Skip Navigation

Create a device SR requirements profile for
Android Enterprise
devices

OS update rules apply only to
Work space only
and
Work and personal - full control
devices. App update rules apply to all
Android Enterprise
devices. For more information on setting rules for
Samsung Knox
devices that use E-FOTA, see Create a device SR requirements profile for Samsung Knox devices.
Samsung
E-FOTA reached end of service on July 31, 2022. For more information see the information from Samsung. For information about migrating to Samsung E-FOTA One, visit support.blackberry.com to read article 69901.
  1. On the menu bar, click
    Policies and Profiles
    .
  2. Click
    Compliance > Device SR requirements
  3. Click The Add icon.
  4. Type a name and description for the profile.
  5. Click the
    Android
    tab.
  6. For
    Work space only
    and
    Work and personal - full control
    devices, perform the following steps to set rules for OS updates:
    1. In the
      OS update rule
      table, click The Add icon.
    2. In the
      Device model
      drop-down list, select a device model.
    3. In the
      OS version
      drop-down list, select the installed OS version.
    4. In the
      Update rule
      drop-down list, select one of the following options. Note that on devices activated with Work space only (Android Enterprise fully managed device), users cannot choose when to install updates.
      • Select
        Default
        to allow the user to choose when to install updates.
      • Select
        Update automatically
        to install updates without prompting the user.
      • Select
        Update automatically between
        to install updates between the times you specify without prompting the user. The user can choose to install updates outside of this window.
      • Select
        Postpone up to 30 days
        to block installation of updates for 30 days. After 30 days, the user can choose when to install an update. Depending on the device manufacturer and wireless service provider, security updates might not be postponed.
    5. When you are done, click
      Add
      .
    6. Repeat step 6 for each rule that you want to add.
    Rules set for
    Samsung Knox
    devices that use E-FOTA take precedence over these rules.
  7. For
    Work space only
    and
    Work and personal - full control
    devices, if you want to specify time periods when OS updates should not occur, perform the following steps:
    1. In the
      Suspend OS updates
      table, click The Add icon.
    2. In the
      Start month
      drop-down list, select the month that the suspension period starts.
    3. In the
      Start day
      drop-down list, select the day that the suspension period starts.
    4. In the
      Duration
      drop-down list, select the length of the suspension.
      The suspension can't exceed 90 days. If you specify more than one suspension period, there must be at least 60 days between periods.
      These settings don't apply to
      Samsung Knox
      devices that use E-FOTA.
  8. To specify an update period for apps that are running in the foreground, select
    Enable update period for apps that are running in the foreground
    , and set the following options:
    • Start time (local device time)
      : Specifies the time when apps will start to update.
    • Duration
      : Specifies the number of hours that you will allow apps to be updated.
  9. To specify how
    Google Play
    applies the changes to apps running in the foreground, select App auto update policy. Select one of the following options:
    • User can allow
      : The user is prompted to allow the apps to update on the device. Note that this is the default setting if you don't select the App auto update policy option
    • Always
      : The apps will always update. Note that for an app that is always running, such as
      BlackBerry UEM Client
      ,
      BlackBerry Work
      , or
      BlackBerry Connectivity
      , if you don't select the
      Enable update period for apps that are running in the foreground
      option, the app will not update until the user manually updates the app on the device.
    • Wi-Fi only
      : The apps will update only when the device is connected to a Wi-Fi network. Note that for an app that is always running, such as
      BlackBerry UEM Client
      ,
      BlackBerry Work
      , or
      BlackBerry Connectivity
      , if you don't select the
      Enable update period for apps that are running in the foreground
      option, the app will not update until the user manually updates the app on the device.
    • Disable
      : The apps will never update.
      This profile affects the Auto-Update Apps setting in
      Google Play
      . If you select
      Always
      ,
      Wi-Fi only
      , or
      Disable
      , the user cannot select a different option on the device. For example, if you select
      Disable
      in the profile, the user cannot enable an app to update on the device. However, users can still manually update apps in
      Google Play
      .
  10. Click
    Add
    .
If necessary, rank profiles.