Managing devices with IT policies

You can use IT policies to manage the security and behavior of devices in your organization. An IT policy is a set of rules that control features and functionality on devices. You can configure rules for all device types in the same IT policy. The device OS determines the list of features that can be controlled using IT policies and the device activation type determines which rules in an IT policy apply to a specific device. Devices ignore rules in an IT policy that to not apply to them.

BlackBerry UEM

includes a Default IT policy with preconfigured rules for each device type. If no IT policy is assigned to a user account, a user group that a user belongs to, or a device group that a user's devices belong to,

BlackBerry UEM

sends the Default IT policy to a user's devices.

BlackBerry UEM

automatically sends an IT policy to a device when a user activates it, when you update an assigned IT policy, or when a different IT policy is assigned to a user account or device.

BlackBerry UEM

on-premises synchronizes daily with the

BlackBerry Infrastructure

over port 3101 to determine whether any updated IT policy information is available. In If updated IT policy information is available,

BlackBerry UEM

retrieves it and, by default, stores the updates in the

BlackBerry UEM

database. Administrators with the "View IT policies" and "Create and edit IT policies" permissions are notified about the update when they log in. If your organization's security policy does not allow automatic updates, you can turn off the automatic updates and import updates into

BlackBerry UEM

manually. for more information, see Importing IT policy and device metadata updates.

Updated IT policy information is applied automatically in

UEM Cloud

instances.

For more information about the IT policy rules for each device type, download the Policy Reference Spreadsheet.