Dynamic management of enterprises policies

A system, comprising:

• a processor;
• and
• a memory coupled to the processor and comprising computer readable program code embodied in the memory that when executed by the processor causes the processor to perform operations comprising:
• receiving a notice of a policy violation of an enterprise usage policy by a managed application on a user device, wherein the enterprise usage policy is administered by the policy management server and wherein the managed application is managed by a mobile application management module on the user device based on the enterprise usage policy;
• retrieving the enterprise usage policy from a policy database, wherein the enterprise usage policy comprises an action, an active condition selected from a plurality of conditions that range in breadth from a least narrow condition to a most narrow condition, and an active restriction selected from a plurality of restrictions that range in breadth from a least narrow restriction to a most narrow restriction;
• determining a modification precedence of the active condition and the active restriction;
• selecting one of the active condition and the active restriction for modification in response to the modification precedence;
• modifying the selected one of the active condition and the active restriction in response to the notice of the policy violation to provide a modified enterprise usage policy with respect to a plurality of user devices assigned to a plurality of users within a user set, wherein the modified enterprise usage policy has one of a broader active condition or a narrower active restriction relative to the enterprise usage policy;
• and
• responsive to modifying the selected one of the active condition and the active restriction, transmitting the modified enterprise usage policy to the user device for application to future actions of the user device.

A method, comprising:

• performing operations as follows on a processor of a policy management server:
• receiving a notice of a policy violation of an enterprise usage policy by a managed application on a user device, wherein the enterprise usage policy is administered by the policy management server, and wherein the enterprise usage policy comprises an action, a plurality of active conditions, each active condition having a level selected from a plurality of levels that range from a least narrow level to a most narrow level, and an active restriction selected from a plurality of restrictions that range in breadth from a least narrow restriction to a most narrow restriction;
• modifying one of the active conditions to have a broader level and/or modifying the active restriction to have a less narrow restriction in response to the notice of the policy violation to provide a modified enterprise usage policy with respect to a plurality of user devices assigned to a plurality of users within a user set, wherein the modified enterprise usage policy has one of a broader active condition or a narrower active restriction relative to the enterprise usage policy;
• and
• responsive to modifying the selected one of the active condition and the active restriction, transmitting the modified enterprise usage policy to the user device for application to future actions of the user device.