Restrictions

Here, a variety of things can be restricted and blocked.

Edit

Compliance Enforcement



Mode Prompt User – User will be prompted to fulfill the necessary actions.


Mode Lock-Down Container – Hide all apps until all requirements are fulfilled



Runtime Permission Policy



Prompt user for new permission requests


Always grant new new permission requests


Always deny new permission requests


Warning: Some Apps have problems recognizing the permissions if these are set automatically. If you always grant permissions and encounter problems with apps saying that permissions are missing, set this to “prompt user” and re-install the app



Allow outgoing clipboard



Allows copy and pasting from inside the container to the outside



Allow Caller ID Resolution



Shows the name for an incoming call based on contacts in the container



Allow Contact Search Resolution



Allows to search for names in the container contacts when making calls



Allow Bluetooth Contact Sharing



Allows access to container contact in a car



Disallow Outgoing NFC Beam



Disables NFC for the Container



Allow Unknown Sources



If enabled, users can sideload Apps by installing an .apk file.



Allow USB Debugging



If enabled, users can enable USB Debugging.



Disallow Account Modification



Disallows the creation, deletion and modification to Accounts in the container


Keep in mind that some apps need to create or modify accounts to work as expected


Edit

Work Profile Restrictions. Available only on Android 11 devices and higher, with Enhanced Work Profile



Disallow Camera



Specifies if the camera is disallowed in the work profile.



Disallow Bluetooth



Specifies if bluetooth is disallowed in the work profile.



Enable Factory Reset Protection



Activate this to override the Factory Reset Protection of Android to the Google Account you defined in “General Settings” → “Android Configuration” → “Android Enterprise” → “Factory Reset Protection” If this is enabled and you reset the device, you will have to provide the configured Google Account to setup the device again.



Control OS Update



Enable this to set the update behavior to automatic, windowed or postponed.



Update Policy



Automatic: Install automatically as soon as an update is available. Windowed: Install automatically within a daily maintenance window. This also configures Play apps to be updated within the window. This is strongly recommended for kiosk devices because this is the only way apps persistently pinned to the foreground can be updated by Play. Postpone: Postpone automatic install up to a maximum of 30 days.


Edit

Personal Profile Restrictions. Available only on Android 11 devices and higher, with Enhanced Work Profile



Disallow Camera



Specifies if the camera is disallowed in the personal profile.



Disallow Bluetooth



Specifies if bluetooth is disallowed in the personal profile.



Allow Unknown Sources



If enabled, work profile users can sideload Apps by installing an .apk file.


This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.