--- title: Policies slug: epmm/v1web-service-api-guide/policies createdAt: 2026-10-06T08:06:05.992Z --- ## Get Policies This API returns the list of all polices across all devices in the Ivanti EPMM system. **Example**: https\://\/api/v1/policies | URI:
https\:///api/v1/policies | Returns list of all policies installed across all devices. | | ------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Http Method: | GET | | Format: | xml, json | | | | | Response Status Code: | | | ‘404 – No Data Found’ | There is no data. | | ‘200 – OK’ | Data is present and the response is returned. | | Response: | | | \ | | |     \ | | |         \ 1 policy returned.\ | Status Message.
Policy count is shown if the method execution is successful.
A descriptive error message is shown if the method execution failed. | |     \ | | | \ | | |         \ | | |                 \Default Privacy Policy\ | Policy name. | |                 \DEFAULT\ | Policy Type. Either DEFAULT or ENTERPRISE. | |                 \PRIVACY\ | Profile type. Either PRIVACY, SECURITY, LOCKDOWN, or SYNC. | |                 \Active\ | Active or Inactive. | |                 \true\ | Whether the policy is active.
true means Active.
false means Inactive. | |                 \false\ | Deprecated. | |                 \Default Privacy Policy\ | Policy description. | |                 \1\ | Number of devices for which the policy is applied. | |                 \1\ | Number of devices for which the policy is pending. | |                 \1\ | Priority | |                 \ | Policy rules, which consist of type-value pairs. The set of type-value pairs are listed in Section [Policy Rules](docId:0J-SHNCwhkifCiBRO6Z0w) [Policy Rules](docId:0J-SHNCwhkifCiBRO6Z0w).

The rule shown here is only an example. | |                   \ | | |                     \PRIVACY\_SYNC\_CALLLOGS\ | Rule type | |                     \store\ | | |                     \off\ | | |                 \ | | |                   …. | | |                 \ | | |         \ | | |     \ | | | \ | | ## Get Policies by DeviceUUID This API returns the list of all polices by device uuid in the Ivanti EPMM system. **Example**: https\://\/api/v1/policies/devices/027d9439-0f75-4d30-8d7d-120b4cb8646b | URI:
https\:///api/v1/policies/devices/ | Returns list of all policies by device uuid. | | ------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Http Method: | GET | | Format: | xml, json | | | | | Response Status Code: | | | ‘404 – No Data Found’ | There is no data. | | ‘200 – OK’ | Data is present and the response is returned. | | Response: | | | \ | | |     \ | | |         \ 1 policy returned.\ | Status Message.
Policy count is shown if the method execution is successful.
A descriptive error message is shown if the method execution failed. | |     \ | | | \ | | |         \ | | |                 \Default Privacy Policy\ | Policy name. | |                 \DEFAULT\ | Policy Type. Either DEFAULT or ENTERPRISE. | |                 \PRIVACY\ | Profile type. Either PRIVACY, SECURITY, LOCKDOWN, or SYNC. | | \Active\ | Active or Inactive. | |                 \true\ | Whether the policy is active.
true means Active.
false means Inactive. | | \false\ | Deprecated. | |                 \Default Privacy Policy\ | Policy description. | |                 \0\ | This field is not applicable for this request. | |                 \0\ | This field is not applicable for this request. | |                 \1\ | Priority | |                 \ | Policy rules, which consist of type-value pairs. The set of type-value pairs are listed in Section [Policy Rules](docId:0J-SHNCwhkifCiBRO6Z0w) [Policy Rules](docId:0J-SHNCwhkifCiBRO6Z0w).

The rule shown here is only an example. | |                   \ | | |                     \PRIVACY\_SYNC\_CALLLOGS\ | Rule type | |                     \store\ | | |                     \off\ | | |                 \ | | |                   …. | | |                 \ | | |         \ | | |     \ | | | \ | | ## Apply/Remove policy for a label. This API applies a policy to a label or removes a policy from a label. **Example**: https\://\/api/v1/policies/-2?action=apply\_label\&label=Testlabel | URI:
https\:///api/v1/policies/ | Returns status. | | --------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Http Method: | PUT | | Format: | xml, json | | | | | Response Status Code: | | | ‘404 – No Data Found’ | There is no data. | | ‘200 – OK’ | Data is present and the response is returned. | | Request: | | | policyid | Required. The internally generated policy ID. Use the Get Policies and Get Policies by DeviceUUID to determine a policy’s ID. | | action | Required. This parameter is a query parameter.

“apply\_label” – to apply the label to the policy
“remove\_label” – to remove the label from the policy | | label | Required. Label name.

This parameter is a query parameter. | | Response: | | | \ | | |     \ | | |         \
                 Policy applied to label Android successfully.
        \ | Status Message.
A descriptive error message is shown if the method execution failed. | |     \ | | | \ | | ## Policy Rules An HTTP response that contains information about a policy includes a \ element made up of many \ elements. **For example**: ```javascript SYNC_HEARTBEAT_INTERVAL 14 840 SYNC_MULTITASK_INTERVAL 15 15 ``` The following tables show the values of these \ elements, their meanings, and possible values. **Note**: The \ element is deprecated. Ignore its values. ### Security policy rules The following table shows the rules for security policies, listed alphabetically by the name of the \ field. **Note**: Not all the security rules apply to all device types. For information about security policies, see the Ivanti EPMM Administration Guide. | Security policy rule \ field | Description | Values | | -------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | EAS\_BLOCK\_ANDROID\_DATA\_ENC | Whether to take an action when data encryption is disabled on an Android device. | Value: true or false
ClientValue: deprecated. | | EAS\_BLOCK\_ANDROID\_DEVICE\_ADMIN\_DEACTIVE | Whether to take an action  when Ivanti EPMM detects that the device administrator privilege has been removed from the Ivanti EPMM app. | Value: true or false
ClientValue: deprecated. | | EAS\_BLOCK\_ANDROID\_OS | The version of Android below which Ivanti EPMM takes an action. | Value: An Android version number.
For example: 2.3
ClientValue: deprecated. | | EAS\_BLOCK\_ANDROID\_ROOTED | Whether to take an action when Ivanti EPMM detects an Android device that has been rooted. | Value: true or false
ClientValue: deprecated. | | EAS\_BLOCK\_IOS\_DEVICE\_MDM\_DEACTIVE | Whether to take an action when Ivanti EPMM detects that the MDM profile has been removed from an iOS device. | Value: true or false
ClientValue: deprecated. | | EAS\_BLOCK\_IPHONE\_DATA\_ENC
| Whether to take an action when data encryption is disabled on an iOS device. | Value: true or  false
ClientValue: deprecated. | | EAS\_BLOCK\_IPHONE\_HW | Whether to take an action for particular iOS device models that the administrator has specified as disallowed. | Value:
false – No devices are disallowed.
Disallowed devices are specified in a comma-separated list of numbers. The numbers are:
1 – iPhone, original version
2 – iPhone 3G
3 – iPhone 3GS
4 – iPod touch, 1^(st) gen
5 – iPod touch, 2^(nd) gen
6 – iPod touch, 3^(rd) gen
7 – iPad
16 – iPhone 4
18 – iPod touch, 4^(th) gen
22 – iPad 2
28 – iPhone 4s
ClientValue: deprecated. | | EAS\_BLOCK\_IPHONE\_JAILBROKEN | Whether an iOS device has been compromised (jailbroken). | Value:
true – the device has been compromised.
false – the device has not been compromised.
ClientValue: deprecated. | | EAS\_BLOCK\_IPHONE\_OS | The iOS version below which Ivanti EPMM takes an action. | Value: An iOS version number.
Example: 3.0
ClientValue: deprecated. | | EAS\_BLOCK\_OOC\_DAYS | The number of days a device cannot connect to Ivanti EPMM before Ivanti EPMM takes an action. | Value: A number.
ClientValue: deprecated. | | EAS\_BLOCK\_POLICY\_DAYS | The specified number of days after which Ivanti EPMM takes an action when it detects that a device has not met policy requirements.
| Value: A number.
ClientValue: deprecated. | | SEC\_NCA\_ANDROID\_DATA\_ENC | The action to take when data encryption is disabled on an Android device. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_ANDROID\_DEVICE\_ADMIN\_DEACTIVE | The action to take when the device administrator is removed from an Android device. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_ANDROID\_ROOTED | The action to take when an Android device that has
been “rooted,” that is, root access has been given to an app. A rooted Android device is also called compromised. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_ANDROID\_SW | The action to take when the version of Android on a device is less than a specified version. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_APP\_CONTROL | The action to take when a device has violated app control rules. | Value:
No value – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_IOS\_DATA\_ENC | The action to take when data encryption is disabled on an iOS device. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_IOS\_HW | The action to take when an iOS device is disallowed.
See EAS\_BLOCK\_IPHONE\_HW for the list of disallowed devices. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_IOS\_JAILBROKEN | The action to take when an iOS device has been compromised (jailbroken). | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_IOS\_MDM\_DEACTIVE | The action to take when Ivanti EPMM detects that the MDM profile has been removed from an iOS device. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_IOS\_SW | The action to take when the iOS version is below a specified level. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive numbers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned a number to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_OOC\_DAYS | The action to take when the device has not connected to Ivanti EPMM in a specified number of days. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSync and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SEC\_NCA\_POLICY\_DAYS | The action to take when Ivanti EPMM detects that a device has not met policy requirements for the specified number of days. | Value:
0 – No action.
1 – Send alert.
2 – Block ActiveSynch and send alert.
Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.
ClientValue: deprecated. | | SECURITY\_AV\_BLOCK\_DEVICES | Whether to run anti-virus scanning on the files of the device.

Applicable only to Blackberry devices. | Value: off
ClientValue: deprecated. | | SECURITY\_BLACK\_WHITE\_BMW\_ACLS | A list of App Control Rules of type Allowed or Disallowed that are enabled in the security policy. The type Allowed (white-listed) or Disallowed (black-listed) is specified by the value of SECURITY\_BLACK\_WHITE\_BMW\_OPTION. | A comma-separated list of numbers that correspond to App Control Rules.  Ivanti EPMM assigned a number to the App Control Rule when the Ivanti EPMM administrator created the rule. The list can be empty.
For example:
3
3,6
ClientValue: deprecated. | | SECURITY\_BLACK\_WHITE\_BMW\_OPTION | Whether App Control Rules listed in SECURITY\_BLACK\_WHITE\_BMW\_ACLS are of type Allowed (white-listed) or Disallowed (black-listed). | Value:
WHITE – the App Control Rules are of type Allowed.
BLACK – the App Control Rules are of type Disallowed.
ClientValue: deprecated. | | SECURITY\_ENCRYPT\_DATA\_TYPE | Whether the policy requires data encryption for each of these data types: Email, PIM, and documents. | Contains a \ element for each data type.
\   
    \PIM\    
    \PIM\
    \on\
\

Possible values for \ and \: Email, PIM, MY\_DOCUMENTS.

Possible values for \: on, off. | | SECURITY\_ENCRYPT\_DEVICE | Whether the security policy requires device encryption. | Value:
on – Device encryption is required.
off – Device encryption is not required.
ClientValue: deprecated. | | SECURITY\_ENCRYPT\_FILE\_TYPE | Specifies which file types require data encryption. The possible file types are .doc, .xls, .pdf, .txt, media files, and others specified by the administrator. | A \ element is specified for each of .doc, .xls, .pdf, .txt. and media files.
The \ and \  field values  of each  \ element is either doc, xls, pdf, txt, MEDIA\_FILES, or OTHER\_FILE\_TYPES.
The \ field of each \ element except OTHER\_FILE\_TYPES is either on or off.
The \ field of each the OTHER\_FILE\_TYPE \ element is a space-separated list of other file types.
ClientValue: deprecated. | | SECURITY\_ENCRYPT\_SDCARD | Whether SD card encryption is required on the device. | Value:
on – SD card encryption required.
off – SD card encryption not required.
ClientValue: deprecated. | | SECURITY\_GRACE\_PERIOD | The period of time during which the user is still able to enter the correct password after the device has been locked. | Value: The number of minutes.
ClientValue: deprecated.
Note that this field is applicable only if the password is mandatory, the maximum inactivity timeout is 0, and the device is an iOS device. | | SECURITY\_INACTIVITY\_TIMEOUT | The maximum amount of time
to allow as an inactivity timeout. | Value:
A string describing the time. Possible values are:
0 minute
1 minute
2 minutes
3 minutes
4 minutes
5 minutes
15 minutes
30 minutes
1 hour
1.5 hours
2 hours
12 hours
24 hours

ClientValue: deprecated. | | SECURITY\_MANDATORY\_BMW\_ACLS | The list of App Control Rules of type Required that are enabled in the security policy. | A comma-separated list of numbers that correspond to App Control Rules of type Required.  Ivanti EPMM assigned a number to the App Control Rule when the Ivanti EPMM administrator created the rule. The list can be empty.
For example:
3
3,6
ClientValue: deprecated. | | SECURITY\_PWD\_HISTORY | The number of passwords remembered to ensure that users define a different password. | Value: A number
ClientValue: deprecated.
Note that this field is applicable only if the password is mandatory. | | SECURITY\_PWD\_LENGTH | The minimum length for the password. | Value: A number
ClientValue: deprecated.
Note that this field is applicable only if the password is mandatory. | | SECURITY\_PWD\_MAX\_AGE | The numbers of days after which the password will expire. 0 indicates no limit. | Value: The number of days.
ClientValue: deprecated. | | SECURITY\_PWD\_MAX\_FAILED\_ATTEMPTS | The maximum number of times the user can enter an incorrect password before the device is wiped. | Value: A number.
ClientValue: deprecated.
Note that this field is applicable only if the password is mandatory. | | SECURITY\_PWD\_MIN\_COMPLEX\_CHAR | The minimum number of special
characters that must be included in a password. | Value: A number
ClientValue: deprecated. | | SECURITY\_PWD\_TYPE | Whether a mandatory password
should be simple numeric input, be restricted to alphanumeric characters, or neither (that is, Don’t Care). | Value:
alphanumeric - restricted to alphanumeric characters.
simple - restricted to simple numeric characters.
simple,alphanumeric  - restricted to either simple or alphanumeric characters.
nc – no restrictions apply to the password characters.
ClientValue: deprecated.
Note that this field is applicable only if the password is mandatory. | | SECURITY\_QUARANTINE\_DEVICES | Deprecated. | Deprecated. | | SECURITY\_REQUIRE\_PWD | Whether the user must enter a password before being able to access the device. | Value:
on – a password is mandatory
off – a password is optional
ClientValue: deprecated. | | SECURITY\_REQUIRE\_VPN | Deprecated. | Deprecated. | | SECURITY\_VPN\_PROFILE | Deprecated. | Deprecated. | | SECURITY\_WIPE | The number of days before removing all data from the device if the Ivanti EPMM Client does not connect to the Ivanti EPMM server. | Value: A number.
ClientValue: deprecated. | ### Lockdown policy rules The following table shows the rules for lockdown policies, listed alphabetically by the name of the \ field. **Note**: Not all the lockdown rules apply to all device types. For information about lockdown policies, see the Ivanti EPMM Administration Guide. | Lockdown policy rule \ field | Description | Values | | ---------------------------------- | ------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | LOCKDOWN\_BLUETOOTH | Whether Bluetooth should be disabled in the event that device access must be restricted. | on – Bluetooth audio and data should not be disabled.
audio - Bluetooth audio should not be disabled, but Bluetooth data should be disabled.
off – Bluetooth audio and data should be disabled.
ClientValue: deprecated. | | LOCKDOWN\_CAMERA | Whether the camera should be disabled in the event that device access must be restricted. | on – the camera should not be disabled.
off – the camera should be disabled.
ClientValue: deprecated. | | LOCKDOWN\_IRDA | Whether infrared should be disabled in the event that device access must be restricted. | on – infrared should not be disabled.
off – infrared should be disabled.
ClientValue: deprecated. | | LOCKDOWN\_SDCARD | Whether the SD card should be disabled in the event that device access must be restricted. | on – the SD card should not be disabled.
off – the SD card should be disabled.
ClientValue: deprecated. | | LOCKDOWN\_WIFI | Whether WIFI should be disabled in the event that device access must be restricted. | on – WIFI should not be disabled.
off – WIFI should be disabled.
ClientValue: deprecated. | ### Sync policy rules The following table shows the rules for sync policies, listed alphabetically by the name of the \ field.. **Note**: Not all the sync rules apply to all device types. For information about sync policies, see the Ivanti EPMM Administration Guide. | Sync policy rule \ field | Description | Values | | --------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | SYNC\_ALWAYS\_CONNECTED | Whether the Ivanti EPMM client app should remain connected to Ivanti EPMM during the sync interval. | on – Remain connected.
off – Do not remain connected.
ClientValue: deprecated. | | SYNC\_APN\_HOME\_NETWORK | Whether an Access Point Name (APN) connection type should be used in a Blackberry’s home network. | on – Use an APN connection type.
off – Do not use an APN connection type.
ClientValue: deprecated. | | SYNC\_APN\_ROAMING\_NETWORK | Whether an Access Point Name (APN) connection type should be used in a Blackberry’s roaming network.
| on – Use an APN connection type.
off – Do not use an APN connection type.
ClientValue: deprecated. | | SYNC\_BIS\_HOME\_NETWORK | Whether a Blackberry Internet Service (BIS) connection type should be used in a Blackberry’s home network. | on – Use a BIS connection type.
off – Do not use a BIS connection type.
ClientValue: deprecated. | | SYNC\_BIS\_ROAMING\_NETWORK | Whether a Blackberry Internet Service (BIS) connection type should be used in a Blackberry’s roaming network. | on – Use a BIS connection type.
off – Do not use a BIS connection type.
ClientValue: deprecated. | | SYNC\_BLOCK\_WHEN\_ROAMING | Whether to synch when the device is roaming. | on – Synchronization of all activity and content occurs even when roaming.
mai – Synchronization of only voice, SMS, and data traffic occurs when roaming.
roamingStatus – Synchronization is blocked when roaming. Sync only new country notification when roaming.
off – Synchronization of all activity and content is blocked when roaming.
ClientValue: deprecated. | | SYNC\_FULL\_BG\_MODE | Deprecated. | Deprecated. | | SYNC\_HEARTBEAT\_INTERVAL | The maximum amount of time that the Ivanti EPMM client app will wait before sending a request to the Ivanti EPMM server to confirm that the client and server are connected. | A number in minutes.
For example:
14
ClientValue: deprecated. | | SYNC\_INTERVAL | The frequency for starting
the synchronization process
between the device and the
Ivanti EPMM server. | A number in minutes.
For example: 240
ClientValue: deprecated. | | SYNC\_MIN\_BATTERY\_POWER | The percentage of battery power at which to synchronize files between the device and the Ivanti EPMM server. | A number.
For example:
20 | | SYNC\_MIN\_FILE\_UPLOAD\_BATTERY\_POWER | The minimum battery level
(%) to use for writing data from the device to Ivanti EPMM during the synchronization process. | A percentage.
For example:
60
ClientValue: deprecated. | | SYNC\_MULTITASK\_INVERVAL | The minimum duration between attempts to send iOS device details to Ivanti EPMM. | A number in minutes.
For example:
15
ClientValue: deprecated. | | SYNC\_REQUIRE\_TLS | Whether to use Transport
Layer Security for interactions
between Ivanti EPMM and the Ivanti EPMM client app on the device. | on – Using TLS is required.
off – Using TLS is not required.
ClientValue: deprecated. | | SYNC\_SDCARD | Whether to include files from removable storage devices, such as SD cards, when synchronizing files between the device and Ivanti EPMM. | on – Include files from removable storage.
off – do not include files from removable storage.
ClientValue: deprecated. | | SYNC\_SERVERIP | The IP address or host name of Ivanti EPMM that
the Ivanti EPMM client communicates with. | For example:
someServerName.mydomain.com
ClientValue: deprecated. | ### Privacy policy rules The following table shows the rules for privacy policies, listed alphabetically by the name of the \ field. Not all the privacy rules apply to all device types. For information about privacy policies, see the Ivanti EPMM Administration Guide. | Privacy policy rule \ field | Description | Values | | --------------------------------- | ---------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | PRIVACY\_APP\_MULTITASK | Whether the iOS Ivanti EPMM client periodically performs functions without user interaction. | on – Periodically wakes up.
off – Does not periodically wake up.
ClientValue: deprecated. | | PRIVACY\_EXCLUDE\_DIR | The file folders that are excluded from synchronization. | Contains a \ element for each excluded folder.
For example:
\   
    \ /Windows\    
    resourceType>DIR\
    \on\
\

\ -  lists the excluded directory. 

\ - always has value DIR.

\ - always has value on. | | PRIVACY\_LOG\_APP\_ACTIVITY | Deprecated. | Deprecated. | | PRIVACY\_LOG\_FILE\_ACTIVITY | 1. Deprecated. | Deprecated. | | PRIVACY\_LOG\_WEBSITE\_ACTIVITY | Deprecated. | Deprecated. | | PRIVACY\_SYNC\_APPS | Whether to sync information about the installed apps. | track – Sync apps.
off – Do not sync apps.
ClientValue: deprecated. | | PRIVACY\_SYNC\_BOOKMARKS | Deprecated. | Deprecated. | | PRIVACY\_SYNC\_CALLLOGS | Whether to collect statistics on voice calls. | store – Collect voice call statistics.
off – Do not collect voice call statistics.
ClientValue: deprecated. | | PRIVACY\_SYNC\_CONTACTS | Whether to sync contacts. | store – Sync contacts.
off – Do not sync contacts.
ClientValue: deprecated. | | PRIVACY\_SYNC\_DATA\_LOG | Whether to sync data traffic statistics. | track – Sync data traffic.
off - Do not sync data traffic. | | PRIVACY\_SYNC\_DOCUMENTS | Whether to sync documents. | store – Sync documents.
off – Do not sync documents.
ClientValue: deprecated. | | PRIVACY\_SYNC\_LOCATION | Whether to sync the location to the cell tower, the device’s GPS position, or not at all. | celltower – Sync cell tower data.
gps – Sync GPS data.
off – Do not sync location data. | | PRIVACY\_SYNC\_MUSIC | Whether to sync music files. | store – Sync music files.
off – Do not sync music files.
ClientValue: deprecated. | | PRIVACY\_SYNC\_OTHER\_MEDIA | Whether to sync other files not specified by other privacy settings. | The file extensions of the types of files not to sync, as a comma-separated list. For example:
ram,wav
No \ element means sync files of all types not specified by other privacy settings. | | PRIVACY\_SYNC\_PICTURES | Whether to sync pictures. | store – Sync pictures.
off – Do not sync pictures.
ClientValue: deprecated. | | PRIVACY\_SYNC\_SMSLOGS | Whether to collect SMS statistics, collect SMS statistics and store SMS data on the Ivanti EPMM server, or do neither. | track – Collect SMS statistics.
store – Collect SMS statistics and store SMS data.
off – Do not collect SMS statistics or store SMS data.
ClientValue: deprecated. | | PRIVACY\_SYNC\_VIDEO | Whether to sync video files. | store – Sync video files.
off – Do not sync video files.
ClientValue: deprecated. |