IT policy rules take precedence on the device

IT policy rule settings override application control policy rule settings. For example, if you change the Allow Internal Connections IT policy rule to No for BlackBerry devices, and if the devices have an application control policy set that allows a specific application to make internal connections, the application cannot make internal connections.

The device revokes an application control policy and resets if the permissions of the application it is applied to become more restrictive. On supported devices, users can make application permissions more restrictive than what the BlackBerry Enterprise Server administrator sets but users cannot make the permissions less restrictive.