Configuring application control policies
When you add a BlackBerry® Java® Application to a software configuration so that you can install the application on BlackBerry devices, you must specify an application control policy that you want to apply to the BlackBerry Java Application. Application control policies control the data and APIs that BlackBerry Java Applications can access on BlackBerry devices, and the external data sources and network connections that BlackBerry Java Applications can access.
The BlackBerry Administration Service includes a standard application control policy for BlackBerry Java Applications that you classify as required, optional, or not permitted. You can change the default settings of the standard application control policies or create custom application control policies for a BlackBerry Java Application.
For more information about configuring settings for application control policy rules, visit www.blackberry.com/go/serverdocs to see the BlackBerry Enterprise Server Policy Reference Guide.
Standard application control policies
The BlackBerry® Enterprise Server includes the following standard application control policies.
Application control policy |
Description |
---|---|
Standard Required |
When you apply the application control policy to a BlackBerry® Java® Application, rule settings require that the BlackBerry Java Application be installed and permitted to run on BlackBerry devices. BlackBerry devices install the application automatically. |
Standard Optional |
When you apply the application control policy to a BlackBerry Java Application, rule settings make the BlackBerry Java Application optional on the BlackBerry device. Users can install and run the BlackBerry Java Application on their BlackBerry devices. |
Standard Disallowed |
When you apply the application control policy to a BlackBerry Java Application, rule settings prevent users from installing the BlackBerry Java Application on BlackBerry devices. Users cannot install and run the BlackBerry Java Application on their BlackBerry devices. |
Change a standard application control policy
- In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Software > Applications.
- Click Manage default application control policies.
- Click the standard application control policy that you want to change.
- Click Edit application control policy.
- On the Access settings tab, in the Settings section, change the settings for the standard application control policy.
- Click Save all.
Create custom application control policies for a BlackBerry Java Application
If you add the BlackBerry Java Application to multiple software configurations and you assign different custom application control policies to the BlackBerry Java Application in the different software configurations, you must set the priority for the custom application control policies. This priority determines which custom application control policy the BlackBerry Policy Service applies if you assign multiple software configurations to a user account.
IT policy rules take precedence on the device
IT policy rule settings override application control policy rule settings. For example, if you change the Allow Internal Connections IT policy rule to No for BlackBerry® devices, and if the devices have an application control policy set that allows a specific application to make internal connections, the application cannot make internal connections.
The device revokes an application control policy and resets if the permissions of the application it is applied to become more restrictive. On supported devices, users can make application permissions more restrictive than what the BlackBerry® Enterprise Server administrator sets but users cannot make the permissions less restrictive.