{"id":1974,"date":"2024-03-26T12:02:56","date_gmt":"2024-03-26T11:02:56","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/?post_type=knowledgebase&p=1974"},"modified":"2024-04-30T13:54:33","modified_gmt":"2024-04-30T11:54:33","slug":"restrictions","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/android-enterprise-container-configuration\/security-management\/restriction-settings\/restrictions\/","title":{"rendered":"Restrictions"},"content":{"rendered":"\n

Here, a variety of things can be restricted and blocked.<\/p>\n\n\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Compliance Enforcement<\/p>
\n <\/td>


\n

Mode Prompt User – User will be prompted to fulfill the necessary actions.<\/p>
\n

Mode Lock-Down Container – Hide all apps until all requirements are fulfilled<\/p>
\n <\/td>\n<\/tr>\n


\n

Runtime Permission Policy<\/p>
\n <\/td>


\n

Prompt user for new permission requests<\/p>
\n

Always grant new new permission requests<\/p>
\n

Always deny new permission requests<\/p>
\n

Warning: Some Apps have problems recognizing the permissions if these are set automatically. If you always grant permissions and encounter problems with apps saying that permissions are missing, set this to “prompt user” and re-install the app<\/p>
\n <\/td>\n<\/tr>\n


\n

Allow outgoing clipboard<\/p>
\n <\/td>


\n

Allows copy and pasting from inside the container to the outside<\/p>
\n <\/td>\n<\/tr>\n


\n

Allow Caller ID Resolution<\/p>
\n <\/td>


\n

Shows the name for an incoming call based on contacts in the container<\/p>
\n <\/td>\n<\/tr>\n


\n

Allow Contact Search Resolution<\/p>
\n <\/td>


\n

Allows to search for names in the container contacts when making calls<\/p>
\n <\/td>\n<\/tr>\n


\n

Allow Bluetooth Contact Sharing<\/p>
\n <\/td>


\n

Allows access to container contact in a car<\/p>
\n <\/td>\n<\/tr>\n


\n

Disallow Outgoing NFC Beam<\/p>
\n <\/td>


\n

Disables NFC for the Container<\/p>
\n <\/td>\n<\/tr>\n


\n

Allow Unknown Sources<\/p>
\n <\/td>


\n

If enabled, users can sideload Apps by installing an .apk file.<\/p>
\n <\/td>\n<\/tr>\n


\n

Allow USB Debugging<\/p>
\n <\/td>


\n

If enabled, users can enable USB Debugging.<\/p>
\n <\/td>\n<\/tr>\n


\n

Disallow Account Modification<\/p>
\n <\/td>


\n

Disallows the creation, deletion and modification to Accounts in the container<\/p>
\n

Keep in mind that some apps need to create or modify accounts to work as expected<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Work Profile Restrictions. Available only on Android 11 devices and higher, with Enhanced Work Profile<\/strong><\/p>
\n <\/td>\n<\/tr>\n


\n

Disallow Camera<\/p>
\n <\/td>


\n

Specifies if the camera is disallowed in the work profile.<\/p>
\n <\/td>\n<\/tr>\n


\n

Disallow Bluetooth<\/p>
\n <\/td>


\n

Specifies if bluetooth is disallowed in the work profile.<\/p>
\n <\/td>\n<\/tr>\n


\n

Enable Factory Reset Protection<\/p>
\n <\/td>


\n

Activate this to override the Factory Reset Protection of Android to the Google Account you defined in “General Settings” \u2192 “Android Configuration” \u2192 “Android Enterprise” \u2192 “Factory Reset Protection” If this is enabled and you reset the device, you will have to provide the configured Google Account to setup the device again.<\/p>
\n <\/td>\n<\/tr>\n


\n

Control OS Update<\/p>
\n <\/td>


\n

Enable this to set the update behavior to automatic, windowed or postponed.<\/p>
\n <\/td>\n<\/tr>\n


\n

Update Policy<\/p>
\n <\/td>


\n

Automatic: Install automatically as soon as an update is available. Windowed: Install automatically within a daily maintenance window. This also configures Play apps to be updated within the window. This is strongly recommended for kiosk devices because this is the only way apps persistently pinned to the foreground can be updated by Play. Postpone: Postpone automatic install up to a maximum of 30 days.<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\n\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Personal Profile Restrictions. Available only on Android 11 devices and higher, with Enhanced Work Profile<\/strong><\/p>
\n <\/td>\n<\/tr>\n


\n

Disallow Camera<\/p>
\n <\/td>


\n

Specifies if the camera is disallowed in the personal profile.<\/p>
\n <\/td>\n<\/tr>\n


\n

Disallow Bluetooth<\/p>
\n <\/td>


\n

Specifies if bluetooth is disallowed in the personal profile.<\/p>
\n <\/td>\n<\/tr>\n


\n

Allow Unknown Sources<\/p>
\n <\/td>


\n

If enabled, work profile users can sideload Apps by installing an .apk file.<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n

<\/div>\n","protected":false},"parent":1971,"menu_order":0,"template":"","class_list":["post-1974","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/1974","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":6,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/1974\/revisions"}],"predecessor-version":[{"id":6743,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/1974\/revisions\/6743"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/1971"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/media?parent=1974"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}