Skip Navigation

Configure compliance actions to take when a sideloaded app is detected

When a sideloaded app is detected on a user’s device,
UEM
considers the device to be out of compliance. You can configure and assign a compliance profile to users so that
UEM
can take the appropriate action. For more information about creating and configuring compliance profiles, see Enforcing compliance rules for devices in the
UEM
Administration content.
When you first implement sideload detection, it is recommended to use the monitor and log option before you implement actions that are potentially more disruptive. After monitoring compliance activity for an appropriate amount of time, you can then implement the desired actions (for example, preventing users from using
BlackBerry Dynamics
apps until the device is compliant).
  1. In the management console, on the menu bar, click
    Policies and profiles > Compliance > Compliance
    .
  2. Create a new compliance profile or select and edit an existing compliance profile.
  3. Select the
    iOS
    or
    Android
    tab to configure sideload detection for that platform.
  4. In the
    BlackBerry Protect
    section, select the
    Sideloaded app is installed
    check box.
  5. Configure the prompt settings (behavior, method, count, and interval) as desired.
  6. In the
    Enforcement action for device
    drop-down list, choose one of the following:
    • To log information about the compliance issue without taking a compliance action, click
      Monitor and log
      .
    • To prevent the user from accessing work resources and apps on the device while it is out of compliance, click
      Untrust
      . Note that this option does not impact
      BlackBerry Dynamics
      apps. Data and apps are not deleted from the device.
  7. In the
    Enforcement action for BlackBerry Dynamics apps
    drop-down list, choose one of the following options:
    • To log information about the compliance issue without taking a compliance action for
      BlackBerry Dynamics
      apps, click
      Monitor and log
      .
    • To prevent the user from accessing
      BlackBerry Dynamics
      apps while the device is out of compliance, click
      Do not allow BlackBerry Dynamics apps to run
      .
  8. If necessary, repeat steps 3 to 7 to configure compliance actions for the remaining OS platform.
  9. Click
    Save
    .
  • Assign the profile to users and groups.
  • Optionally, configure event notifications so that when a sideloaded app is detected on a user’s device, administrators receive an email notification that identifies the user, sideloaded apps, and trusted developers on the device. If the sideloaded apps on the device change (for example, an app is removed from the device or added to the approved apps list)
    UEM
    sends another notification.
  • In the management console, you can view information about compliance violations on the Managed devices screen (filter by compliance violations) or in a user's device details.