This list gives you an overview of all policies available in the Cortado administration portal for fully managed devices and for devices with a work profile. You can find out how to create policies and what you need to bear in mind in our help articles. You can also find information on Android settings on Google's Android help pages.
| Policy | Function | COBO | BYOD | COPE – Device | COPE – Work Profile |
| Device security | |||||
| Allow use of developer options | On/Off | x | x | ||
| Allow installation of apps from unknown sources | On/Off | x | x | x | |
| Enforce app scanning for malware | On/Off | x | x | x | |
| Allow Android Debug Bridge (ADB) | On/Off | x | |||
| Allow to reboot device in safe mode | On/Off | x | x | ||
| Allow changes to security certificates | On/Off | x | x | x | |
| Use Common Criteria mode | On/Off | x | x | ||
| Minimum integrity level (none, low, medium, high) | Selection | x | x | ||
| Action for non-compliant devices (lock device, reset device) | Selection | x | x | ||
| Password | |||||
| Force password | On/Off | x | x | x | x |
| Low (Pattern, PIN) | Selection | x | x | x | x |
| Medium (PIN: 4 digits, Password: 4 letters and digits) | Selection | x | x | x | x |
| High (PIN: 8 digits, Password: 6 letters and digits) | Selection | x | x | x | x |
| Simple password | Selection | x | x | x | x |
| Alphanumeric password (figures and characters) | Selection | x | x | x | x |
| Complex password (digit and special character) | Selection | x | x | x | x |
| Use one lock for work profile and device screen | Selection | x | x | ||
| Minimum password length | Enter value | x | x | x | x |
| Minimum number of letters | Enter value | x | x | x | x |
| Minimum number of capital letters | Enter value | x | x | x | x |
| Minimum number of lowercase letters | Enter value | x | x | x | x |
| Minimum number of no letters | Enter value | x | x | x | x |
| Minimum number of numeric characters | Enter value | x | x | x | x |
| Minimum number symbolic characters | Enter value | x | x | x | x |
| Password validity (1-730 days, or leave it empty) | Enter value | x | x | x | x |
| Maximum number of failed logins | Enter value | x | x | x | x |
| Password history | Enter value | x | x | x | x |
| Auto lock period (min.) | Enter value | x | x | x | x |
| Lock screen | |||||
| Allow lock screen features | On/Off | x | x | x | x |
| Allow use of camera | On/Off | x | x | ||
| Allow showing notifications | On/Off | x | x | ||
| Allow display of notification content | On/Off | x | x | x | |
| Allow unlocking with trusted devices (Smart Lock) | On/Off | x | x | x | x |
| Allow fingerprint authentication | On/Off | x | x | x | x |
| Apps | |||||
| Allow use of Cortado app | On/Off | x | |||
| Allow installation of apps | On/Off | x | x | x | |
| Allow uninstallation of apps | On/Off | x | x | x | |
| Allow use of Chrome | On/Off | x | x | x | x |
| Behavior on app permissions requests (Prompt, Auto deny, Auto grant) | Selection | x | x | x | |
| Allow modifications in device settings or launcher | On/Off | x | x | x | |
| Deny list apps | Enter bundle ID | x | x | x | x |
| Allow list apps | Enter bundle ID | x | x | x | |
| Allow apps to display over other apps | On/Off | x | |||
| Network & connectivity | |||||
| Allow configuration and changing Wi-Fi networks | On/Off | x | x | ||
| Allow sharing Wi-Fi networks added via MDM | On/Off | x | x | ||
| Allow changes to Wi-Fi networks added via MDM | On/Off | x | x | ||
| Allow enabling/disabling Wi-Fi | On/Off | x | x | ||
| Allow using Wi-Fi Direct | On/Off | x | x | ||
| Allow adding Wi-Fi networks | On/Off | x | x | ||
| Minimum Wi-Fi security level (None, Personal, Enterprise) | Select | x | x | ||
| Allow use of Bluetooth | On/Off | x | x | ||
| Allow configuration of Bluetooth | On/Off | x | x | ||
| Allow Bluetooth sharing | On/Off | x | x | x | x |
| Allow configuration of mobile network connections | On/Off | x | x | ||
| Allow configuration of VPN | On/Off | x | x | ||
| Allow configuration of wireless emergency alerts | On/Off | x | x | ||
| Allow configuration of hotspot & tethering | On/Off | x | x | ||
| Allow use of NFC for outgoing Android Beam | On/Off | x | x | x | x |
| Allow airplane mode | On/Off | x | x | ||
| Allow data roaming | On/Off | x | x | ||
| Allowed Wi-Fi SSIDs | Enter | x | x | ||
| Disallowed Wi-Fi SSIDs | Enter | x | x | ||
| Phone | |||||
| Allow outgoing phone calls | On/Off | x | x | ||
| Allow SMS send and receive | On/Off | x | x | ||
| Location services | |||||
| Location services (User controlled, Always ON, Always OFF) | Selection | x | |||
| Share location (not available for Android 11 or higher) | On/Off | x | |||
| Location mode (off, device only, battery saving, high accuracy) (not available for Android 11 or higher) | Selection | x | |||
| Reset options | |||||
| Allow reset to factory settings | On/Off | x | |||
| Allow resetting network settings | On/Off | x | |||
| Enable Factory Reset Protection (FRP) (Google account ID and email address) | Enter | x | x | ||
| Data leakage protection | |||||
| Allow modifying accounts | On/Off | x | x | x | |
| Allow mounting external storage media | On/Off | x | x | ||
| Allow USB mass storage | On/Off | x | |||
| Allow USB file transfer | On/Off | x | x | ||
| Allow screen capture | On/Off | x | x | x | x |
| Allow printing | On/Off | x | x | x | |
| Allow use of camera | On/Off | x | x | x | x |
| Allow copy & paste data between the work profile and personal profile | On/Off | x | x | ||
| Kiosk mode | |||||
| Enable kiosk mode | On/Off | x | |||
| Show system information (battery status, connectivity and more) | On/Off | x | |||
| Show lock screen | On/Off | x | |||
| Show global actions dialog (power menu) | On/Off | x | |||
| Show home button | On/Off | x | |||
| Show overview screen (recent apps) | On/Off | x | |||
| Show notifications in status bar | On/Off | x | |||
| Allow apps to display over other apps | On/Off | x | |||
| Recovery token | Use token | x | |||
| OS updates | |||||
| Enable restrictions | On/Off | x | x | ||
| Force installation | On/Off | x | x | ||
| Postpone installation | On/Off | x | x | ||
| Period in which the update should be executed | Enter value | x | x | ||
| Delay the installation by (30 days maximum) | Enter value | x | x | ||
| Wallpaper | |||||
| Use custom wallpaper | Upload image | x | |||
| Fit (streched, centered) | Select | x | |||
| Background color | select | x | |||
| Display settings | |||||
| Keep the screen turned on: Never | On/Off | x | |||
| while plugged in AC | On/Off | x | |||
| while plugged in USB | On/Off | x | |||
| while plugged in Wireless | On/Off | x | |||
| Sound settings | |||||
| Allow use of microphone | On/Off | x | x | ||
| Media volume in % | Enter value | x | |||
| Call volume in % | Enter value | x | |||
| Ring & notification volume in % | Enter value | x | |||
| Alarm volume in % | Enter value | x | |||
| Ringing mode (default, ringing, vibrate, silent) | Selection | x | |||
| Mute master volume (not visible in the device settings) | On/Off | x | |||
| Mute master volume | On/Off | x | |||
| Device usability | |||||
| Allow showing first use hints | On/Off | x | |||
| Allow use of status bar | On/Off | x | |||
| Allow displaying caller ID information of work profile in the personal phone app | On/Off | x | x | x | |
| Allow searching work profile contacts in the personal contacts app | On/Off | x | x | x | |
| Allow bluetooth devices to access contacts in work profile | On/Off | x | x | x | |
| Allow personal profile apps to open links from the work profile | On/Off | x | x | x | |
| Allow personal profile calendar apps to access calendar from work profile | On/Off | x | x | ||
| Restrict access to the following apps | Enter bundle ID | x | x | ||
| Connected work and personal apps | Enter bundle ID | x | x | ||
| User settings | |||||
| Allow add user | On/Off | x | |||
| Allow remove user | On/Off | x | |||
| Date & time | |||||
| Allow automatic date & time setting | On/Off | x | x | ||
| Automatic time zone | On/Off | x | x |