Feature Control (Android Enterprise Work Managed)
Use the Feature Control profile configuration to disable device features such as the camera, microphone, USB access, and many more.
Use this dialog box to configure individual device features when:
Device Functionality
Features
Allow Camera | When enabled, the device user can use the camera. Note: If
disabled, SOTI MobiControl prevents all
apps in the Work profile from launching the
camera. Important: This feature is available and applies to Android devices OS
6.0 or later. |
Allow Screen Capture | When enabled, device users can save images or recordings of the display. |
Allow Factory Reset | When enabled, device users can erase all applications,
settings, and data from the phone's internal storage. Restriction: Not supported for AMAPI-enrolled
devices. |
Allow Safe Boot | When enabled, you can reboot devices into safe boot mode.
However, SOTI MobiControl disables third-party
software in a safe boot. Important: This feature is available and applies
to Android devices OS 6.0 or later. Restriction: Not supported for AMAPI-enrolled
devices. |
Allow Smart Lock | When enabled, device users can use Smart Lock on Android,
which enables devices to unlock without a password when they are
within safe places that the device user can define. Note: If you enable Allow All
Keyguard Features, Allow Smart
Lock is automatically enabled. Important: This feature is available and applies to
Android devices OS 6.0 or later.
|
Allow SMS | When enabled, the device can send and receive SMS. |
Stay Awake while Charging | Determines who controls if the device remains
awake while charging.
Restriction: Not supported for AMAPI-enrolled
devices. |
Allow Status Bar | When enabled, you can expand the status bar to view
device notifications details. Important: This feature is available and applies
to Android devices OS 6.0 or later. |
Allow Keyguard Camera | When enabled, the device user can launch the camera
app from the lock screen. If you enable Allow All Keyguard Features, Allow Keyguard Camera is automatically enabled too. |
Allow Microphone | When enabled, the device user can use the microphone to record audio. |
Allow Airplane Mode | When enabled, device users can turn on Airplane mode.
Important: This feature is
available and applies to Android devices OS 9.0 or
later. |
Allow Ambient Display | When enabled, device users can turn on Ambient
Display. Important: This
feature is available and applies to Android devices OS 9.0
or later. |
Allow Device Volume | When enabled, the volume settings are visible to and
changeable by the device user. Important: This feature is available and applies
to Android devices OS 9.0 or later. |
Allow Printing | When enabled, device users can use the device's printing
capabilities. Important: This
feature is available and applies to Android devices OS 9.0
or later. Restriction: Not supported for
AMAPI-enrolled devices. |
Settings
Allow Certificate Management | When enabled, device users can configure stored credentials (certificates) in the device's settings. |
Allow App Management | When enabled, device users can configure or uninstall apps (and app data). This includes disabling the ability to force close an app, clear app data, app caches, and app default launch settings. |
Allow Outgoing Cellular Phone Calls | When enabled, device users can not perform outbound calls. Internet or Voice-over-IP (VoIP) are not blocked. |
Allow Skip App First Use Hints |
When enabled, when a supported app launches for the first time, it skips any introductory hints or tutorials. Note: Not available on Android 11 COPE
devices.
Restriction: Not supported for AMAPI-enrolled
devices.
|
Location Accuracy | Determines the accuracy of the location reporting data
and who controls that accuracy.
Restriction: Not supported for AMAPI-enrolled
devices. |
Allow Date Time Management | When enabled, device users can configure the
device's date, time, and timezone settings. Important: This feature is
available and applies to Android devices OS 9.0 or
later. |
Allow Screen Timeout Management | When enabled, device users can configure
screen timeout settings. Important: This feature is available and applies
to Android devices OS 9.0 or later. Note: Not
available on Android 11 COPE devices. Restriction: Not supported for AMAPI-enrolled
devices. |
Allow Brightness Configuration Management | When enabled, device users can configure
brightness settings. Important: This feature is available and applies
to Android devices OS 9.0 or later. Note: Not
available on Android 11 COPE devices. Restriction: Not supported for AMAPI-enrolled
devices. |
Connectivity
Network Connections
Allow Tethering Management | When enabled, device users can configure their
device's tethering (sharing a mobile device's data connection
with another device) settings. Available on Managed Device only. |
Allow Bluetooth Management | When enabled, device users can configure their
Bluetooth settings. Available on Managed Device only. |
Allow Wi-Fi Management | When enabled, device users can configure Wi-Fi
configurations. Available on Managed Device only.
|
Allow VPN Management | When enabled, device users can configure their VPN
settings. Available on Managed Device only. |
Allow Network Settings Reset | When enabled, device users can reset their
network configurations from their settings. Important: This feature is
available and applies to Android devices OS 6.0 or
later. Available on Managed Device only. Note: Not supported for AMAPI-enrolled
devices. |
Minimum Wi-Fi Security Level | Set the minimum Wi-Fi security level that the
device can connect to. For example, if you set the minimum Wi-Fi
security level to WPA, the device can not connect to a WEP
network. Available on Managed Device only. |
Data Roaming | Determines who controls the data roaming settings on the
device.
Available on Managed Device only. |
Bluetooth | Determines who has control over the Bluetooth setting.
Available on Managed Device only. |
Wi-Fi | Determines who controls the Wi-Fi connection.
Available on Managed Devices only Note: Not
supported for AMAPI-enrolled devices. |
Security
Security Options
Allow All Keyguard Features | When enabled, device users can use keyguard features on the lock screen. Keyguard features include fingerprint authentication, notification viewing, smart lock, and camera access. Enabling Allow All Keyguard Features automatically enables other keyguard options. |
Allow Fingerprint Authentication | When enabled, device users can use
Google's fingerprint authentication framework to secure their
devices. If you enable the Allow All Keyguard Features feature control option, Allow Fingerprint Authentication automatically enables too. Important: This feature is available and applies
to Android devices OS 6.0 or later. |
Allow All Keyguard Notifications | When enabled, all notifications on secure
lock screens are visible. If you enable the Allow All Keyguard Features feature control option, Allow All Notifications automatically enables too. |
Allow Account Creation | Specify whether device users can add new accounts
to the device. Choose an option from the list:
This does not remove any existing accounts from the device. Note: For AMAPI-enrolled devices, No
Accounts is the only option
available. |
Allow Doze Mode | When enabled, the device can restrict the SOTI MobiControl Android Device Agent for battery
optimization. Note: Disabling this option negates any battery
optimizations provided by doze mode and uses extra battery
power to stay connected. Note: Not supported for
AMAPI-enrolled devices. |
Always On VPN | Direct all network traffic on the device through a specified
VPN. Enter the package name of the VPN app. |
Allow All System UI | When enabled, system UI alerts appear to device users.
This includes toast messages, phone activities (including
priority), system alerts, system errors, and system
overlays. Available on Managed Devices only. Note: Not
supported for AMAPI-enrolled devices. |
Allow Verify Apps Enforcement | When enabled, the device user can change the Scan device for security threats option within the Google Play Store's Play Protect settings. |
Play Integrity Attestation Frequency | When enabled, the device performs the SafetyNet check at every device check in, in addition to once daily. |
Data Protection
Allow Sensitive Notifications | When enabled, notifications from Android
Enterprise Apps display all their details when they appear on
secure lock screens. If you enable Allow All Keyguard Features feature control option, Allow Sensitive Notifications automatically enables too. Important: This feature is available and applies
to Android devices OS 6.0 or later. |
Allow Uninstallation of Managed Applications | When enabled, device users can uninstall any managed applications. |
Allow Third Party Input Methods | When enabled, device users can enable third-party input methods such as keyboards on their devices. |
Allow Caller ID Information for Work Profile Contacts | When enabled, device users can see Caller ID information for calls from contacts saved within the Work profile. |
Allow Installation from Unknown Sources | When enabled, device users can install apps other than those from the Google Play store. |
Allow Multi-User Control | When enabled, device users can add secondary users or remove added secondary users. |
Allow Mounting Physical External Media | When enabled, device users can mount
physical external media (including SD cards) to their devices.
Note: This does not disable external media through the
device's charging port. See Allow USB File
Transfer and USB Storage. |
Allow Outgoing NFC | When enabled, devices users can use NFC to send data
(only applies to apps in the Work Profile). Note: For
AMAPI-enrolled devices, this option does not impact the NFC
option under Settings. Disabling Outgoing NFC impacts the
file transfer process via the Android Beam only for the Work
profile and not for the Personal profile. |
USB Debugging | Determines who controls the device's ability to enter USB
Debugging mode.
|
Allow USB File Transfer and USB Storage | When enabled, device users can transfer data
using a USB connection or save to a USB storage device.
SOTI MobiControl enables this option by default. Note: AMAPI-enrolled devices have
deprecated the usbMassStorageEnabled
property. |
Allow Backup Service | When enabled, device users can control whether the
backup service (which manages both backup and restore services)
is on or off. Note: Not supported for AMAPI-enrolled
devices. |
Policy Messaging
Restriction Policy
Enter the message that should appear to device users when they try to perform an action blocked by feature control.
This
action is disabled by SOTI MobiControl. Contact your
organization's administrator to learn more.
Device Admin Description
Enter the description that should appear if the user presses the more prompt on the restriction policy.