Enforcement Configuration
Use enforcements to define actions to take when devices or work profiles fall out of compliance. Each rule specifies a policy type to monitor and the progressive enforcement actions to take.
When multiple rules are triggered, the most severe action is applied.
This configuration can be set at the organization, site, or group level. If a configuration exists at multiple levels, devices will use the configuration at the lowest hierarchical level they belong to (group > site > org). If a device belongs to multiple groups, it will use the configuration that was most recently applied. For more information, see The Liminal EMM Hierarchy.
|
Setting Name |
|
|---|---|
|
appAutoUpdatePolicy |
Enforces rules related to how applications are updated on the device. These policies are set through app configurations. For more information, see Creating App Configurations. |
|
encryptionPolicy |
Enforces rules related to device storage encryption requirements. These policies are set during provisioning and through restrictions configurations. For more information, see Restrictions Configuration. |
|
installType |
Enforces rules when managing specific application installations within the applications list. These policies are set through app configurations. For more information, see Creating App Configurations. |
|
locationMode |
Enforces rules related to location services settings and permissions. These policies are set through restrictions configurations. For more information, see Restrictions Configuration. |
|
passwordPolicies |
Enforces rules related to password complexity, length, and other password requirements. These policies are set through password configurations. For more information, see Password Configuration. |
|
permittedAccessibilityServices |
Enforces rules related to allowed accessibility service applications. These policies are set through restrictions configurations. For more information, see Restrictions Configuration. |
|
permittedInputMethods |
Enforces rules related to allowed keyboard and input method applications. These policies are set through restrictions configurations. For more information, see Restrictions Configuration. |
|
Block Action |
|
|---|---|
|
Block after days |
Number of days of non-compliance before blocking access. |
|
Block scope |
Scope of the block action. |
|
Wipe Action |
|
|---|---|
|
Wipe after days |
Number of days of non-compliance before wiping the device/profile. |
|
Preserve factory reset protection |
Whether to preserve factory reset protection data when wiping. |