Profiles reference

Activation

Specifies the device activation settings for users, such as the activation type and the number and types of devices.

All devices

Ranked

Allows devices to access

BlackBerry Dynamics

apps such as

BlackBerry Work

,

BlackBerry Access

, and

BlackBerry Connect

.

Ranked

App lock mode

Specify a single app to run on devices.

Supervised

iOS

devices

Samsung Knox

devices activated with MDM

Windows 10

Education and

Windows 10

Enterprise devices

Ranked

Enterprise Management Agent

Specifies when devices connect to

BlackBerry UEM

for app or configuration updates when a push notification is not available.

Ranked

Compliance

Defines the device conditions that are not acceptable in your organization and sets enforcement actions.

All devices

Ranked

Compliance (

BlackBerry Dynamics

)

This is a read-only profile that displays the compliance settings that were imported from

Good Control

into an on-premises

BlackBerry UEM

.

N/A

Device SR requirements

Defines the software release versions that devices must have installed.

Ranked

Email

Specifies how devices connect to a work mail server and synchronize email messages, calendar entries, and organizer data using Exchange ActiveSync or IBM Notes Traveler.

All devices

Ranked

IMAP/POP3 email

Specifies how devices connect to an IMAP or POP3 mail server, and how to synchronize email messages.

Not ranked

Gatekeeping

Specifies the

Microsoft Exchange

servers to use for automatic gatekeeping.

All devices

Ranked

CalDAV

Specifies the server settings that devices can use to synchronize calendar information.

Not ranked

CardDAV

Specifies the server settings that devices can use to synchronize contact information.

Not ranked

Specifies how devices connect to a work Wi-Fi network.

All devices

Not ranked

VPN

Specifies how devices connect to a work VPN.

All devices

Not ranked

Proxy

Specifies how devices use a proxy server to access web services on the Internet or a work network.

Ranked

Enterprise connectivity

Specifies how devices can connect to your organization’s resources using enterprise connectivity. For

iOS

,

Android Enterprise

, and

Samsung Knox Workspace

  devices, the enterprise connectivity profile specifies whether devices can use

BlackBerry Secure Connect Plus

.

Ranked

BlackBerry Dynamics

connectivity

Defines the network connections, Internet domains, IP address ranges, and app servers that devices can connect to when using

BlackBerry Dynamics

apps.

Ranked

Enables two-factor authentication for users and specifies the configuration of the preauthentication and self-rescue features.

Ranked

Network usage

Allows you to control whether work apps on

iOS

devices can use the mobile network or data roaming.

Ranked

Web content filter

Limits the websites that a user can view on supervised iOS devices.

Supervised

iOS

devices

Not ranked

Single sign-on

Specifies how devices authenticate with secure domains automatically after users type their username and password for the first time.

Ranked

Single sign-on extension

Allows devices running

iOS

(or iPadOS) 13 and later to authenticate using single sign-on.

Not ranked

Managed domains

Configures

iOS

devices to notify users about sending email outside of trusted domains and restricts the apps that can view documents downloaded from internal domains.

Not ranked

AirPrint

Allows you to add printers to users' AirPrint printer lists.

Not ranked

AirPlay

Allows you to add devices to users' AirPlay device lists.

Not ranked

Access Point Name

Allows you to specify APNs for devices to use to connect to carriers.

Not ranked

Windows

Information Protection

Specifies the

Windows

Information Protection setting in

Windows 10

.

Ranked

Microsoft Intune

app protection

Allows you to manage apps protected by

Microsoft Intune

.

Not ranked

Location service

Allows you to request the location of devices and view the approximate locations on a map.

Ranked

Do not disturb

Allows you to block

BlackBerry Work for Android

and

BlackBerry Work for iOS

notifications during off-work days and hours that you define.

Ranked

Device

Allows you to configure the information that displays on devices.

Ranked

Custom payload

Specifies custom configuration information using payload code for devices.

Not ranked

Per-app notification

Allows you to configure the notification settings for system apps and apps that you manage using

BlackBerry UEM

.

Supervised

iOS

devices running

Ranked

CA certificate

Specifies a CA certificate that devices can use to establish trust with a work network or server.

All devices

Not ranked

Shared certificate

Specifies a client certificate that devices can use to authenticate users with a work network or server.

Not ranked

User credential

Specifies the CA connection that devices use to obtain a client certificate that is used to authenticate with a work network or server.

Not ranked

SCEP

Specifies the SCEP server that devices use to obtain a client certificate that is used to authenticate with a work network or server.

All devices

Not ranked

CRL

Specifies the CRL configurations that

BlackBerry UEM

can use to check the status of certificates.

BlackBerry

devices powered by

Android

Ranked

Certificate mapping profile

Specifies which client certificates apps must use

Ranked