Skip Navigation

Common: Compliance profile settings

For each compliance rule that you select on the device tabs, choose the action that you want 
BlackBerry UEM
 to perform if a user's device is non-compliant.
Common: Compliance profile setting
Description 
Enforcement action
This setting specifies the action that 
BlackBerry UEM
 takes on devices that are not compliant.
Possible values:
  • Prompt for compliance
  • Untrust: On 
    iOS
    macOS
    Android
    , and 
    Windows
     devices, this option prevents the user from accessing work resources and applications from the device. Data and apps are not deleted from the device.
    Untrust is not supported for 
    BlackBerry Dynamics
     apps.
    On 
    iOS
     devices, the work email account is removed from the native email app. Users must restore the email account settings to the app after the device returns to compliance.
  • Quarantine: On 
    BlackBerry 10
     devices, this option prevents the user from accessing work resources and applications from the device. Data and applications are not deleted from the device.
  • Delete only work data
  • Delete all data
  • Remove from server: On 
    BlackBerry 10
    iOS
    Android
    , and 
    Windows
     devices, a device can be deactivated from 
    BlackBerry UEM
     if it violates the "Out of contact" rule.
  • None: Enables a compliance violation to be identified but no action taken.
The default value is "Prompt for compliance."
On devices activated with "
Work and personal - user privacy
," you cannot delete all data on a user's device. If you select, "Delete all data" 
BlackBerry UEM
 performs the same action as "Delete only work data."
For 
Samsung KNOX Workspace
 devices that only have a work space, if you select "Delete only work data," "Delete all data," or "Remove from server," all data will be deleted from the device.
For supervised iOS 9.3.2 and later devices, enforcement actions for the "Restricted app is installed" rule are not applicable. Users are automatically prevented from installing restricted apps.
Prompt method
The possible values are:
  • Both
  • Email notification
  • Device notification
The default value is "Both." 
This setting is valid only if the "Enforcement action" is set to "Prompt for compliance."
Device notifications are not supported on 
Windows 10
 devices.
Prompt count
The number of times the user is prompted to correct the breach.
The default value is "3."
This setting is valid only if the "Enforcement action" is set to "Prompt for compliance."
Prompt interval
The amount of time between prompts, in minutes, hours, or days.
The default value is "4 hours."
This setting is valid only if the "Enforcement action" is set to "Prompt for compliance."
Prompt interval expired action
This setting defines what happens when the user has received the total number of prompts as defined in Prompt count, and the does not correct the breach.
Possible values:
  • None
  • Untrust: On 
    iOS
    macOS
    Android
    , and 
    Windows
     devices, this option prevents the user from accessing work resources and applications from the device. Data and applications are not deleted from the device.
    Untrust is not supported for 
    BlackBerry Dynamics
     apps. Use an alternate enforcement action.
  • Quarantine: On 
    BlackBerry 10
     devices, this option prevents the user from accessing work resources and applications from the device. Data and applications are not deleted from the device.
  • Delete only work data
  • Delete all data
The default value is "Untrust."
This setting is valid only if the "Enforcement action" is set to "Prompt for compliance".
Enforcement action for 
BlackBerry Dynamics
 apps
This setting defines what happens with 
BlackBerry Dynamics
 apps when a device is not in compliance.
Possible values:
  • Delete 
    BlackBerry Dynamics
     app data
  • Do not allow 
    BlackBerry Dynamics
     apps to run
The default value is "Delete 
BlackBerry Dynamics
  app data."