Feature Control: Android Enterprise

Use this dialog box to configure individual device features.

Hardware

Bluetooth Determines who has control over the Bluetooth setting of the device.
  • Allow User to Configure: Device user can switch Bluetooth setting on or off
  • Disable: Bluetooth is disabled on device and device user cannot enable it
  • Enable: Bluetooth is enabled on device and device user cannot disable it

Available on Managed Device only.

Disable Camera When enabled, the device loses camera functionality. All apps in the Work profile will be prevented from launching the camera

Android OS compatibility: 6.0 or later.

Available on Managed Profile only.

Disable Screen Capture When enabled, device users cannot take and save an image or a recording of the device's display.
Disable Factory Reset When enabled, device users cannot complete a factory reset of the device through the settings menu. Factory reset is still possible using hardware key combinations.

Available on Managed Device only.

Disable Safe Boot When enabled, devices cannot be rebooted into safe boot mode (all third-party software is disabled in safe boot).

Android OS compatibility: 6.0 or later.

Available on Managed Device only.

Disable Smart Lock When enabled, device users cannot use Smart Lock on Android which allows devices to unlock without a password when they are within 'safe' places that the device user sets.

If the Disable All Keyguard Features feature control option is enabled, Disable Smart Lock will be automatically enabled too.

Android OS compatibility: 6.0 or later.

Available on Managed Profile only.

Disable SMS When enabled, the device cannot send or receive SMS.

Available on Managed Device only.

WiFi Determines who controls the WiFi connection.
  • Allow User to Configure: Device user can switch networks and turn WiFi connectivity on and off
  • Disable: WiFi connectivity is completely disabled
  • Enable: WiFi connectivity is active but cannot be turned off by the device user

Available on Managed Devices only

Stay Awake while Charging Determines who controls if the device remains awake while it is charging.
  • Allow User to Configure: Device user can decide if device stays awake or goes to sleep while it is charging
  • Disable: Device goes to sleep while it is charging (the device user can wake it up)
  • Enable: Device stays awake while it is charging (and device user cannot put it sleep)

Available on Managed Device only

Location Accuracy Determines the accuracy of the location reporting data and who controls that accuracy.
  • Allow User to Configure: Device user sets the level of accuracy for the location reporting of their device
  • Disable: Location Services are turned off for the entire device and device users are unable to switch it back on
  • High Accuracy: Location services are set to "High Accuracy Mode" and use GPS, WiFi, and Cellular Network for location data. Device user cannot modify the setting
  • GPS Only: Location services are set to "Device only" mode and uses GPS for location data. Device user cannot modify the setting
  • Battery Saving: Location services are set to "Battery Saving" Mode" and uses WiFi and Cellular networks for location data. Device user cannot modify the setting

Available on Managed Device only

Disable Status Bar When enabled, the status bar cannot be expanded to view the details of device notifications.

Android OS compatibility: 6.0 or later.

Available on Managed Device only.

Disable Keyguard Camera When enabled, the device user cannot launch the camera app from the lock screen.

If the Disable All Keyguard Features feature control option is enabled, Disable Keyguard Camera will be automatically enabled too.

Available on Managed Device only.

Cellular Data and Roaming

Data Roaming Determines who controls the data roaming settings on the device.
  • Allow User to Configure: Device user can choose whether to turn on or off data roaming on the device
  • Disable: Data roaming is disabled on the device and device user cannot turn it back on
  • Enable: Data roaming is enabled on the device and device user cannot turn it off

Available on Managed Device only.

Data Protection

Copy/Paste When enabled, device users cannot copy text or images between the Work and Personal profiles.

Available on devices with work profiles only.

Redact Notifications When enabled, notifications from Android Enterprise Apps are stripped of details when they appear on secure lock screens.

If the Disable All Keyguard Features feature control option is enabled, Redact Notifications will be automatically enabled too.

Android OS compatibility: 6.0 or later.

Available on Managed Profile only.

Disable Managed App Uninstallation When enabled, device users cannot uninstall any managed applications.
Disable Third Party Input Methods When enabled, device users cannot enable additional third-party input methods such as keyboards on their devices. Third-party input methods that are already enabled can still be used.
Disable Caller ID Information for Work Contacts When enabled, device user cannot see Caller ID information for calls from contacts saved within the Work profile.
Disable Installation from Unknown Sources When enabled, device users cannot install apps that are not from the Google Play store.

Available on Managed Device only.

Disable Multi-User Control When enabled, device users cannot add (or remove previously added) secondary users.

Available on Managed Device only.

Disable Mounting SD Card When enabled, devices cannot mount an SD card to their device. SD cards that already mounted remain connected.

Available on Managed Device only.

Allow Sharing from Work to Personal Profile When enabled, device users can use an app's Share function to share between apps on the Work profile to apps on the Personal profile.

Android OS compatibility: 5.1.1 or later.

Available on Managed Profile only.

Disable Outgoing NFC When enabled, devices users cannot use NFC to send data (only applies to apps in the Work Profile).

Available on Managed Profile only.

Disable Bluetooth Contact Sharing When enabled, device users cannot use Bluetooth to share contact information.

Android OS compatibility: 6.0 or later.

Available on Managed Profile only.

Disable USB Debugging Determines who controls the device's ability to enter USB Debugging Mode.
  • Allow User to Configure: Device can enter and exit USB Debugging Mode at will
  • Disable: Device user can never enter USB Debugging Mode
  • Enable: Device use can enter USB Debugging Mode

Available on Managed Device only.

Disable USB File Transfer When enabled, device users cannot transfer data using a USB connection.

Available on Managed Device only.

Settings

Disable Certificate Management When enabled, device users cannot modify stored Credentials (Certificates) in the device's settings.

Available on Managed Device only.

Disable Tethering Management When enabled, device users cannot modify their device's tethering (sharing a mobile device's data connection with another device) settings.

Available on Managed Device only.

Disable App Management When enabled, device users cannot uninstall or modify apps (and app data). This includes disabling the ability to force close an app, clear app data, app caches, and app default launch settings.

Available on Managed Device only.

Disable Bluetooth Management When enabled, device users cannot modify their device's Bluetooth settings. Device users can still enable or disable Bluetooth.

Available on Managed Device only.

Disable WiFi Management When enabled, device users cannot modify WiFi configurations in their device's settings.

Available on Managed Device only.

Disable VPN Management When enabled, device users cannot modify their device's VPN settings.

Available on Managed Device only.

Disable Network Settings Reset When enabled, device users cannot reset their network configurations from their device's settings.

Android OS compatibility: 6.0 or later.

Available on Managed Device only.

Disable Location Sharing for Managed Profile When enabled, Location Sharing is disabled in all Managed Profile apps. Apps running in the Work profile will be unable to use device location information.

Available on Managed Profile only.

Disable Outgoing Cellular Phone Calls When enabled, device users cannot initiate outbound calls. Internet or Voice-over-IP (VOIP) are not blocked.

Available on Managed Device only.

Enforce minimum WiFi Security Level Set the minimum Wi-Fi Security Level in which the device is able to connect to. E.g. if the minimum Wi-Fi security level is set to WPA, the device will not be able to connect to a WEP network.

Available on Managed Device only.

Security

Disable All Keyguard Features When enabled, device users cannot use any keyguard features from the lockscreen. Keyguard features include fingerprint authentication, viewing of notifications, smart lock access and camera access. Enabling Disable All Keyguard Features will automatically enable the other keyguard feature control options.

Available on Managed Device only.

Disable Fingerprint Authentication When enabled, device users cannot use Google's fingerprint authentication framework to secure their devices.

If the Disable All Keyguard Features feature control option is enabled, Disable Fingerprint Authentication will be automatically enabled too.

Android OS compatibility: 6.0 or later.

Available on Managed Profile only.

Disable All Notifications When enabled, all notifications on secure lock screens are hidden from device users.

If the Disable All Keyguard Features feature control option is enabled, Disable All Notifications will be automatically enabled too.

Available on Managed Device only.

Disable Account Creation When enabled, device users cannot add new accounts to the device.