Policies

9 min

Get Policies

This API returns the list of all polices across all devices in the Ivanti EPMM system.

Example:

https://<Ivanti EPMM>/api/v1/policies

URI: https:///api/v1/policies	Returns list of all policies installed across all devices.
Http Method:	GET
Format:	xml, json

Response Status Code:
‘404 – No Data Found’	There is no data.
‘200 – OK’	Data is present and the response is returned.
Response:
<policyWebServiceResponse>
<messages>
<message> 1 policy returned.</message>	Status Message. Policy count is shown if the method execution is successful. A descriptive error message is shown if the method execution failed.
</messages>
<policies>
<policy id="-2">
<policyName>Default Privacy Policy</policyName>	Policy name.
<policyType>DEFAULT</policyType>	Policy Type. Either DEFAULT or ENTERPRISE.
<profileType>PRIVACY</profileType>	Profile type. Either PRIVACY, SECURITY, LOCKDOWN, or SYNC.
<status>Active</status>	Active or Inactive.
<active>true</active>	Whether the policy is active. true means Active. false means Inactive.
<defaultPolicy>false</defaultPolicy>	Deprecated.
<description>Default Privacy Policy</description>	Policy description.
<deviceCount>1</deviceCount>	Number of devices for which the policy is applied.
<pendingCount>1</pendingCount>	Number of devices for which the policy is pending.
<priority>1</priority>	Priority
<rules>	Policy rules, which consist of type-value pairs. The set of type-value pairs are listed in Section Policy Rules Policy Rules. The rule shown here is only an example.
<rule>
<type>PRIVACY_SYNC_CALLLOGS</type>	Rule type
<value>store</value>
<clientValue>off</clientValue>
</rule>
….
<rules>
</policy>
</policies>
</ policyWebServiceResponse >

Get Policies by DeviceUUID

This API returns the list of all polices by device uuid in the Ivanti EPMM system.

Example:

https://<Ivanti EPMM>/api/v1/policies/devices/027d9439-0f75-4d30-8d7d-120b4cb8646b

URI: https:///api/v1/policies/devices/	Returns list of all policies by device uuid.
Http Method:	GET
Format:	xml, json

Response Status Code:
‘404 – No Data Found’	There is no data.
‘200 – OK’	Data is present and the response is returned.
Response:
<policyWebServiceResponse>
<messages>
<message> 1 policy returned.</message>	Status Message. Policy count is shown if the method execution is successful. A descriptive error message is shown if the method execution failed.
</messages>
<policies>
<policy id="-2">
<policyName>Default Privacy Policy</policyName>	Policy name.
<policyType>DEFAULT</policyType>	Policy Type. Either DEFAULT or ENTERPRISE.
<profileType>PRIVACY</profileType>	Profile type. Either PRIVACY, SECURITY, LOCKDOWN, or SYNC.
<status>Active</status>	Active or Inactive.
<active>true</active>	Whether the policy is active. true means Active. false means Inactive.
<defaultPolicy>false</defaultPolicy>	Deprecated.
<description>Default Privacy Policy</description>	Policy description.
<deviceCount>0</deviceCount>	This field is not applicable for this request.
<pendingCount>0</pendingCount>	This field is not applicable for this request.
<priority>1</priority>	Priority
<rules>	Policy rules, which consist of type-value pairs. The set of type-value pairs are listed in Section Policy Rules Policy Rules. The rule shown here is only an example.
<rule>
<type>PRIVACY_SYNC_CALLLOGS</type>	Rule type
<value>store</value>
<clientValue>off</clientValue>
</rule>
….
<rules>
</policy>
</policies>
</ policyWebServiceResponse >

Apply/Remove policy for a label.

This API applies a policy to a label or removes a policy from a label.

Example:

https://<Ivanti EPMM>/api/v1/policies/-2?action=apply_label&label=Testlabel

URI: https:///api/v1/policies/	Returns status.
Http Method:	PUT
Format:	xml, json

Response Status Code:
‘404 – No Data Found’	There is no data.
‘200 – OK’	Data is present and the response is returned.
Request:
policyid	Required. The internally generated policy ID. Use the Get Policies and Get Policies by DeviceUUID to determine a policy’s ID.
action	Required. This parameter is a query parameter. “apply_label” – to apply the label to the policy “remove_label” – to remove the label from the policy
label	Required. Label name. This parameter is a query parameter.
Response:
<policyWebServiceResponse>
<messages>
<message> Policy applied to label Android successfully. </message>	Status Message. A descriptive error message is shown if the method execution failed.
</messages>
<policyWebServiceResponse>

Policy Rules

An HTTP response that contains information about a policy includes a <rules> element made up of many <rule> elements.

For example:

<rules>
	<rule>
		<type>SYNC_HEARTBEAT_INTERVAL</type>
		<value>14</value>
		<clientValue>840</clientValue>
	</rule>
<rule>
		<type>SYNC_MULTITASK_INTERVAL</type>
		<value>15</value>
		<clientValue>15</clientValue>
	</rule>
</rules>

The following tables show the values of these <type> elements, their meanings, and possible values.

Note: The <clientValue> element is deprecated. Ignore its values.

Security policy rules

The following table shows the rules for security policies, listed alphabetically by the name of the <type> field.

Note: Not all the security rules apply to all device types.

For information about security policies, see the Ivanti EPMM Administration Guide.

Security policy rule <type> field	Description	Values
EAS_BLOCK_ANDROID_DATA_ENC	Whether to take an action when data encryption is disabled on an Android device.	Value: true or false ClientValue: deprecated.
EAS_BLOCK_ANDROID_DEVICE_ADMIN_DEACTIVE	Whether to take an action when Ivanti EPMM detects that the device administrator privilege has been removed from the Ivanti EPMM app.	Value: true or false ClientValue: deprecated.
EAS_BLOCK_ANDROID_OS	The version of Android below which Ivanti EPMM takes an action.	Value: An Android version number. For example: 2.3 ClientValue: deprecated.
EAS_BLOCK_ANDROID_ROOTED	Whether to take an action when Ivanti EPMM detects an Android device that has been rooted.	Value: true or false ClientValue: deprecated.
EAS_BLOCK_IOS_DEVICE_MDM_DEACTIVE	Whether to take an action when Ivanti EPMM detects that the MDM profile has been removed from an iOS device.	Value: true or false ClientValue: deprecated.
EAS_BLOCK_IPHONE_DATA_ENC	Whether to take an action when data encryption is disabled on an iOS device.	Value: true or false ClientValue: deprecated.
EAS_BLOCK_IPHONE_HW	Whether to take an action for particular iOS device models that the administrator has specified as disallowed.	Value: false – No devices are disallowed. Disallowed devices are specified in a comma-separated list of numbers. The numbers are: 1 – iPhone, original version 2 – iPhone 3G 3 – iPhone 3GS 4 – iPod touch, 1^(st) gen 5 – iPod touch, 2^(nd) gen 6 – iPod touch, 3^(rd) gen 7 – iPad 16 – iPhone 4 18 – iPod touch, 4^(th) gen 22 – iPad 2 28 – iPhone 4s ClientValue: deprecated.
EAS_BLOCK_IPHONE_JAILBROKEN	Whether an iOS device has been compromised (jailbroken).	Value: true – the device has been compromised. false – the device has not been compromised. ClientValue: deprecated.
EAS_BLOCK_IPHONE_OS	The iOS version below which Ivanti EPMM takes an action.	Value: An iOS version number. Example: 3.0 ClientValue: deprecated.
EAS_BLOCK_OOC_DAYS	The number of days a device cannot connect to Ivanti EPMM before Ivanti EPMM takes an action.	Value: A number. ClientValue: deprecated.
EAS_BLOCK_POLICY_DAYS	The specified number of days after which Ivanti EPMM takes an action when it detects that a device has not met policy requirements.	Value: A number. ClientValue: deprecated.
SEC_NCA_ANDROID_DATA_ENC	The action to take when data encryption is disabled on an Android device.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_ANDROID_DEVICE_ADMIN_DEACTIVE	The action to take when the device administrator is removed from an Android device.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_ANDROID_ROOTED	The action to take when an Android device that has been “rooted,” that is, root access has been given to an app. A rooted Android device is also called compromised.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_ANDROID_SW	The action to take when the version of Android on a device is less than a specified version.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_APP_CONTROL	The action to take when a device has violated app control rules.	Value: No value – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_IOS_DATA_ENC	The action to take when data encryption is disabled on an iOS device.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_IOS_HW	The action to take when an iOS device is disallowed. See EAS_BLOCK_IPHONE_HW for the list of disallowed devices.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_IOS_JAILBROKEN	The action to take when an iOS device has been compromised (jailbroken).	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_IOS_MDM_DEACTIVE	The action to take when Ivanti EPMM detects that the MDM profile has been removed from an iOS device.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_IOS_SW	The action to take when the iOS version is below a specified level.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive numbers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned a number to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_OOC_DAYS	The action to take when the device has not connected to Ivanti EPMM in a specified number of days.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSync and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SEC_NCA_POLICY_DAYS	The action to take when Ivanti EPMM detects that a device has not met policy requirements for the specified number of days.	Value: 0 – No action. 1 – Send alert. 2 – Block ActiveSynch and send alert. Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action. ClientValue: deprecated.
SECURITY_AV_BLOCK_DEVICES	Whether to run anti-virus scanning on the files of the device. Applicable only to Blackberry devices.	Value: off ClientValue: deprecated.
SECURITY_BLACK_WHITE_BMW_ACLS	A list of App Control Rules of type Allowed or Disallowed that are enabled in the security policy. The type Allowed (white-listed) or Disallowed (black-listed) is specified by the value of SECURITY_BLACK_WHITE_BMW_OPTION.	A comma-separated list of numbers that correspond to App Control Rules. Ivanti EPMM assigned a number to the App Control Rule when the Ivanti EPMM administrator created the rule. The list can be empty. For example: 3 3,6 ClientValue: deprecated.
SECURITY_BLACK_WHITE_BMW_OPTION	Whether App Control Rules listed in SECURITY_BLACK_WHITE_BMW_ACLS are of type Allowed (white-listed) or Disallowed (black-listed).	Value: WHITE – the App Control Rules are of type Allowed. BLACK – the App Control Rules are of type Disallowed. ClientValue: deprecated.
SECURITY_ENCRYPT_DATA_TYPE	Whether the policy requires data encryption for each of these data types: Email, PIM, and documents.	Contains a <resourceDTOs> element for each data type. <resourceDTOs> <name>PIM</name> <resourceType>PIM</resourceType> <value>on</value> </resourceDTOs> Possible values for <name> and <resourceType>: Email, PIM, MY_DOCUMENTS. Possible values for <value>: on, off.
SECURITY_ENCRYPT_DEVICE	Whether the security policy requires device encryption.	Value: on – Device encryption is required. off – Device encryption is not required. ClientValue: deprecated.
SECURITY_ENCRYPT_FILE_TYPE	Specifies which file types require data encryption. The possible file types are .doc, .xls, .pdf, .txt, media files, and others specified by the administrator.	A <resourceDTOs> element is specified for each of .doc, .xls, .pdf, .txt. and media files. The <name> and <resourceType> field values of each <resourceDTOs> element is either doc, xls, pdf, txt, MEDIA_FILES, or OTHER_FILE_TYPES. The <value> field of each <resourceDTOs> element except OTHER_FILE_TYPES is either on or off. The <value> field of each the OTHER_FILE_TYPE <resourceDTOs> element is a space-separated list of other file types. ClientValue: deprecated.
SECURITY_ENCRYPT_SDCARD	Whether SD card encryption is required on the device.	Value: on – SD card encryption required. off – SD card encryption not required. ClientValue: deprecated.
SECURITY_GRACE_PERIOD	The period of time during which the user is still able to enter the correct password after the device has been locked.	Value: The number of minutes. ClientValue: deprecated. Note that this field is applicable only if the password is mandatory, the maximum inactivity timeout is 0, and the device is an iOS device.
SECURITY_INACTIVITY_TIMEOUT	The maximum amount of time to allow as an inactivity timeout.	Value: A string describing the time. Possible values are: 0 minute 1 minute 2 minutes 3 minutes 4 minutes 5 minutes 15 minutes 30 minutes 1 hour 1.5 hours 2 hours 12 hours 24 hours ClientValue: deprecated.
SECURITY_MANDATORY_BMW_ACLS	The list of App Control Rules of type Required that are enabled in the security policy.	A comma-separated list of numbers that correspond to App Control Rules of type Required. Ivanti EPMM assigned a number to the App Control Rule when the Ivanti EPMM administrator created the rule. The list can be empty. For example: 3 3,6 ClientValue: deprecated.
SECURITY_PWD_HISTORY	The number of passwords remembered to ensure that users define a different password.	Value: A number ClientValue: deprecated. Note that this field is applicable only if the password is mandatory.
SECURITY_PWD_LENGTH	The minimum length for the password.	Value: A number ClientValue: deprecated. Note that this field is applicable only if the password is mandatory.
SECURITY_PWD_MAX_AGE	The numbers of days after which the password will expire. 0 indicates no limit.	Value: The number of days. ClientValue: deprecated.
SECURITY_PWD_MAX_FAILED_ATTEMPTS	The maximum number of times the user can enter an incorrect password before the device is wiped.	Value: A number. ClientValue: deprecated. Note that this field is applicable only if the password is mandatory.
SECURITY_PWD_MIN_COMPLEX_CHAR	The minimum number of special characters that must be included in a password.	Value: A number ClientValue: deprecated.
SECURITY_PWD_TYPE	Whether a mandatory password should be simple numeric input, be restricted to alphanumeric characters, or neither (that is, Don’t Care).	Value: alphanumeric - restricted to alphanumeric characters. simple - restricted to simple numeric characters. simple,alphanumeric - restricted to either simple or alphanumeric characters. nc – no restrictions apply to the password characters. ClientValue: deprecated. Note that this field is applicable only if the password is mandatory.
SECURITY_QUARANTINE_DEVICES	Deprecated.	Deprecated.
SECURITY_REQUIRE_PWD	Whether the user must enter a password before being able to access the device.	Value: on – a password is mandatory off – a password is optional ClientValue: deprecated.
SECURITY_REQUIRE_VPN	Deprecated.	Deprecated.
SECURITY_VPN_PROFILE	Deprecated.	Deprecated.
SECURITY_WIPE	The number of days before removing all data from the device if the Ivanti EPMM Client does not connect to the Ivanti EPMM server.	Value: A number. ClientValue: deprecated.

Lockdown policy rules

The following table shows the rules for lockdown policies, listed alphabetically by the name of the <type> field.

Note: Not all the lockdown rules apply to all device types.

For information about lockdown policies, see the Ivanti EPMM Administration Guide.

Lockdown policy rule <type> field	Description	Values
LOCKDOWN_BLUETOOTH	Whether Bluetooth should be disabled in the event that device access must be restricted.	on – Bluetooth audio and data should not be disabled. audio - Bluetooth audio should not be disabled, but Bluetooth data should be disabled. off – Bluetooth audio and data should be disabled. ClientValue: deprecated.
LOCKDOWN_CAMERA	Whether the camera should be disabled in the event that device access must be restricted.	on – the camera should not be disabled. off – the camera should be disabled. ClientValue: deprecated.
LOCKDOWN_IRDA	Whether infrared should be disabled in the event that device access must be restricted.	on – infrared should not be disabled. off – infrared should be disabled. ClientValue: deprecated.
LOCKDOWN_SDCARD	Whether the SD card should be disabled in the event that device access must be restricted.	on – the SD card should not be disabled. off – the SD card should be disabled. ClientValue: deprecated.
LOCKDOWN_WIFI	Whether WIFI should be disabled in the event that device access must be restricted.	on – WIFI should not be disabled. off – WIFI should be disabled. ClientValue: deprecated.

Sync policy rules

The following table shows the rules for sync policies, listed alphabetically by the name of the <type> field..

Note: Not all the sync rules apply to all device types.

For information about sync policies, see the Ivanti EPMM Administration Guide.

Sync policy rule <type> field	Description	Values
SYNC_ALWAYS_CONNECTED	Whether the Ivanti EPMM client app should remain connected to Ivanti EPMM during the sync interval.	on – Remain connected. off – Do not remain connected. ClientValue: deprecated.
SYNC_APN_HOME_NETWORK	Whether an Access Point Name (APN) connection type should be used in a Blackberry’s home network.	on – Use an APN connection type. off – Do not use an APN connection type. ClientValue: deprecated.
SYNC_APN_ROAMING_NETWORK	Whether an Access Point Name (APN) connection type should be used in a Blackberry’s roaming network.	on – Use an APN connection type. off – Do not use an APN connection type. ClientValue: deprecated.
SYNC_BIS_HOME_NETWORK	Whether a Blackberry Internet Service (BIS) connection type should be used in a Blackberry’s home network.	on – Use a BIS connection type. off – Do not use a BIS connection type. ClientValue: deprecated.
SYNC_BIS_ROAMING_NETWORK	Whether a Blackberry Internet Service (BIS) connection type should be used in a Blackberry’s roaming network.	on – Use a BIS connection type. off – Do not use a BIS connection type. ClientValue: deprecated.
SYNC_BLOCK_WHEN_ROAMING	Whether to synch when the device is roaming.	on – Synchronization of all activity and content occurs even when roaming. mai – Synchronization of only voice, SMS, and data traffic occurs when roaming. roamingStatus – Synchronization is blocked when roaming. Sync only new country notification when roaming. off – Synchronization of all activity and content is blocked when roaming. ClientValue: deprecated.
SYNC_FULL_BG_MODE	Deprecated.	Deprecated.
SYNC_HEARTBEAT_INTERVAL	The maximum amount of time that the Ivanti EPMM client app will wait before sending a request to the Ivanti EPMM server to confirm that the client and server are connected.	A number in minutes. For example: 14 ClientValue: deprecated.
SYNC_INTERVAL	The frequency for starting the synchronization process between the device and the Ivanti EPMM server.	A number in minutes. For example: 240 ClientValue: deprecated.
SYNC_MIN_BATTERY_POWER	The percentage of battery power at which to synchronize files between the device and the Ivanti EPMM server.	A number. For example: 20
SYNC_MIN_FILE_UPLOAD_BATTERY_POWER	The minimum battery level (%) to use for writing data from the device to Ivanti EPMM during the synchronization process.	A percentage. For example: 60 ClientValue: deprecated.
SYNC_MULTITASK_INVERVAL	The minimum duration between attempts to send iOS device details to Ivanti EPMM.	A number in minutes. For example: 15 ClientValue: deprecated.
SYNC_REQUIRE_TLS	Whether to use Transport Layer Security for interactions between Ivanti EPMM and the Ivanti EPMM client app on the device.	on – Using TLS is required. off – Using TLS is not required. ClientValue: deprecated.
SYNC_SDCARD	Whether to include files from removable storage devices, such as SD cards, when synchronizing files between the device and Ivanti EPMM.	on – Include files from removable storage. off – do not include files from removable storage. ClientValue: deprecated.
SYNC_SERVERIP	The IP address or host name of Ivanti EPMM that the Ivanti EPMM client communicates with.	For example: someServerName.mydomain.com ClientValue: deprecated.

Privacy policy rules

The following table shows the rules for privacy policies, listed alphabetically by the name of the <type> field.

Not all the privacy rules apply to all device types.

For information about privacy policies, see the Ivanti EPMM Administration Guide.

Privacy policy rule <type> field	Description	Values
PRIVACY_APP_MULTITASK	Whether the iOS Ivanti EPMM client periodically performs functions without user interaction.	on – Periodically wakes up. off – Does not periodically wake up. ClientValue: deprecated.
PRIVACY_EXCLUDE_DIR	The file folders that are excluded from synchronization.	Contains a <resourceDTOs> element for each excluded folder. For example: <resourceDTOs> <name> /Windows</name> resourceType>DIR</resourceType> <value>on</value> </resourceDTOs> <name> - lists the excluded directory. <resourceType> - always has value DIR. <value> - always has value on.
PRIVACY_LOG_APP_ACTIVITY	Deprecated.	Deprecated.
PRIVACY_LOG_FILE_ACTIVITY	1. Deprecated.	Deprecated.
PRIVACY_LOG_WEBSITE_ACTIVITY	Deprecated.	Deprecated.
PRIVACY_SYNC_APPS	Whether to sync information about the installed apps.	track – Sync apps. off – Do not sync apps. ClientValue: deprecated.
PRIVACY_SYNC_BOOKMARKS	Deprecated.	Deprecated.
PRIVACY_SYNC_CALLLOGS	Whether to collect statistics on voice calls.	store – Collect voice call statistics. off – Do not collect voice call statistics. ClientValue: deprecated.
PRIVACY_SYNC_CONTACTS	Whether to sync contacts.	store – Sync contacts. off – Do not sync contacts. ClientValue: deprecated.
PRIVACY_SYNC_DATA_LOG	Whether to sync data traffic statistics.	track – Sync data traffic. off - Do not sync data traffic.
PRIVACY_SYNC_DOCUMENTS	Whether to sync documents.	store – Sync documents. off – Do not sync documents. ClientValue: deprecated.
PRIVACY_SYNC_LOCATION	Whether to sync the location to the cell tower, the device’s GPS position, or not at all.	celltower – Sync cell tower data. gps – Sync GPS data. off – Do not sync location data.
PRIVACY_SYNC_MUSIC	Whether to sync music files.	store – Sync music files. off – Do not sync music files. ClientValue: deprecated.
PRIVACY_SYNC_OTHER_MEDIA	Whether to sync other files not specified by other privacy settings.	The file extensions of the types of files not to sync, as a comma-separated list. For example: ram,wav No <value> element means sync files of all types not specified by other privacy settings.
PRIVACY_SYNC_PICTURES	Whether to sync pictures.	store – Sync pictures. off – Do not sync pictures. ClientValue: deprecated.
PRIVACY_SYNC_SMSLOGS	Whether to collect SMS statistics, collect SMS statistics and store SMS data on the Ivanti EPMM server, or do neither.	track – Collect SMS statistics. store – Collect SMS statistics and store SMS data. off – Do not collect SMS statistics or store SMS data. ClientValue: deprecated.
PRIVACY_SYNC_VIDEO	Whether to sync video files.	store – Sync video files. off – Do not sync video files. ClientValue: deprecated.