Policy | Function | Fully managed devices | Work profile | Work profile on company owned devices |
Device security |
|
|
|
|
Allow use of developer options | On/Off | x |
| x |
Allow installation of apps from unknown sources | On/Off | x | x |
|
Enforce app scanning for malware | On/Off | x | x |
|
Allow Android Debug Bridge (ADB) | On/Off | x |
|
|
Allow to reboot device in safe mode | On/Off | x |
| x |
Allow changes to security certificates | On/Off | x | x |
|
Use Common Criteria mode | On/Off | x |
| x |
Action on failure of basic integrity check (Do nothing, Lock, Reset) | Selection | x |
| x |
Action on CTS Profile Match check failure (Do nothing, Lock, Reset)
| Selection | x |
| x |
Password |
|
|
|
|
Force password
| On/Off | x | x | x |
Simple password | Selection | x | x | x |
Alphanumeric password (figures and characters) | Selection | x | x | x |
Complex password (digit and special character) | Selection | x | x | x |
Use one lock for work profile and device screen | Selection |
| x |
|
Minimum password length | Enter value | x | x
| x |
Minimum number of letters | Enter value | x | x | x |
Minimum number of capital letters | Enter value | x | x | x |
Minimum number of lowercase letters | Enter value | x | x | x |
Minimum number of no letters | Enter value | x | x | x |
Minimum number of numeric characters | Enter value | x | x | x |
Minimum number symbolic characters | Enter value | x | x | x |
Password validity (1-730 days, or leave it empty) | Enter value | x | x | x |
Maximum number of failed logins
| Enter value | x | x | x |
Password history
| Enter value | x
| x | x |
Auto lock period (min.)
| Enter value | x | x | x |
Lock screen |
|
|
|
|
Allow lock screen features | On/Off | x | x | x |
Allow use of camera | On/Off | x |
| x |
Allow showing notifications | On/Off | x |
| x |
Allow display of notification content | On/Off | x | x |
|
Allow unlocking with trusted devices (Smart Lock) | On/Off | x | x | x |
Allow fingerprint authentication | On/Off | x | x | x |
Apps |
|
|
|
|
Allow use of Cortado app | On/Off | x |
|
|
Allow installation of apps | On/Off | x | x |
|
Allow uninstallation of apps | On/Off | x | x |
|
Allow use of Chrome | On/Off | x | x | x |
Behavior on app permissions requests (Prompt, Auto deny, Auto grant) | Selection | x | x |
|
Allow modifications in device settings or launcher | On/Off | x | x |
|
Deny list apps | Enter bundle ID | x | x | x |
Allow list apps | Enter bundle ID | x | x |
|
Allow apps to display over other apps | On/Off | x |
|
|
Network & connectivity |
|
|
|
|
Allow configuration and changing Wi-Fi networks | On/Off | x |
| x |
Allow changes to Wi-Fi networks added via MDM | On/Off | x |
| x |
Allow use of Bluetooth | On/Off | x |
| x |
Allow configuration of Bluetooth | On/Off | x |
| x |
Allow Bluetooth sharing | On/Off | x | x | x |
Allow configuration of mobile network connections | On/Off | x |
| x |
Allow configuration of VPN | On/Off | x |
| x |
Allow configuration of wireless emergency alerts | On/Off | x |
| x |
Allow configuration of hotspot & tethering | On/Off | x |
| x |
Allow use of NFC for outgoing Android Beam | On/Off | x | x | x |
Allow airplane mode | On/Off | x |
| x |
Allow data roaming | On/Off | x |
| x |
Phone |
|
|
|
|
Allow outgoing phone calls | On/Off | x |
| x
|
Allow SMS send and receive | On/Off | x |
| x |
Location services |
|
|
|
|
Location services (User controlled, Always ON, Always OFF) | Selection | x |
|
|
Share location (not available for Android 11 or higher) | On/Off | x
|
|
|
Location mode (off, device only, battery saving, high accuracy) (not available for Android 11 or higher) | Selection | x |
|
|
Reset options |
|
|
|
|
Allow reset to factory settings erlauben | On/Off | x |
|
|
Allow resetting network settings | On/Off | x |
|
|
Enable Factory Reset Protection (FRP) (Google account ID and email address) | Enter | x |
| x |
Data leakage protection |
|
|
|
|
Allow modifying accounts | On/Off | x | x |
|
Allow mounting external storage media | On/Off
| x |
| x |
Allow USB mass storage | On/Off | x |
|
|
Allow USB file transfer | On/Off | x |
| x |
Allow screen capture | On/Off
| x | x | x |
Allow printing | On/Off | x | x |
|
Allow use of camera | On/Off
| x | x | x |
Allow copy & paste data between the work profile and personal profile | On/Off
|
| x |
|
Kiosk mode |
|
|
|
|
Enable kiosk mode | On/Off
| x |
|
|
Show system information (battery status, connectivity and more) | On/Off
| x |
|
|
Show lock screen | On/Off
| x |
|
|
Show global actions dialog (power menu) | On/Off
| x |
|
|
Show home button | On/Off | x |
|
|
Show overview screen (recent apps) | On/Off | x |
|
|
Show notifications in status bar | On/Off | x |
|
|
Allow apps to display over other apps
| On/Off
| x |
|
|
Recovery token | Use token | x |
|
|
OS updates |
|
|
|
|
Enable restrictions | On/Off | x |
| x |
Force installation | On/Off | x |
| x |
Postpone installation
| On/Off | x |
| x |
Period in which the update should be executed | Enter value | x |
| x |
Delay the installation by (30 days maximum) | Enter value | x |
| x |
Wallpaper |
|
|
|
|
Use custom wallpaper | Upload image | x |
|
|
Fit (streched, centered) | Select | x |
|
|
Background color | select | x |
|
|
Display settings |
|
|
|
|
Keep the screen turned on: Never | On/Off | x |
|
|
while plugged in AC | On/Off | x |
|
|
while plugged in USB | On/Off | x |
|
|
while plugged in Wireless | On/Off | x |
|
|
Sound settings |
|
|
|
|
Allow use of microphone | On/Off | x |
| x |
Media volume in % | Enter value | x |
|
|
Call volume in % | Enter value | x |
|
|
Ring & notification volume in %
| Enter value | x |
|
|
Alarm volume in % | Enter value | x |
|
|
Ringing mode (default, ringing, vibrate, silent) | Selection | x |
|
|
Mute master volume (not visible in the device settings) | On/Off | x |
|
|
Mute master volume | On/Off | x |
|
|
Device usability |
|
|
|
|
Allow showing first use hints | On/Off | x |
|
|
Allow use of status bar | On/Off | x |
|
|
Allow displaying caller ID information of work profile in the personal phone app | On/Off |
| x | x |
Allow searching work profile contacts in the personal contacts app | On/Off |
| x | x |
Allow bluetooth devices to access contacts in work profile
| On/Off |
| x | x |
Allow personal profile apps to open links from the work profile | On/Off |
| x | x |
Allow personal profile calendar apps to access calendar from work profile | On/Off |
| x |
|
Restrict access to the following apps | Enter bundle ID |
| x |
|
Connected work and personal apps | Enter bundle ID |
| x |
|
User settings |
|
|
|
|
Allow add user | On/Off | x |
|
|
Allow remove user | On/Off | x |
|
|
Date & time |
|
|
|
|
Allow automatic date & time setting | On/Off | x |
| x |
Automatic time zone | On/Off | x |
| x |