Unmanaged app reading managed contacts although restriction is active

[LK]

Altought we have both of the managed contacts read/write restrictions active, apps (in this case WhatsApp Business) which are installed as "unmanaged" can still read the contacts deployed via EAS profile.

Does anyone know why this is happening and if there is a way to fix this?

[matthias_bretz]

Hi, same here. Just testing our first BYOD-setup and instantly broken 🤦🏻‍♂️

[LK]

Hi, we have found the problem in the meantime. The contacts restrictions do not work without the documents restrictions, there is a dependency. Jamf's structure unfortunately makes it look like it isn't.

[matthias_bretz]

Hi, I tried that, but even with this set off all five settings the two marked in red don't appear on the device. The green marked do appear.

 

[LK]

The restrictions should still work, can you try that? Jamf Support told me that these two contacts restrictions do not show up on the device, for whatever reason.

[matthias_bretz]

Hi, you're right. Didn't tried it yesterday after adding the documents restrictions.

But can now confirm that when configuring all five settings only the green ones get listet in the settings app but even the red ones are respected by apps like WhatsApp.