Creating Always-On Policies for Lookout Low, Medium, and High Risk User Groups in UEM

Users are automatically moved into the Low, Medium, or High Risk User Groups you created in Creating User Groups for Enrollment and Device State Sync based on their device threat state in Lookout. In order to apply compliance actions against these groups, you can create Low, Medium, and High Risk policies that use a trigger that is always true. By applying an always-on policy to the Low, Medium, or High Risk group, you automatically apply it to any device in that User Group.

The steps below create an always-on policy for High Risk devices that immediately revokes trust:

In the BlackBerry UEM sidebar menu, click Policies and profiles:
Click the + icon beside Compliance to create a new compliance policy.
l
The Add a compliance profile screen displays.

Enter the following:


Field	Value
Name	Lookout High Risk (iOS)
Email sent when violation is detected	Default compliance email
Platform	Click the iOS tab.
Restricted app is not installed	Checked. This enables the fields listed below.
Restricted App Name	(See below)
Enforcement action	Untrust

To set the Restricted App Name, click the + icon on the right of the list header, then click Select an app from the restricted app list:
Click Specify the app package ID and enter the ID .
Default IDs are listed below. If you are using an .apk file provided by Lookout Enterprise Support.
App Edition Package ID
iOS App Store Edition
com.lookout.work
Android Edition
com.lookout.enterprise
Click the Android tab and repeat Steps 3-5.
Check Enforce compliance actions in the personal space.
Click Add.
In the BlackBerry UEM sidebar menu, click Groups.
Select the Lookout (High Risk) group you created in Creating User Groups for Device State Sync and Enrollment.
On the group page, click the + icon on the far right of the IT policy and profiles list and select Compliance.
Select the Lookout High Risk profile and click Assign.

Optionally, repeat these steps to add policies for Medium and Low Risk devices and assign them to the corresponding user groups. Configure the Enforcement action based on your company’s requirements.

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Creating Always-On Policies for Lookout Low, Medium, and High Risk User Groups in UEM

lookout-footer

App Edition	Package ID
iOS App Store Edition	`com.lookout.work`
Android Edition	`com.lookout.enterprise`