A policy profile is a collection of settings that can be applied as a policy. A master profile is a collection of policy profiles. This provides an easy way to secure multiple apps within your organization with the same policies in one easy step. For example, if you want to apply the the same BlackBerry Dynamics settings and enable BlackBerry AppConfig for several apps, you can save those profiles as one master profile, then apply the master profile to each of your apps.
Master profiles cannot include signing profiles.
Creating and configuring master policy profiles
There are two paths to create master policy profiles in the Blue Cedar platform:
- From the App details page, create and enable a selection of individual policies, and save that set as a master profile. Select the checkbox next to Save as master profile and enter a profile name in the text box.
- On the Master Policy details page, create or edit a master profile, then enable and select individual policies. (Get to the Master Policy details page from Policies > Master Policy or from Apps > iOS or Android, click on an app, then click the settings gear on the Master panel.)
See Managing and using policy profiles for general information about managing policy profiles.
To create a master policy, create a master policy profile composed of individual policies. Enable the individual policies and associated profiles.
- Click Policies > Master Policy. The Policy details page appears, where you can create a new master profile or edit an existing profile.
- On the Policy details page, click + Master Profile to create a new profile, or click the pencil icon next to an existing profile to edit it.
- On the Profile details page, enter the Profile name and description.
- Enable the individual policies that you want to use, and choose the profile for each one.
Some policies do not have configuration options via Blue Cedar and thus do not need policy profiles, but you can enable them in the master policy.
- When you are done configuring the Master profile, click Save changes. This profile is now available to use with any app.
Applying a master policy
- Click Apps, then Android or iOS, then the app you want to secure. The App details screen appears.
- Under Select a master policy, click the triangle to expand the Master panel.
- Select "Enable Master policy." Enabling the Master policy disables the individual policies listed below "Policies to apply."
- Choose the Master Profile from the menu.
- You can choose a signing profile when you apply the policy on the App details page, but this option is not part of the Master profile.
- Click Apply Policies.
Duplicating and exporting master policies
Although most profile actions work the same way for master policies as for individual policies, there are a few details to notice.
When duplicating a master profile, the new copy does not copy the individual profiles. Instead, it includes references to the same individual policies as the original master profile. If you edit a BlackBerry Dynamics SDK policy profile, the changes show up in any master profile that uses the same BlackBerry Dynamics SDK policy profile.
When exporting a master profile, the downloaded zip file includes copies of each of the individual profiles as well as the master profile JSON.
When importing a master profile, the master profile and included profiles are named with Imported Profile and a timestamp to avoid duplicating any profile names already used on the policy console.