User guide

For more information about using IT policy rules, visit www.blackberry.com/go/serverdocs to see the BlackBerry Enterprise

Server Policy Reference Guide.

Specifying the resources that applications

can access on a device

You can specify which applications a BlackBerry device user can download and install on a BlackBerry device and the

resources on the device that the applications can access. If you control the applications that a user can install and limit the

resources that the applications can access, you can help protect the device from malware. You can also help prevent

damage to the device, applications, device data, and your organization’s network.

You can use application control policy rules and code signing to control the resources that applications can access on

devices and to help prevent malware on devices.

For more information about helping to prevent malware on devices, see Protecting Devices From Malware.

Using application control policy rules to control the

resources that applications can access on a

smartphone

You can use application control policy rules to specify whether users can install applications on BlackBerry smartphones

and to specify the permissions for applications.

You can use application control policy rules to specify whether applications can access the following resources on

smartphones:

• Data or applications (for example, Messages application, phone)

• Smartphone key store

• Network connections

• Near field communications

• Secure element

• Smartphone settings

• Security timer

• BlackBerry APIs (for example, GPS API, User Authenticator API, Module Management API)

When you assign an application control policy to a software configuration and assign the software configuration to user

accounts or groups, users might not be able to use all of the features of the applications that are included in the software

configuration. For example, if you set the "Are External Network Connections Allowed" application control policy rule to

Security Technical Overview Controlling applications on a device

162