Feature Control (Android Enterprise Corporate Personal)
Use this dialog box to configure individual device features when:
Device Functionality
Features
Feature | Description | Profile |
---|---|---|
Allow Camera | When enabled, device user can use the camera.
Note: If disabled, all apps in the Work profile are prevented from launching the camera
Android OS compatibility: 6.0 or later. |
W |
Allow Screen Capture | When enabled, device users can save images or recordings of the device's display. | W |
Allow Factory Reset | When enabled, device users can erase all applications, settings and data from the phone's internal storage. |
P, W Note: Not available on Android 11 COPE devices. |
Allow Safe Boot | When enabled, devices can be rebooted into safe boot mode. All third-party software is disabled in safe boot.
Android OS compatibility: 6.0 or later. |
P, W |
Allow Smart Lock | When enabled, device users can use Smart Lock on Android which allows devices to unlock without a password when they are within 'safe' places that the device user sets.
If the Allow All Keyguard Features feature control option is enabled, Allow Smart Lock is automatically enabled too. Android OS compatibility: 6.0 or later. |
P, W |
Allow SMS | When enabled, the device can send and receive SMS. | P, W |
Stay Awake while Charging | Determines who controls if the device remains awake while it is charging.
|
P, W |
Allow Keyguard Camera | When enabled, the device user can launch the camera app from the lock screen.
If the Allow All Keyguard Features feature control option is enabled, Allow Keyguard Camera will be automatically enabled too. |
P, W |
Allow Printing for Work Profile | When enabled, device users can use the device's printing capabilities.
Requires Android 9.0 or later. |
W |
Settings
Feature | Description | Profile |
---|---|---|
Allow Outgoing Cellular Phone Calls | When enabled, device users cannot initiate outbound calls. Internet or Voice-over-IP (VOIP) are not blocked. | P, W |
Allow Skip App First Use Hints |
When enabled, when a supported app launches for the first time, it will skip any introductory hints or tutorials. Note: Not available on Android 11 COPE devices. |
P, W |
Location Accuracy | Determines the accuracy of the location reporting data and who controls that accuracy.
|
P, W |
Allow Date Time Management | When enabled, device users can modify the date time, and timezone settings on the device.
Available on Android 9.0 or later. |
P, W |
Allow Screen Timeout Management | When enabled, device users can configure screen timeout settings on the device.
Available on Android 9.0 or later. Note: Not available on Android 11 COPE devices. |
P, W |
Allow Brightness Configuration Management | When enabled, device users can configure brightness settings on the device.
Available on Android 9.0 or later. Note: Not available on Android 11 COPE devices. |
P, W |
Allow Location Sharing for Work Profile | When enabled, Location Sharing is permitted for all Managed Profile apps. Apps running in the Work profile will be unable to use device location information. | W |
Connectivity
Network Connections
Feature | Description | Profile |
---|---|---|
Allow Tethering Management | When enabled, device users can modify their device's tethering (sharing a mobile device's data connection with another device) settings.
Available on Managed Device only. |
P, W |
Allow Bluetooth Management | When enabled, device users can modify their device's Bluetooth settings.
Available on Managed Device only. |
P, W |
Allow WiFi Management | When enabled, device users can modify WiFi configurations in their device's settings.
Available on Managed Device only. |
P, W |
Allow VPN Management | When enabled, device users can modify their device's VPN settings.
Available on Managed Device only. |
P, W Note: Not available on Android 11 COPE devices. |
Allow Network Settings Reset | When enabled, device users can reset their network configurations from their device's settings.
Android OS compatibility: 6.0 or later. Available on Managed Device only. |
P, W Note: Not available on Android 11 COPE devices. |
Minimum WiFi Security Level | Set the minimum WiFi Security Level that the device can connect to. For example, if you set the minimum WiFi security level to WPA, the device will not be able to connect to a WEP network.
Available on Managed Device only. |
P, W |
Data Roaming | Determines who controls the data roaming settings on the device.
Available on Managed Device only. |
P, W |
Bluetooth | Determines who has control over the Bluetooth setting of the device.
Available on Managed Device only. |
P, W |
WiFi | Determines who controls the WiFi connection.
Available on Managed Devices only |
P, W |
Security
Security Options
Feature | Description | Profile |
---|---|---|
Allow All Keyguard Features | When enabled, device users can use keyguard features on the lockscreen. Keyguard features include fingerprint authentication, viewing of notifications, smart lock access and camera access. Enabling Allow All Keyguard Features will automatically enable the other keyguard feature control options. | P, W |
Allow Fingerprint Authentication | When enabled, device users can use Google's fingerprint authentication framework to secure their devices.
If the Allow All Keyguard Features feature control option is enabled, Allow Fingerprint Authentication will be automatically enabled too. Android OS compatibility: 6.0 or later. |
P, W |
Allow All Keyguard Notifications | When enabled, all notifications on secure lock screens are visible.
If the Allow All Keyguard Features feature control option is enabled, Allow All Notifications will be automatically enabled too. |
P, W |
Allow Account Creation For Personal | Specify whether device users can add new personal accounts to the device. Choose an option from the dropdown list
This does not remove any existing accounts from the device. All is selected by default. |
P |
Allow Account Creation For Work | Specify whether device users can add new work accounts to the device. Choose an option from the dropdown list
This does not remove any existing accounts from the device. All is selected by default. |
W |
Allow Doze Mode | When enabled, allows the device to restrict the SOTI MobiControl Android agent for battery optimization.
Note: Disabling this option negates any battery optimizations provided by doze mode and will use additional battery power to stay connected.
|
P, W |
Always On VPN | Direct all network traffic on the device through a specified VPN.
Enter the package name of the VPN app. |
P, W |
Allow All System UI | When enabled, system UI alerts appear to device users. This includes toast messages, phone activities (including priority) system alerts, system errors and system overlays.
Available on Managed Devices only. |
P, W |
Allow Verify Apps Enforcement | When enabled, the device user can change the Scan device for security threats option within the Play Protect settings of the Google Play Store. | P, W |
Perform SafetyNet Check on Device Check-in | When enabled, the SafetyNet check is performed on the device at every device check in, in addition to once daily. | P, W |
Data Protection
Feature | Description | Profile |
---|---|---|
Allow Copy/Paste between Work and Personal | When enabled, device users can copy text or images between the Work and Personal profiles. | W |
Allow Sensitive Notifications | When enabled, notifications from Android Enterprise Apps display all their details when they appear on secure lock screens.
If the Allow All Keyguard Features feature control option is enabled, Allow Sensitive Notifications will be automatically enabled too. Android OS compatibility: 6.0 or later. |
P, W |
Allow Uninstallation of Managed Applications | When enabled, device users can uninstall any managed applications. | W |
Allow Third Party Input Methods | When enabled, device users can enable additional third-party input methods such as keyboards on their devices. | P, W |
Allow Caller ID Information for Work Profile Contacts | When enabled, device user can see Caller ID information for calls from contacts saved within the Work profile. | W |
Allow Installation from Unknown Sources | When enabled, device users can install apps that are not from the Google Play store. | W |
Allow Installation from Unknown Sources on Personal | When enabled, device users can install apps that are not from the Google Play store on the personal profile of the device.
Supported on Android 10.0 or later. |
P |
Allow Sharing from Work Profile to Personal | When enabled, device users can use an app's Share function to share between apps on the Work profile to apps on the Personal profile.
Android OS compatibility: 5.1.1 or later. |
W |
Allow Outgoing NFC | When enabled, devices users can use NFC to send data (only applies to apps in the Work Profile). | W |
USB Debugging | Determines who controls the device's ability to enter USB Debugging Mode.
|
P, W |
Allow USB File Transfer and USB Storage | When enabled, device users can transfer data using a USB connection or save to a USB storage device.
This option is enabled by default. |
P, W |
Allow Bluetooth Contact Sharing | When enabled, device users can use Bluetooth to share contact information.
Android OS compatibility: 6.0 or later. |
P, W |
Allow Backup Service | When enabled, device users can turn control whether the backup service (which managers both backup and restore services) is turned on or off. | P, W |
Policy Messaging
Policy messaging applies to both personal and work profiles.
Restriction Policy
Enter the message that should appear to device users when they try to perform an action blocked by feature control.
Android OS compatibility: 7.0 or later.
Device Admin Description
Enter the description that should appear if the user presses the more prompt on the restriction policy.
Android OS compatibility: 7.0 or later.