Activation types: 

Android

 devices

This activation type maintains privacy for personal data but lets you manage work data using commands and IT policy rules. This activation type creates a work profile on the device that separates work and personal data. Work and personal data are both protected using encryption and password authentication. 

To allow 

Google Play

 app management for 

Android Enterprise

 devices, select 

Add Google Play to the workspace

. This setting is enabled by default. If the device does not have access to 

Google Play

, then this setting must be deselected and the 

BlackBerry UEM

 Enroll app must be used from a secondary device during the activation process.

To enable 

BlackBerry Secure Connect Plus

 and 

Knox Platform for Enterprise

 support, you must select the 

When activating Android Enterprise devices, enable premium UEM functionality such as BlackBerry Secure Connect Plus

 option.

Users do not have to grant Administrator permissions to the 

BlackBerry UEM Client

.

This activation type lets you manage the entire device using commands and IT policy rules. This activation type creates a work profile on the device that separates work and personal data. Data in the work space is protected using encryption and a method of authentication such as a password, PIN, pattern, or fingerprint. This activation type supports the logging of device activity (SMS, MMS, and phone calls) in 

BlackBerry UEM

 log files.

To allow 

Google Play

 app management for 

Android Enterprise

 devices, select 

Add Google Play account to the work space

. This setting is enabled by default. If the device does not have access to 

Google Play

, then this setting must be deselected and the 

BlackBerry UEM

 Enroll app must be used from a secondary device during the activation process.

Following activation, 

Work and personal - full control

 devices have only a limited set of the standard pre-installed apps, such as Camera, Phone, and Settings, in the personal space. The list of retained pre-installed apps depends on the device vendor and OS version.  

To enable 

BlackBerry Secure Connect Plus

 and 

Knox Platform for Enterprise

 support, you must select the 

When activating Android Enterprise devices, enable premium UEM functionality such as BlackBerry Secure Connect Plus

 option.

To specify whether 

BlackBerry UEM

 can limit activation by device ID, select 

Allow only approved device IDs

.

This activation type requires the device to be reset to factory default settings before activating. If the 

BlackBerry UEM Client

 is deleted or the work profile is removed from the device, it is automatically reset to factory default settings.

During activation users must grant Administrator permissions to the 

BlackBerry UEM Client

.

This activation type is supported only for 

Android

 8.0 and later.

This activation type lets you manage the entire device using commands and IT policy rules. This activation type requires the user to reset the device to factory settings before activating. The activation process installs a work profile and no personal profile. The user must create a password to access the device. All data on the device is protected using encryption and a method of authentication such as a password.

To allow 

Google Play

 app management for 

Android Enterprise

 devices, select 

Add Google Play to the workspace

. This setting is enabled by default. If the device does not have access to 

Google Play

, then this setting must be deselected and the 

BlackBerry UEM

 Enroll app must be used from a secondary device during the activation process.

During activation, the device installs the 

BlackBerry UEM Client

 automatically and grants it Administrator permissions. Users cannot revoke the Administrator permissions or uninstall the app.

Following activation, 

Work space only

 devices have only a limited set of the standard pre-installed apps, such as Camera, Phone, and Settings, plus any apps you have assigned with a required disposition. The list of retained pre-installed apps depends on the device vendor and OS version.  

To enable 

BlackBerry Secure Connect Plus

 and 

Knox Platform for Enterprise

 support, you must select the 

When activating Android Enterprise devices, enable premium UEM functionality such as BlackBerry Secure Connect Plus

 option.

To specify whether 

BlackBerry UEM

 can limit activation by device ID, select 

Allow only approved device IDs

.

This activation type requires the device to be reset to factory default settings before activating. If the 

BlackBerry UEM Client

 is deleted or the work profile is removed from the device, it is automatically reset to factory default settings.

This activation type lets you manage the device using commands and IT policy rules. A separate work space is not created on the device, and there is no added security for work data.

If the device supports 

Knox

 MDM, this activation type applies the 

Knox

 MDM IT policy rules. If you do not want to apply 

Knox

 MDM policy rules, clear the 

Activate Samsung KNOX on Samsung devices that have the MDM controls activation type assigned

 check box.

During activation, users must grant Administrator permissions to the 

BlackBerry UEM Client

.

You can use the 

User privacy

 activation type to provide basic control of devices, including work app management, while making sure that users' personal data remains private. With this activation type, no separate container is installed on the device. To provide security for work data you can install 

BlackBerry Dynamics

 apps. Devices activated with 

User privacy

 can use services such as Find my Phone and Root Detection, but administrators cannot control device policies.

You can also use the 

User privacy

 activation type to activate 

Chrome

 OS devices to allow you to install and manage 

Android

BlackBerry Dynamics

 apps.

This activation type supports the 

BlackBerry 2FA

 solution for devices that 

BlackBerry UEM

 does not manage. This activation type does not provide any device management or controls, but allows devices to use the 

BlackBerry 2FA

 feature. To use this activation type, you must also assign the 

BlackBerry 2FA

 profile to users.

When a device is activated, you can view limited device information in the management console, and you can deactivate the device using a command.

This activation type is supported only for 

Microsoft Active Directory

 users.

For more information, see the BlackBerry 2FA content.

This activation type maintains privacy for personal data, but lets you manage work data using commands and IT policy rules. This activation type does not support the 

Knox

 MDM IT policy rules. This activation type creates a separate work space on the device and the user must create a password to access the work space. Data in the work space is protected using encryption and a method of authentication such as a password, PIN, pattern, or fingerprint. The user must also create a Screen lock password to protect the entire device and will not be able to use USB debugging mode.

During activation, users must grant Administrator permissions to the 

BlackBerry UEM Client

.

This activation type lets you manage the entire device using commands and the 

Knox

 MDM and 

Knox Workspace

 IT policy rules. This activation type creates a separate work space on the device and the user must create a password to access the work space. Data in the work space is protected using encryption and a method of authentication such as a password, PIN, pattern, or fingerprint. This activation type supports the logging of device activity (SMS, MMS, and phone calls) in 

BlackBerry UEM

 log files.

During activation users must grant Administrator permissions to the 

BlackBerry UEM Client

.

This activation type lets you manage the entire device using commands and the 

Knox

 MDM and 

Knox Workspace

 IT policy rules. This activation type removes the personal space and installs a work space. The user must create a password to access the device. All data on the device is protected using encryption and a method of authentication such as a password, PIN, pattern, or fingerprint. This activation type supports the logging of device activity (SMS, MMS, and phone calls) in 

BlackBerry UEM

 log files.

During activation, users must grant Administrator permissions to the 

BlackBerry UEM Client

.