User guide
Method Description
Apply one IT policy to the user account The BlackBerry Enterprise Server applies one of the group IT policies to the user
account. You specify rankings for the available IT policies using the BlackBerry
Administration Service and the BlackBerry Enterprise Server applies the IT
policy with the highest ranking.
If you upgrade to BlackBerry Enterprise Server 5.0 SP2 or later from a previous
version of the BlackBerry Enterprise Server, this is the default method for
resolving IT policy conflicts.
Apply multiple IT policies to the user
account
The BlackBerry Enterprise Server applies all of the group IT policies to the user
account, resulting in a combined IT policy that has a unique ID. The BlackBerry
Enterprise Server resolves conflicting IT policy rules using the ranking of the
available IT policies that you specified using the BlackBerry Administration
Service
. If an IT policy rule is different in the multiple IT policies, the BlackBerry
Enterprise Server
applies the rule setting from the IT policy that you ranked the
highest.
If you install BlackBerry Enterprise Server 5.0 SP2 or later, this is the default
method for resolving IT policy conflicts.
Reconciliation rules for conflicting IT policies when you apply one IT
policy to the user account
The BlackBerry Enterprise Server can apply only one IT policy to a user account. Since you can assign IT policies to user
accounts, groups, or the
BlackBerry Domain, the BlackBerry Administration Service uses predefined rules to determine
which IT policy it can apply to a user account.
The BlackBerry Administration Service might have to reconcile conflicting IT policies if you perform any of the following
actions:
• add an IT policy to or remove an IT policy from a user account or group
• change an IT policy
• change the ranking of IT policies
• delete an IT policy
Scenario Rule
You add a new user account to a BlackBerry Enterprise
Server. You do not assign an IT policy directly to the user
account and you do not add the user to a group.
The IT policy that you assigned to the BlackBerry Domain,
or the Default IT policy that is assigned to the BlackBerry
Domain, is assigned to the user account.
You assign an IT policy to a user account and a different IT
policy to a group that the user account belongs to.
The IT policy that you assign to a user account takes
precedence over an IT policy that you assign to a group. An
IT policy that you assign to a group takes precedence over
the IT policy that you assign to the BlackBerry Domain (or
the Default IT policy).
Security Technical Overview Managing BlackBerry Enterprise Solution security
39