| Policy | Function | Fully managed devices | Work profile | Work profile on company owned devices |
| Device security | ||||
| Allow use of developer options | On/Off | x | x | |
| Allow installation of apps from unknown sources | On/Off | x | x | |
| Enforce app scanning for malware | On/Off | x | x | |
| Allow Android Debug Bridge (ADB) | On/Off | x | ||
| Allow to reboot device in safe mode | On/Off | x | x | |
| Allow changes to security certificates | On/Off | x | x | |
| Use Common Criteria mode | On/Off | x | x | |
| Action on failure of basic integrity check (Do nothing, Lock, Reset) | Selection | x | x | |
| Action on CTS Profile Match check failure (Do nothing, Lock, Reset) | Selection | x | x | |
| Password | ||||
| Force password | On/Off | x | x | x |
| Simple password | Selection | x | x | x |
| Alphanumeric password (figures and characters) | Selection | x | x | x |
| Complex password (digit and special character) | Selection | x | x | x |
| Use one lock for work profile and device screen | Selection | x | ||
| Minimum password length | Enter value | x | x | x |
| Minimum number of letters | Enter value | x | x | x |
| Minimum number of capital letters | Enter value | x | x | x |
| Minimum number of lowercase letters | Enter value | x | x | x |
| Minimum number of no letters | Enter value | x | x | x |
| Minimum number of numeric characters | Enter value | x | x | x |
| Minimum number symbolic characters | Enter value | x | x | x |
| Password validity (1-730 days, or leave it empty) | Enter value | x | x | x |
| Maximum number of failed logins | Enter value | x | x | x |
| Password history | Enter value | x | x | x |
| Auto lock period (min.) | Enter value | x | x | x |
| Lock screen | ||||
| Allow lock screen features | On/Off | x | x | x |
| Allow use of camera | On/Off | x | x | |
| Allow showing notifications | On/Off | x | x | |
| Allow display of notification content | On/Off | x | x | |
| Allow unlocking with trusted devices (Smart Lock) | On/Off | x | x | x |
| Allow fingerprint authentication | On/Off | x | x | x |
| Apps | ||||
| Allow use of Cortado app | On/Off | x | ||
| Allow installation of apps | On/Off | x | x | |
| Allow uninstallation of apps | On/Off | x | x | |
| Allow use of Chrome | On/Off | x | x | x |
| Behavior on app permissions requests (Prompt, Auto deny, Auto grant) | Selection | x | x | |
| Allow modifications in device settings or launcher | On/Off | x | x | |
| Deny list apps | Enter bundle ID | x | x | x |
| Allow list apps | Enter bundle ID | x | x | |
| Allow apps to display over other apps | On/Off | x | ||
| Network & connectivity | ||||
| Allow configuration and changing Wi-Fi networks | On/Off | x | x | |
| Allow changes to Wi-Fi networks added via MDM | On/Off | x | x | |
| Allow use of Bluetooth | On/Off | x | x | |
| Allow configuration of Bluetooth | On/Off | x | x | |
| Allow Bluetooth sharing | On/Off | x | x | x |
| Allow configuration of mobile network connections | On/Off | x | x | |
| Allow configuration of VPN | On/Off | x | x | |
| Allow configuration of wireless emergency alerts | On/Off | x | x | |
| Allow configuration of hotspot & tethering | On/Off | x | x | |
| Allow use of NFC for outgoing Android Beam | On/Off | x | x | x |
| Allow airplane mode | On/Off | x | x | |
| Allow data roaming | On/Off | x | x | |
| Phone | ||||
| Allow outgoing phone calls | On/Off | x | x | |
| Allow SMS send and receive | On/Off | x | x | |
| Location services | ||||
| Location services (User controlled, Always ON, Always OFF) | Selection | x | ||
| Share location (not available for Android 11 or higher) | On/Off | x | ||
| Location mode (off, device only, battery saving, high accuracy) (not available for Android 11 or higher) | Selection | x | ||
| Reset options | ||||
| Allow reset to factory settings erlauben | On/Off | x | ||
| Allow resetting network settings | On/Off | x | ||
| Enable Factory Reset Protection (FRP) (Google account ID and email address) | Enter | x | x | |
| Data leakage protection | ||||
| Allow modifying accounts | On/Off | x | x | |
| Allow mounting external storage media | On/Off | x | x | |
| Allow USB mass storage | On/Off | x | ||
| Allow USB file transfer | On/Off | x | x | |
| Allow screen capture | On/Off | x | x | x |
| Allow printing | On/Off | x | x | |
| Allow use of camera | On/Off | x | x | x |
| Allow copy & paste data between the work profile and personal profile | On/Off | x | ||
| Kiosk mode | ||||
| Enable kiosk mode | On/Off | x | ||
| Show system information (battery status, connectivity and more) | On/Off | x | ||
| Show lock screen | On/Off | x | ||
| Show global actions dialog (power menu) | On/Off | x | ||
| Show home button | On/Off | x | ||
| Show overview screen (recent apps) | On/Off | x | ||
| Show notifications in status bar | On/Off | x | ||
| Allow apps to display over other apps | On/Off | x | ||
| Recovery token | Use token | x | ||
| OS updates | ||||
| Enable restrictions | On/Off | x | x | |
| Force installation | On/Off | x | x | |
| Postpone installation | On/Off | x | x | |
| Period in which the update should be executed | Enter value | x | x | |
| Delay the installation by (30 days maximum) | Enter value | x | x | |
| Wallpaper | ||||
| Use custom wallpaper | Upload image | x | ||
| Fit (streched, centered) | Select | x | ||
| Background color | select | x | ||
| Display settings | ||||
| Keep the screen turned on: Never | On/Off | x | ||
| while plugged in AC | On/Off | x | ||
| while plugged in USB | On/Off | x | ||
| while plugged in Wireless | On/Off | x | ||
| Sound settings | ||||
| Allow use of microphone | On/Off | x | x | |
| Media volume in % | Enter value | x | ||
| Call volume in % | Enter value | x | ||
| Ring & notification volume in % | Enter value | x | ||
| Alarm volume in % | Enter value | x | ||
| Ringing mode (default, ringing, vibrate, silent) | Selection | x | ||
| Mute master volume (not visible in the device settings) | On/Off | x | ||
| Mute master volume | On/Off | x | ||
| Device usability | ||||
| Allow showing first use hints | On/Off | x | ||
| Allow use of status bar | On/Off | x | ||
| Allow displaying caller ID information of work profile in the personal phone app | On/Off | x | x | |
| Allow searching work profile contacts in the personal contacts app | On/Off | x | x | |
| Allow bluetooth devices to access contacts in work profile | On/Off | x | x | |
| Allow personal profile apps to open links from the work profile | On/Off | x | x | |
| Allow personal profile calendar apps to access calendar from work profile | On/Off | x | ||
| Restrict access to the following apps | Enter bundle ID | x | ||
| Connected work and personal apps | Enter bundle ID | x | ||
| User settings | ||||
| Allow add user | On/Off | x | ||
| Allow remove user | On/Off | x | ||
| Date & time | ||||
| Allow automatic date & time setting | On/Off | x | x | |
| Automatic time zone | On/Off | x | x |
Cortado Support