BlackBerry Enterprise Mobility Suite vs Workspace ONE UEM comparison

BlackBerry and Omnissa are both solutions in the Enterprise Mobility Management (EMM) category. BlackBerry is ranked #19, while Omnissa is ranked #2 with an average rating of 7.3. BlackBerry holds a 0.9% mindshare in EMM, compared to Omnissa’s 11.6% mindshare. Additionally, 78% of BlackBerry users are willing to recommend the solution, compared to 84% of Omnissa users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 1, 2024

Workspace ONE UEM and BlackBerry Enterprise Mobility Suite are both prominent mobility management solutions. User reviews indicate that while Workspace ONE UEM impresses with its ease of deployment, BlackBerry Enterprise Mobility Suite stands out for its robust features.

Features: Users value Workspace ONE UEM for application management, endpoint security, and seamless integration. BlackBerry Enterprise Mobility Suite is praised for its comprehensive security, multi-platform support, and advanced threat protection. Workspace ONE UEM offers a more user-friendly experience, whereas BlackBerry Enterprise Mobility Suite excels in security-focused environments.

Room for Improvement: For Workspace ONE UEM, users suggest enhancements in patch management and reporting capabilities. BlackBerry Enterprise Mobility Suite users point to the need for a more intuitive system configuration and better customer support. The key difference is that Workspace ONE UEM needs better management features, whereas BlackBerry Enterprise Mobility Suite requires improvements in usability and support services.

Ease of Deployment and Customer Service: Workspace ONE UEM is often highlighted for its straightforward deployment process and responsive customer service. BlackBerry Enterprise Mobility Suite, while thorough and secure, can be more complex to deploy and navigate, resulting in mixed feedback on customer support responsiveness. Workspace ONE UEM is generally preferred for its ease of use and better support experience.

Pricing and ROI: Users find Workspace ONE UEM's setup costs reasonable and report a good ROI. BlackBerry Enterprise Mobility Suite, despite higher initial costs, is considered worth the investment due to its advanced features and security benefits. Ultimately, Workspace ONE UEM is seen as more cost-effective, while BlackBerry Enterprise Mobility Suite is valued for offering comprehensive security at a higher price point.

To learn more, read our detailed BlackBerry Enterprise Mobility Suite vs. Workspace ONE UEM Report (Updated: September 2025).

Buyer's Guide

BlackBerry Enterprise Mobility Suite vs. Workspace ONE UEM

September 2025

Download the complete report

Helped 872,778 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Microsoft Intune

Mindshare comparison

As of October 2025, in the Enterprise Mobility Management (EMM) category, the mindshare of Microsoft Intune is 31.3%, down from 36.6% compared to the previous year. The mindshare of BlackBerry Enterprise Mobility Suite is 0.9%, up from 0.7% compared to the previous year. The mindshare of Workspace ONE UEM is 11.6%, up from 11.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Enterprise Mobility Management (EMM) Market Share Distribution
Product	Market Share (%)
Microsoft Intune	31.3%
Workspace ONE UEM	11.6%
BlackBerry Enterprise Mobility Suite	0.9%
Other	56.2%

Enterprise Mobility Management (EMM)

Featured Reviews

AkashKamble

Sr MacOS specialist engineer at Cyber24

Enables management of multiple operating systems with a single license

The best feature is that it's a Microsoft product, so if anything goes wrong, we get quick support for anything required. Remote system functionality allows us to sit anywhere and take control of any device via remote management. We can enhance security for clients' laptops with built-in Microsoft Defender, which is available with the Microsoft Intune license. We use it for reporting purposes through endpoint analytics. When pushing scripting, there are two types available: remediation script and reservation script. Through endpoint analytics, you can push defender policies to clients. It helps with reporting, inventory updates, and monitoring tenant status health.

Read full review

Denni Sembiring

Deputy Technical Service Lead at Halodata

Review about BlackBerry Enterprise Mobility Suite

For the purpose of better performance is we have some applications, internal applications, that work on document but when we did integration with BlackBerry Edit from BlackBerry Enterprise, yeah. I think that we failed. We failed on that integration. We cannot integrate that BlackBerry Edit. BlackBerry Edit has issues for editing any document. We have other internal applications that can bring or field documents but cannot edit into BlackBerry Edit. There's room for improvement with editing documents. When I was the [inaudible 00:09:48] for BlackBerry Enterprise, maybe they need to create... I'm so sorry. Because for month or once on a month, I need to delete database or some database logs from BlackBerry that use much [crosstalk 00:10:09]- I think the database slow because the BlackBerry Enterprise, it have database that put inside SQL Server, so every month I need to check the hard disk if it is sufficient to handle the database files or not. Every month, I need to check hard disk, so if it's not sufficient or it's already full, I need to delete some logs. I think on the UEM server, they can keep the database or hard disk performance, like approval. So from the UEM server, we can delete any file that is not used anymore. Yeah, something like that, I think.

Read full review

Vishal Bhatia

Trainer/Consultant at Koenig Solutions Pvt. Ltd.

Effective product tracking and monitoring enhances daily operations despite needing documentation improvement

The documentation part of Workspace ONE UEM can be confusing. The documentation is not comprehensive compared to other VMware solutions or Microsoft documentation. Most people struggle to connect the dots when looking at the documentation. Even the training material and PowerPoint slide decks that trainers use are sometimes too confusing or overwhelming, with too much content but not enough clarity. The support side has recently become weaker compared to what it used to be with VMware. This is another area that needs improvement. Since working with Workspace ONE UEM from when it was AirWatch, it has improved significantly over the last five years. However, there are still some gray areas and scope for improvement, especially in documentation and workflow between different aspects of the solution.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is Intune's ability to push out updates for the security and antivirus. I also like Intune's copilot and the ability to automate processes. For example, if you have 5,000 employees who are issued new PCs and you need to set them up with everything they need."

"The features of Microsoft Intune that I appreciate the most are its user-friendly interface and robust security options."

"I can see that the patch management process is much improved with the bundled patch management option available in Microsoft Intune compared to the KPI deployment required by the other deployment solutions."

"Application deployment and keeping the devices secure no matter where they are, by having this cloud solution — that has been great."

"The automatic patch management feature in the Intune Suite is helpful."

"The Asset Management and Auto Pilot are valuable features."

"Its security is most valuable. It gives us a way to secure devices, not only those that are steady. We do have a few tablets and other devices, and it is a way for us to secure these devices and manage them. We know they're out there and what's their status. We can manage their life cycle and verify that they're updated properly."

"Microsoft Intune does a great job of helping protect our environment."

More Microsoft Intune pros

"It was a big improvement to activate applications with one authentication. That was a big plus for the user experience."

"If a device is stolen, you have the power to remove all of the contents remotely. You can do this very quickly."

"We were able to utilize Android for Work-Premium in BlackBerry Android devices."

"Having access to our internet was extremely beneficial. We don't have that functionality now that we have switched to Microsoft Intune. It was definitely better with Blackberry."

"Cylance, their newest antivirus product, is the most valuable feature for us so far."

"The containerization of the BlackBerry Dynamics is the most important thing for us. It allows us to keep personal and corporate data separate on a personal device. It allows us to wipe the corporate data while leaving all the personal data in place."

"The technical support for the solution is excellent."

"It keeps things secure, it can remotely wipe the container and it's fairly easy to use."

More BlackBerry Enterprise Mobility Suite pros

"If an end-user has an issue with a device, the administration has the ability to remote access the device after approval from the end-user."

"It seems highly stable and scalable."

"The most valuable feature of VMware Workspace ONE is that it can support most end users' enterprise applications."

"The Client Control feature in VMware Workspace ONE is most valuable for managing client devices, including mobile devices and laptops. Another impactful feature is the per-service tooling, allowing access to the data centre on a per-application basis. We use the complete VMware stack, integrating Horizon for application delivery and Carbon Black for endpoint protection. We have outsourced our device management, which streamlines our IT tasks as our supplier handles them competitively."

"No issues with scalability."

"It was easy to use."

"You can put all your applications on a mobile device, be it a phone or tablet. It is secure and easy to use. Because it is centrally managed, you don't have to do any configuration on the phone. I just got the phone and connected to the central applications. I just downloaded one thing and everything got rolled out. Email, calendar, and other things were deployed centrally. If you don't have AirWatch, you have to configure your phone manually. For example, you need to deploy and configure your email manually and then synchronize everything. It is much simpler when a mobile device is centrally managed."

"The solution's single plane of glass approach is beneficial. The endpoint management is very good and specific. One of their competitors is Intune, and you have leaks from other services within the Microsoft ecosystem."

More Workspace ONE UEM pros

Cons

"It would be great to see on-premises mailboxes and for the solution to have geofencing capabilities."

"Historically, Group Policy has simplified the management of various items, such as printer and drive mappings and while Intune offers workarounds, it lacks native support for these functionalities."

"A more incisive reporting tool with automated progress updates and graphical representation would be beneficial, as the current manual method lacks efficiency and visual clarity."

"The reporting and cost have room for improvement."

"One drawback of Intune is that we cannot find devices based on a user's region or location."

"Historically, Group Policy has simplified the management of various items, such as printer and drive mappings and while Intune offers workarounds, it lacks native support for these functionalities. This is an area I believe needs improvement."

"They should make it easier to order it, however, that's generally true for everything from Microsoft."

"Intune could be enhanced by automating application upgrades, similar to how it automates operating system upgrades."

More Microsoft Intune cons

"The pain points for us would be the activation."

"It would be ideal if there was something for communication with Microsoft tools like Teams or Skype for Business, or perhaps even with Zoom for conference calls."

"The initial installation could be simplified."

"From the past to the present, before mobility location, we frequently required a restart."

"The interface could be improved."

"I would like to see better integration with our AD. Instead of having to use Active Directory groups, we'd like to use Active Directory attributes instead. There is a lot of overhead in managing. Whereas, if we could key on something tied to HR, or some other feed indicating who they are or what role they have, and manage them that way, that would be much preferable than having to manage people with Active Directory groups. Because, if people move roles, then we have to make sure that we move them from one Active Directory group to another, which is hands-on, a lot of overhead."

"We cannot integrate BlackBerry Edit from BlackBerry Enterprise. BlackBerry Edit has issues when we are editing any document. We have other internal applications that we can use for documents, but we cannot edit into BlackBerry Edit. There's room for improvement with editing documents."

"What we don't have at the moment is RDP from the device to some kind of PC. Another feature would be access to a delegate's mailbox and I think that is to come in one of the next releases. There have been a lot of requests for that type of feature where, for example, a secretary can access the mailbox of the boss."

More BlackBerry Enterprise Mobility Suite cons

"I would like to see some integration with native Microsoft products such as Anti-value."

"The product's stability for certain instances needs improvement."

"The console comes bunched together as a package and inbuilt. Its called Workspace ONE. Whenever we have an issue, we contact the service provider, and instead of a fix, we are just getting the next version of Workspace ONE."

"From an identity perspective, there is a lot of room for improvement when it comes to integration with other solutions. I would say it needs more capabilities in terms of direct integrations, including cloud identity solution integrations."

"I tried to use the tool on an encrypted disk, but it was inconvenient."

"There is room for improvement in customer service and support."

"Feature-wise, it is fine, but its pricing could be better, given that Microsoft is on a bundling spree. AirWatch would benefit from reducing the license pricing per user per month."

"I would like to have better support for multi-cloud sessions."

More Workspace ONE UEM cons

Pricing and Cost Advice

"As a partner, we always look for how we can generate more revenue from a consulting point of view, but I do not see any complaints from the customer side regarding pricing, so they are satisfied with it."

"Its price is quite okay. I wish they provide certain additional features with the same license."

"The price for Intune is fair."

"The product is offered as part of a Microsoft standard bundle. The pricing can be competitive to Airwatch, and Maas360."

"It comes with the E5 plan. We bought the E5 plan from Microsoft."

"There is a license needed for this solution and it is either included in one of the enterprise license agreements. Microsoft licensing is a mathematical institute, it could be quite complex. We tend to ask specialized organizations to research what the most profitable way it would be for us to use licenses in the organizations."

"It is reasonable. When you have Microsoft 365 E3 or E5 license, it is already licensed in that license. So, you could say it is free."

"Intune's pricing is competitive. For example, the license of Blackberry's Enterprise Mobility Suite was costly, but Intune is affordable. It is included as an additional feature when you buy security enhancements for your organization. For example, let's say I have fifty users in my organization and all of them are using Microsoft cloud services, like Teams, Office 365, and OneDrive."

More Microsoft Intune pricing and cost advice

"With the new licensing model, there seems to be a significant increase in cost, which makes it difficult to push forward and talk with the business."

"We currently pay by the year, but the licenses are calculated on a monthly basis."

"We pay about $6 a year for the solution. There are no extra costs on top of that. You save a lot of money when you use this product."

"The licensing costs are paid on a yearly basis because we just renewed the license. If you have some big issue, they will also charge you."

"It was on a yearly support contract, and the licenses were perpetual. There was also the implementation cost and the support cost for the integrator."

"In my opinion, we're paying an awful lot for what we get, compared to other vendors. I don't deal with the pricing, but it does seem to be a bit pricey for the things that we get, especially, when you compare them to other vendors, such as VMware, Citrix, who have all bought up other players in this space. VMware offers AirWatch free as part of their packages."

"Sometimes, it is very hard to get an overview because there are so many different suites to find out what is the right thing for new customers."

"We are paying $200 annually. You also need to have a hardware server or a license for the server so there could be some additional fees added on to that."

More BlackBerry Enterprise Mobility Suite pricing and cost advice

"We pay approximately $6.50 per user for the standard version. If you are paying for an enterprise license that includes VDI then it will cost approximately $25 per user on a monthly basis."

"If you have a host of custom requirements (including licensing), make sure to set aside enough time for the initial setup because it can take up to a few weeks depending on how complex your environment is."

"I rate the product price a five on a scale of one to ten, where one is cheap and ten is expensive."

"Our customers are concerned about the costs. The solution is higher than they want it to be."

"It is quite expensive, but I think large companies have agreements with these organizations that provide remote monitoring for phones, and they get massive discounts. The public price does not reflect what they pay. You won't get the same pricing if you're buying for 10 employees versus 1,000 employees. On the public price, you get perhaps a 10% discount, but if you're buying 1,000, the discount could be really massive, especially if you signed a contract for a number of years."

"The solution can be costly when the customer is dealing with multiple platforms. If a customer is only dealing with iOS, Windows, and Android then Intune is the better choice because there are free licenses."

"VMware Workspace ONE is not cheap; it's quite expensive. However, in the end, they gave us a reasonable price."

"I think the pricing of the product needs advisement. It would be great to bundle the VM products together. I think the actual box itself should be included in the license. At present, it is not paired with the mobile device."

More Workspace ONE UEM pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Enterprise Mobility Management (EMM) solutions are best for your needs.

See recommendations

872,778 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

10%

Manufacturing Company

Government

Financial Services Firm

28%

Manufacturing Company

Energy/Utilities Company

Real Estate/Law Firm

Computer Software Company

15%

Financial Services Firm

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	116
Midsize Enterprise	46
Large Enterprise	152

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	3
Large Enterprise	19

By reviewers
Company Size	Count
Small Business	41
Midsize Enterprise	21
Large Enterprise	57

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?

Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...

See all answers

What are the pros and cons of Microsoft Intune?

Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...

See all answers

How does Google Cloud Identity compare with Microsoft Intune?

Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...

See all answers

Ask a question

Earn 20 points

How does VMware Workspace One compare with VMware Horizon 7?

VMware Workspace One has a powerful set of helpful features. The solution offers very good documentation, the initial...

See all answers

What do you like most about VMware Workspace ONE?

The platform provides a stable environment for operations and quickly creates new environments. Additionally, it offe...

See all answers

What is your experience regarding pricing and costs for VMware Workspace ONE?

I would rate the pricing a three out of ten. It's a highly affordable solution. If a customer knows the value of the ...

See all answers

Comparisons

Jamf Pro vs Microsoft Intune

Compared 10% of the time

ManageEngine Endpoint Central vs Microsoft Intune

Compared 7% of the time

Microsoft Entra ID vs Microsoft Intune

Compared 6% of the time

IBM MaaS360 vs Microsoft Intune

Compared 5% of the time

Samsung Knox vs Microsoft Intune

Compared 5% of the time

More Microsoft Intune Competitors

SOTI MobiControl vs BlackBerry Enterprise Mobility Suite

Compared 12% of the time

IBM MaaS360 vs BlackBerry Enterprise Mobility Suite

Compared 12% of the time

ManageEngine Endpoint Central vs BlackBerry Enterprise Mobility Suite

Compared 11% of the time

More BlackBerry Enterprise Mobility Suite Competitors

Horizon 8 vs Workspace ONE UEM

Compared 6% of the time

SOTI MobiControl vs Workspace ONE UEM

Compared 6% of the time

Jamf Pro vs Workspace ONE UEM

Compared 5% of the time

IBM MaaS360 vs Workspace ONE UEM

Compared 4% of the time

Microsoft Remote Desktop Services vs Workspace ONE UEM

Compared 1% of the time

More Workspace ONE UEM Competitors

Product Reports

Buyer's Guide

Microsoft Intune

October 2025

Download Microsoft Intune product report

Buyer's Guide

BlackBerry Enterprise Mobility Suite

October 2025

BlackBerry Enterprise Mobility Suite report

Download BlackBerry Enterprise Mobility Suite product report

Buyer's Guide

Workspace ONE UEM

October 2025

Download Workspace ONE UEM product report

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager

Good for Enterprise, Good Mobile Messaging, Ubitexx Ubi-Suite

VMware Workspace ONE, VMware AirWatch, Workspace ONE Assist, VMware Identity Manager, Workspace ONE Access, VMware Horizon Air

Overview

Microsoft Intune provides centralized management of mobile devices and applications, ensuring security, compliance, and productivity through integration with Microsoft services like Microsoft 365 and Azure Active Directory.

Organizations use Intune for managing mobile devices and applications, enhancing security and compliance across platforms. With features like single sign-on, conditional access, and zero-touch deployment via Autopilot, it facilitates efficient operations. Intune's scalability, easy enrollment, and capabilities such as remote wipe support diverse device management, offering robust data protection and efficient operation. Despite its features, improvement areas include reporting, compatibility with non-Microsoft devices, and better support for macOS and Linux devices.

What are the key features of Microsoft Intune?

Seamless Integration: Works with Microsoft 365, Azure Active Directory, and System Center for streamlined management.
Conditional Access: Enhances security with policies that restrict access based on conditions.
Autopilot: Provides zero-touch deployment for setting up new devices efficiently.
Mobile Device Management: Enables control over both personal and corporate devices.
Application Deployment: Facilitates app delivery across a range of devices.

What benefits should users look for in reviews?

Centralized Management: Reduces complexity by managing devices and applications in one place.
Security Enhancement: Protects data with features like remote wipe and compliance monitoring.
Improved Productivity: Enhances efficiency with seamless integration and automation features.
Device Scalability: Supports diverse device management for growing business needs.

In industries such as finance, healthcare, and education, Microsoft Intune is implemented to ensure secure and compliant device management. Companies leverage its capabilities to deploy security policies and manage both corporate-owned and BYOD environments, facilitating a unified approach to data protection and compliance.

Microsoft

The BlackBerry Enterprise Mobility Suite offers five editions to meet your enterprise’s evolving mobile needs. Growth can happen quickly, and the BlackBerry Enterprise Mobility Suite is designed to provide a seamless transition to the more advanced capabilities in higher-level editions. The subscription model ensures predictable annual expenditures and eliminates upfront capital costs.

BlackBerry

VMware Workspace ONE is an intelligence-driven digital workspace platform that delivers any app on any device. It integrates access control, multi-platform endpoint management, and application management. With the VMware Workspace ONE platform, IT teams can deliver a digital workspace that includes the devices and apps of the company’s choice, but with security and control.

VMware Workspace ONE is available:

As a cloud service
On-premises
Hybrid

VMware Workspace ONE Key Features

Simple app authentication: VMware Workspace ONE allows end-users to have password-less single sign-on, giving them access to virtually any app (mobile apps, web apps, cloud apps, and Windows apps).
Unified Endpoint Management options: VMware Workspace ONE aims to support all devices, offering convenience, access, security, and management that will work for any business.
Conditional access: VMware Workspace ONE provides a powerful policy engine to help you make dynamic decisions regarding end-user access rights and to protect sensitive information.
Automated app management: With VMware Workspace ONE the application delivery process can be automated, which improves security and compliance. Software packages can be automatically installed, updated, and removed, and automated workflows can also be created.

VMware Workspace ONE Benefits

Some of the benefits of using VMware Workspace ONE include:

Less IT intervention necessary: Because VMware Workspace ONE has simple app authentication, end-users can help themselves by selecting the applications they need rather than having IT intervene.
Smoother employee onboarding: Transform employee onboarding by enabling self-service access to the apps your end-users need to complete their job duties.
Compliance: VMware Workspace ONE helps end-users reach compliance by using advanced device restrictions.
Real-time visibility: You can have real-time visibility with application, device, and console events that provide detailed information for system monitoring. You can also view logs in the console or export pre-defined reports.

Workspace ONE Components

Workspace ONE Access
Workspace ONE UEM
VMware Workspace ONE® Intelligence
VMware Unified Access Gateway
Workspace ONE Intelligent Hub

Reviews from Real Users

Below is some feedback from our PeerSpot users who are currently using the solution:

PeerSpot user Patrick B., Cybersecurity Architect at a tech services company, says, "Its UI is extremely easy to use whether you're an advanced user or a novice user. When I first opened it up and had to learn the product, I was easily a novice. By the end of the third month, I was digging into the backend of the system and using it as a highly advanced user to accomplish what I needed to accomplish, and I was able to do it through the UI mostly."

Roshan T., Partner Manager North America at a tech company, mentions how satisfied he is with the product, saying, "You can put all your applications on a mobile device, be it a phone or tablet. It is secure and easy to use. Because it is centrally managed, you don't have to do any configuration on the phone. I just got the phone and connected to the central applications. I just downloaded one thing and everything got rolled out. Email, calendar, and other things were deployed centrally. If you don't have AirWatch, you have to configure your phone manually. For example, you need to deploy and configure your email manually and then synchronize everything. It is much simpler when a mobile device is centrally managed."

Omnissa

Sample Customers

Mitchells and Buzzers, Callaway

Ashcourt Rowan, EMC Professional Services, Itochu, MBDA, North Hennepin Community College, PGGM, Rohde & Schwarz, US Navy

Australian Sports Commission, Stockport NHS Foundation Trust, Lomond School, Merck, United Bank, Medical College of Wisconsin, Latymer Upper School, 2gether NHS Foundation Trust, Dowling Aaron Inc., Trillium Lakelands District School Board, Harrogate Grammar School, Duke University Football, Delta Air Lines, Adventist Health System, Giochi Preziosi, Cramlington Learning Village, Intermountain Healthcare, Safexpress, TAG Aviation

Buyer's Guide

BlackBerry Enterprise Mobility Suite vs. Workspace ONE UEM

September 2025

Free Report: BlackBerry Enterprise Mobility Suite vs. Workspace ONE UEM

Find out what your peers are saying about BlackBerry Enterprise Mobility Suite vs. Workspace ONE UEM and other solutions. Updated: September 2025.

DOWNLOAD NOW

872,778 professionals have used our research since 2012.

See our BlackBerry Enterprise Mobility Suite vs. Workspace ONE UEM report.

See our list of best Enterprise Mobility Management (EMM) vendors.

We monitor all Enterprise Mobility Management (EMM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.