Compliance policy rules vary for different platforms.

Compliance Policy Rules by Platform

The Add Compliance Policy page is platform-based so you see only the compliance policy rules and actions that apply to your device.

Use the following table to determine which rules are available to deploy to your devices.

Compliance Policy Android Apple iOS Apple macOS QNX Windows Rugged Windows Desktop Windows 7
Application List ✓ ✓ ✓
Antivirus Status ✓
Automatic Updates ✓
Cell Data Usage ✓ ✓
Compliance Attribute
Compromised Status ✓ ✓ ✓
Copy of Windows ✓
Device Last Seen ✓ ✓ ✓ ✓ ✓ ✓ ✓
Device Manufacturer ✓
Device Environment Status ✓
OMA DM Client Last Seen ✓
Encryption ✓ ✓ ✓ ✓ ✓
Firewall Status ✓
Free Disk Space ✓
iBeacon Area ✓
Interactive Certificate Profile Expiry ✓ ✓
Last Compromised Scan ✓ ✓
MDM Terms of Use Acceptance ✓ ✓ ✓ ✓ ✓ ✓
Model ✓ ✓ ✓
OS Version ✓ ✓ ✓ ✓ ✓
Passcode ✓ ✓ ✓ ✓
Roaming * ✓ ✓ ✓
Roaming Cell Data Usage * ✓ ✓
Security Patch Version ✓
SIM Card Change * ✓ ✓
System Integrity Protection ✓
Note: * Only available for Telecom Advanced Users.

Configure Telecom Rules for SAFE Devices

Samsung SAFE devices use a dedicated profile deployed to the device from Workspace ONE UEM to set data limits and other settings.

Although Samsung offers their own plan limits for SAFE devices, use the standard plan management feature to enforce plan limits with compliance policies.

Configure an Android profile to specify Samsung SAFE settings.
  1. From the UEM console, navigate to Resources > Profiles & Baselines > Profiles > Add > Add Profile.
  2. Select Android.
  3. Configure the General settings for the profile to specify how the profile gets deployed and which devices receive it.
  4. Select the Restrictions payload and select Configure.
  5. Scroll down to Maximum Data Usage and select Add. Use the drop-down menus that appear to configure the following settings.
    • Frequency - Restrict data usage by Day, Week, or Month.
    • Size - Restrict data usage by kilobytes, megabytes, or gigabytes.
    • Maximum - Enter the amount of data the end user may not exceed.
  6. Scroll down to Call & SMS Limit and select Add Use the drop-down menus that appear to configure the following settings.
    • Direction – Indicate whether this is for Outgoing or Incoming calls/SMS.
    • Type – Indicate whether this is for Calls or SMS.
    • Frequency – Indicate whether to restrict by the Day, Week or Month.
    • Maximum – Indicate the maximum call/SMS limit allowed.
  7. Scroll down to Call Restriction and select Add. Use the drop-down menus that appear to configure the following settings.
    • Direction – Indicate whether this is for Outgoing or Incoming calls/SMS.
    • Restriction – Indicate the action to perform when a particular number that you identify calls or sends a text.
  8. Select Add and configure more telecom restrictions for any of these settings in the same manner, if required.
  9. Select Save to add the profile to Workspace ONE UEM or Save & Publish to add the profile and immediately deploy it to applicable Samsung SAFE devices.

When configured limits for a SAFE device are reached, admins can set a restriction to silently deactivate SMS, calls, and data features. This helps to enforce plan limits within compliance policies so that overages do no occur.

Important: The functionality discussed in this section is only available to Telecom Advanced users. If you are a Telecom Foundational user, you will not see these features. Discuss the best Telecom management solution for your organization by contacting VMware Support.

Create Network Usage Rules

Network usage rules help you to control the applications that can access data based on the network connection type or roaming status of device. These rules help you to manage data charges when employees are using their devices.

Use granular controls to apply different rules to different apps as needed.

This feature is applicable only for iOS 9 platform.
  1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add Profile.
  2. Select Apple iOS.
  3. Configure the profile's General settings.

    These settings determine how the profile is deployed and who receives it. For more information on General settings, refer to the VMware Workspace ONE UEM Mobile Device Management Guide.

  4. Select the Network Usage Rules payload from the list.
  5. Add or select the public, internal, or purchased applications.
  6. Choose to Allow Cellular Data and Data Usage on Roaming. Both options are selected by default.
  7. Select Save & Publish.