# Policy Management

## Policy Management <a href="#policy-management" id="policy-management"></a>

### How do I create a policy? <a href="#how-do-i-create-a-policy" id="how-do-i-create-a-policy"></a>

1. Select *EMM Console* tab. This opens to the *Policies* tab below by default.
2. Click *New Policy*.
3. Select a profile for the policy based on business needs: Managed Devices, Work Devices, or Dedicated Devices.

<figure><img src="/files/mkvOu2J8Y9llfbdWe1A9" alt="" width="563"><figcaption></figcaption></figure>

4. On the *Edit Policy* page, change the *Display Name* field from the default “New Policy” placeholder to one that describes the policy.
5. Click *Save Progress* periodically while customizing the policy.
6. When finished customizing the policy properties, click *Complete*.

### What is a Managed Devices policy? <a href="#what-is-a-managed-devices-policy" id="what-is-a-managed-devices-policy"></a>

1. A Managed Devices policy is intended for company-owned devices. It gives the IT Admin full control over the apps and data on devices under the policy.
2. By default, a Managed Devices policy:
   * Disallows unknown sources, untrusted app installs, and debugging features.
   * Applies password policies to device login and major device settings changes.

### What is a Work Devices policy? <a href="#what-is-a-work-devices-policy" id="what-is-a-work-devices-policy"></a>

1. A Work Devices policy is intended for bring-your-own-device (BYOD) scenarios. The employee has separate accounts on one device for personal and work. The employee has the ability to turn the work account off and on and completely remove the work account at any time. The IT Admin has extensive control over the work account, but limited control over settings that span work and personal.
2. By default, a Work Devices policy:
   * Disallows unknown sources, untrusted app installs, and debugging features.
   * Applies password policies to work profile settings changes and unlocking work apps.

### What is a Dedicated Devices policy? <a href="#what-is-a-dedicated-devices-policy" id="what-is-a-dedicated-devices-policy"></a>

1. A Dedicated Devices policy is intended for company-owned single-use devices (e.g. inventory management, sign-in kiosks, digital signage, etc.). The device can be locked down to access only a single app or set of apps. The employee has no recourse to exit this kiosk mode or access apps, data, or settings outside of it.
2. By default, a Dedicated Devices policy:
   * Disallows unknown sources, untrusted app installs, and debugging features.
   * Disallows rebooting into safe boot
   * Disallows factory reset from device
   * Disallows modifying accounts and users on the device
   * Disallows screen capture
   * Disallows Bluetooth contact sharing
   * Disables camera
   * Disables an Easter egg game in Settings
   * Applies password policies to device login and major device settings changes.

### How do I schedule a policy to be applied later? <a href="#how-do-i-schedule-a-policy-to-be-applied-later" id="how-do-i-schedule-a-policy-to-be-applied-later"></a>

1. Select *EMM Console* tab. This opens to the *Policies* tab below by default.
2. Click *View Policy* on the policy that is intended to be scheduled.
3. Click *Edit Policy* button in upper right hand corner to make changes to policy. Make any desired changes.

<figure><img src="/files/Tv6f5gsUJcYmVeCQyd7T" alt="" width="563"><figcaption></figcaption></figure>

4. Click *Save Progress as Draft* button in lower right hand corner.
5. Click *Schedule* button that is now displayed and select a date and time from the pop-up window for the policy to be enforced on devices.

<figure><img src="/files/YNngaIbxZSIiTvDLhVIb" alt="" width="563"><figcaption></figcaption></figure>

6. Click *Schedule for Later*. The scheduled change will be displayed in the *Scheduled Policies* tab within *Policies*. There the scheduled change can be edited, deleted, unscheduled, or rescheduled.

<figure><img src="/files/cx8xk4CKdmjZqCHsP2yD" alt="" width="563"><figcaption></figcaption></figure>

### How do I delete a policy? <a href="#how-do-i-delete-a-policy" id="how-do-i-delete-a-policy"></a>

1. Select *EMM Console* tab. This opens to the *Policies* tab below by default.
2. Select a policy with no devices linked and click *Delete Policy*.
3. In the confirmation box, click *Delete*.

<figure><img src="/files/a8iT6AzO2WKhRmTGIkb7" alt="" width="563"><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.bluefletch.com/bluefletch-enterprise/product-guides/portal/emm-console/setup/policy-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.