMS, and phone calls) in

BlackBerry UEM

log files.

During activation, users must grant Administrator permissions to the

BlackBerry UEM Client

.