The app removal protection feature helps ensure that the system does not remove business-critical applications unless approved by the admin.

What can you do with the Application Removal Protection Settings page?

With the App Restrictions Settings page, you can
  • Set up a connection to your own external app repository server.
  • Host internal applications on your network with an external application repository and manage the applications with the Workspace ONE UEM.
Internal applications are often developed to perform enterprise-specific tasks. Their abrupt removal can cause user frustration and halt work. To prevent the removal of important internal applications, the feature holds removal commands according to entered threshold values. Until an admin acts on the held commands, the system does not remove internal applications.

Determine your Organization group hierarchy

Before you review and modify the settings, understand the two types of inheritance/override options for the organization group hierarchy available at the top and bottom of the settings page and determine your choice. For more information about these settings, see Override Versus Inherit Setting for Organization Groups.
  • Current Setting - Select whether to Inherit or Override the displayed settings. Inherit means use the settings of the current organization group's parent OG, while Override enables the settings for editing so you can modify the current OG's settings directly.
  • Child Permission - Select the available behavior of child organization groups that exist below the currently selected organization group. Inherit only means child OGs are only allowed to inherit these settings. Override only means they override the settings, and Inherit or Override means you can choose to inherit or override settings in child OGs that exist below the currently selected OG.
Note: Application removal protection is only available for Customer type organization groups and cannot be overridden at the child organization levels.
Setting Description
Devices Affected

Enter the maximum amount of devices that can loose a critical application before the loss hinders the work of the enterprise.

Within (minutes) Enter the maximum amount of minutes that the system sends removal commands before the loss of a critical application hinders devices from performing business tasks.
Email Template Select an email notification template and make customizations. The system includes the App Remove Limit Reached Notification template, which is specific to app removal protection.
Send Email to Enter email addresses to receive notifications about held removal commands so that the recipients can take actions in the app removal log.