Managing device policies¶

Coro implements device management through policies. In a policy, you can define application Allowlists that can enforce application usage restrictions on the enrolled devices to which the policy is applied.

For supervised iOS devices, a policy does not prevent excluded applications from being seen in the Apple App Store, nor does it prevent installation. However, a policy does prevent the user from being able to run an installed application that is not part of the policy Allowlist. For BYOD iOS enrollments, a policy cannot be enforced at all. However, Coro can retrieve an installed app list from the device and report where policy contraventions occur on the Devices page.

For company-owned Android devices, an applied policy completely prevents the user from viewing excluded applications in the Google Play Store or installing anything not on the policy Allowlist. This is also true for BYOD Android devices, although this is limited to the installed Work profile.

Coro allows an individual policy to be applied to both iOS and Android devices concurrently, with a single policy containing separate configuration for each platform. Mobile devices of both types can be enrolled in MDM without an applied policy if you wish to just monitor the device. However, to actively manage a device, apply a policy.

Before you set up a device policy, make sure you know the Bundle IDs (iOS) or Package names (Android) of the applications you want to allow.

To view and create device policies, perform the following steps:

1. Log into the Coro console.

2. Select the Mobile Device Management module.

   Note

   If Mobile Device Management is not enabled, contact your Coro sales representative.

3. From the MDM Mangement page, select the Policies tab.

On this page, you can:

• View all defined policies, including details such as the number of devices to which it is currently applied.
• Select a policy to edit it.
• Add a new policy, see Creating a new device policy.
• Filter the page to view only policies that match a selected device operating system or policy assignment status.
• Search for a policy by name.

Each policy is listed with the following information:

Creating a new device policy¶

To create a new mobile device policy, perform the following steps:

1. From the Policies tab, select CREATE NEW POLICY.

   The Creating policy page appears:

   

2. On this page, enter the following details:

   • Policy name: Enter a unique name for the new policy.
   • Description: (Optional) Enter a description of this policy.

3. Depending on which platform you want to add applications for, select either the iOS Policy Settings tab or the Android Policy Settings tab.

4. Select + ADD APPLICATIONS TO LIST.

   The Add application dialog appears:

   

5. Enter one or more application Bundle IDs (iOS) or Package names (Android) into the box provided. Coro searches for and displays a list of matching apps. Select the required app, or choose to add the bundle/package as entered.

   If you wish to remove an entry, select the adjacent Remove link:

   

6. To save your list to the policy, select SAVE.

   Coro displays your selected applications in the new policy.

7. To save your new device policy with the displayed settings, select SAVE POLICY. To discard the policy and return to the Policies page without saving, select DISCARD.

Applying a device policy¶

After you have defined a device policy, apply it to your mobile devices through the following method:

1. From the Devices page, locate the desired device and select the Actions menu:

   

   Note

   If the device already has a policy assigned, first select Remove policy. You can then proceed to apply a new policy.

2. For devices without a current policy, select Assign Policy.

   Coro displays the Browse Policies dialog:

   

3. Select a policy from the list.

4. Select ASSIGN POLICY.

Policies are assigned immediately to connected devices, although Coro recommends allowing a short time for all affected devices to be fully updated. Devices must be connected to the internet for the policy to take effect.

Deleting a device policy¶

You can permanently delete a device policy through the Policies page.

Perform the following steps:

1. Locate the policy you want to delete from the list.

2. Select the adjacent Actions menu. Then, select Delete policy:

   

   Coro presents a confirmation dialog. For reference, this show how many devices to which the policy is currently applied and that would be affected by this action:

   

   If you proceed to delete the policy, those devices become unnassigned.

3. To delete the policy, select DELETE.