Profiles reference

Activation

Specifies the device activation settings for users, such as the activation type and the number and types of devices.

All devices

Ranked

Allows devices to access 

BlackBerry Dynamics

 apps such as 

BlackBerry Work

, 

BlackBerry Access

, and 

BlackBerry Connect

.

Ranked

App lock mode

Specify a single app to run on devices.

Supervised 

iOS

 devices

Samsung Knox

 devices activated with MDM

Windows 10

 Education and 

Windows 10

 Enterprise devices

Ranked

Enterprise Management Agent

Specifies when devices connect to 

BlackBerry UEM

 for app or configuration updates when a push notification is not available.

Ranked

Compliance

Defines the device conditions that are not acceptable in your organization and sets enforcement actions.

All devices

Ranked

Compliance (

BlackBerry Dynamics

)

This is a read-only profile that displays the compliance settings that were imported from 

Good Control

into an on-premises 

BlackBerry UEM

.

N/A

Device SR requirements

Defines the software release versions that devices must have installed.

Ranked

Email

Specifies how devices connect to a work mail server and synchronize email messages, calendar entries, and organizer data using Exchange ActiveSync or IBM Notes Traveler.

All devices

Ranked

IMAP/POP3 email

Specifies how devices connect to an IMAP or POP3 mail server, and how to synchronize email messages.

Not ranked

Gatekeeping

Specifies the 

Microsoft Exchange

 servers to use for automatic gatekeeping.

All devices

Ranked

CalDAV

Specifies the server settings that devices can use to synchronize calendar information.

Not ranked

CardDAV

Specifies the server settings that devices can use to synchronize contact information.

Not ranked

Specifies how devices connect to a work Wi-Fi network.

All devices

Not ranked

VPN

Specifies how devices connect to a work VPN.

All devices

Not ranked

Proxy

Specifies how devices use a proxy server to access web services on the Internet or a work network.

Ranked

Enterprise connectivity

Specifies how devices can connect to your organization’s resources using enterprise connectivity. Enterprise connectivity is always enabled for 

BlackBerry 10

 devices. For 

iOS

, 

Android Enterprise

, 

Samsung Knox Workspace

, and 

BlackBerry 10

 devices, the enterprise connectivity profile specifies whether devices can use 

BlackBerry Secure Connect Plus

.

Ranked

BlackBerry Dynamics

 connectivity

Defines the network connections, Internet domains, IP address ranges, and app servers that devices can connect to when using 

BlackBerry Dynamics

 apps.

Ranked

Enables two-factor authentication for users and specifies the configuration of the preauthentication and self-rescue features.

Ranked

Network usage

Allows you to control whether work apps on 

iOS

 devices can use the mobile network or data roaming.

Ranked

Web content filter

Limits the websites that a user can view on supervised iOS devices.

Supervised 

iOS

 devices

Not ranked

Single sign-on

Specifies how devices authenticate with secure domains automatically after users type their username and password for the first time.

Ranked

Managed domains

Configures 

iOS

 devices to notify users about sending email outside of trusted domains and restricts the apps that can view documents downloaded from internal domains.

Not ranked

AirPrint

Allows you to add printers to users' AirPrint printer lists.

Not ranked

AirPlay

Allows you to add devices to users' AirPlay device lists.

Not ranked

Access Point Name

Allows you to specify APNs for devices to use to connect to carriers.

Not ranked

Single sign-on extension

Allows devices running 

iOS

 (or iPadOS) 13 and later to authenticate using single sign-on.

Not ranked

Windows

 Information Protection

Specifies the 

Windows

 Information Protection setting in 

Windows 10

.

Ranked

Microsoft Intune

 app protection 

Allows you to manage apps protected by 

Microsoft Intune

.

Not ranked

Location service

Allows you to request the location of devices and view the approximate locations on a map.

Ranked

Do not disturb

Allows you to block 

BlackBerry Work for Android

 and 

BlackBerry Work for iOS

 notifications during off-work days and hours that you define.

Ranked

Device

Allows you to configure the information that displays on devices.

Ranked

Custom payload

Specifies custom configuration information using payload code for devices.

Not ranked

Per-app notification

Allows you to configure the notification settings for system apps and apps that you manage using 

BlackBerry UEM

.

Supervised 

iOS

 devices running 

Ranked

CA certificate

Specifies a CA certificate that devices can use to establish trust with a work network or server.

All devices

Not ranked

Shared certificate

Specifies a client certificate that devices can use to authenticate users with a work network or server.

Not ranked

User credential

Specifies the CA connection that devices use to obtain a client certificate that is used to authenticate with a work network or server.

Not ranked

SCEP

Specifies the SCEP server that devices use to obtain a client certificate that is used to authenticate with a work network or server.

All devices

Not ranked

Certificate retrieval

Specifies how devices retrieve certificates from LDAP servers.

Ranked

OCSP

Specifies the OCSP responders that 

BlackBerry 10

 devices can use to check the status of certificates.

Ranked

CRL

Specifies the CRL configurations that 

BlackBerry UEM

 can use to check the status of certificates.

BlackBerry

 devices powered by 

Android

Ranked

Certificate mapping profile

Specifies which client certificates apps must use

Ranked