Blackberry PRD-10459-003 Administration Guide - Page 124

Administration Guide Application control policies for unlisted applications Task Steps d. Repeat steps a to c for each application control policy that you want to create. Create an application control policy for BlackBerry Java Applications that are not permitted. a. In the Disallowed application name field, type a name for the application control policy. b. Click the Add icon. 9. If necessary, in each section, click the up and down arrows to set the priority for the application control policies. 10. Click Save all. IT policy rules take precedence on the device IT policy rule settings override application control policy rule settings. For example, if you change the Allow Internal Connections IT policy rule to No for BlackBerry® devices, and if the devices have an application control policy set that allows a specific application to make internal connections, the application cannot make internal connections. The device revokes an application control policy and resets if the permissions of the application it is applied to become more restrictive. On supported devices, users can make application permissions more restrictive than what the BlackBerry® Enterprise Server administrator sets but users cannot make the permissions less restrictive. Application control policies for unlisted applications When you create a software configuration and assign it to user accounts so that you can send BlackBerry® Device Software, BlackBerry Java® Applications, and standard application settings to BlackBerry devices, you must configure whether the software configuration permits users to install and use applications that are not included in the software configuration (also known as unlisted applications). When you configure whether unlisted applications are permitted and optional or not permitted on BlackBerry devices, you must assign an application control policy for unlisted applications to the software configuration. An application control policy for unlisted applications determines what unlisted applications are permitted on BlackBerry devices and what data the unlisted applications can access on BlackBerry devices. The BlackBerry Administration Service has two standard application control policies for unlisted applications: one for unlisted applications that are optional, and one for unlisted applications that are not permitted. You can change the default settings of the standard application control policy for unlisted applications that are optional, or you can create custom application control policies for unlisted applications that are optional. For more information about the rule settings in application control policies for unlisted applications, see the BlackBerry Enterprise Server Policy Reference Guide. 122