Feature Control (Android Enterprise Corporate Personal)

For security-conscious organizations where privacy and information security concerns require controlling mobile data and other features, SOTI MobiControl provides diverse on-device restrictions. These include blocking certain device communications, similar to firewalls and more. You can configure feature control when:

You may also selectively turn off device features with the Feature Control profile configuration. Applying the configuration at the individual or group level creates custom profiles for different users and locations in an organization. For example, turning Bluetooth and infrared ports on or off determines if device users can beam business cards, applications, or documents to one another.

Device Functionality

Features


Feature	Description	Profile
Allow Camera	When enabled, the device user can use the camera. Note: If disabled, SOTI MobiControl prevents all apps in the Work profile from launching the camera. Important: This feature is available and applies to Android devices OS 6.0 or later.	W
Allow Screen Capture	When enabled, device users can save images or recordings of the display.	W
Allow Factory Reset	When enabled, device users can erase all applications, settings, and data from the phone's internal storage. Restriction: Not supported for AMAPI-enrolled devices.	P, W Restriction: Not available on Android 11 COPE devices.
Allow Safe Boot	When enabled, you can reboot devices into safe boot mode. However, SOTI MobiControl disables third-party software in a safe boot. Important: This feature is available and applies to Android devices OS 6.0 or later. Restriction: Not supported for AMAPI-enrolled devices.	P, W
Allow Smart Lock	When enabled, device users can use Smart Lock on Android, which enables devices to unlock without a password when they are within safe places that the device user can define. Note: If you enable Allow All Keyguard Features, Allow Smart Lock is automatically enabled. Important: This feature is available and applies to Android devices OS 6.0 or later.	P, W
Allow SMS	When enabled, the device can send and receive SMS.	P, W
Stay Awake while Charging	Determines who controls if the device remains awake while charging. Allow User to Configure: The device user can decide if the device stays awake or goes to sleep while charging. Disable: The device goes to sleep while charging (the device user can wake it up). Enable: The device stays awake while charging (and the device user can not put it to sleep). Restriction: Not supported for AMAPI-enrolled devices.	P, W
Allow Keyguard Camera	When enabled, the device user can launch the camera app from the lock screen. If you enable Allow All Keyguard Features, Allow Keyguard Camera is automatically enabled too.	P, W
Allow Printing for Work Profile	When enabled, device users can use the device's printing capabilities. Important: This feature is available and applies to Android devices OS 9.0 or later. Restriction: Not supported for AMAPI-enrolled devices.	W

Settings


Feature	Description	Profile
Allow Outgoing Cellular Phone Calls	When enabled, device users can not perform outbound calls. Internet or Voice-over-IP (VoIP) are not blocked.	P, W
Allow Skip App First Use Hints	When enabled, when a supported app launches for the first time, it skips any introductory hints or tutorials. Note: Not available on Android 11 COPE devices. Restriction: Not supported for AMAPI-enrolled devices.	P, W
Location Accuracy	Determines the accuracy of the location reporting data and who controls that accuracy. Allow User to Configure: The device user sets the accuracy level for their location reporting. Disable: SOTI MobiControl turns off location services for the entire device, and device users are unable to switch it back on. High Accuracy: SOTI MobiControl sets location services to High Accuracy mode and uses GPS, Wi-Fi, and cellular networks for location data. The user can not change the setting. GPS Only: SOTI MobiControl sets location services to Device Only mode and uses GPS for location data. The user can not change the setting. Battery Saving: SOTI MobiControl sets location services to Battery Saving mode and uses Wi-Fi and cellular networks for location data. The user can not change the setting. Restriction: Not supported for AMAPI-enrolled devices.	P, W
Allow Date Time Management	When enabled, device users can configure the device's date, time, and timezone settings. Important: This feature is available and applies to Android devices OS 9.0 or later.	P, W
Allow Screen Timeout Management	When enabled, device users can configure screen timeout settings. Important: This feature is available and applies to Android devices OS 9.0 or later. Note: Not available on Android 11 COPE devices. Restriction: Not supported for AMAPI-enrolled devices.	P, W
Allow Brightness Configuration Management	When enabled, device users can configure brightness settings. Important: This feature is available and applies to Android devices OS 9.0 or later. Note: Not available on Android 11 COPE devices. Restriction: Not supported for AMAPI-enrolled devices.	P, W
Allow Location Sharing for Work Profile	When enabled, you can enable location sharing for all managed profile apps. Apps running in the Work profile are unable to use device location information.	W

Connectivity

Network Connections


Feature	Description	Profile
Allow Tethering Management	When enabled, device users can configure their device's tethering (sharing a mobile device's data connection with another device) settings. Available on Managed Device only.	P, W
Allow Bluetooth Management	When enabled, device users can configure their Bluetooth settings. Available on Managed Device only.	P, W
Allow Wi-Fi Management	When enabled, device users can configure Wi-Fi configurations. Available on Managed Device only. Allowed: Users can configure the device's Wi-Fi configurations. Restricted: Users can only configure the device's Wi-Fi configurations not created by SOTI MobiControl. Note: Restricted is not supported for AMAPI-enrolled devices. None: Users can not configure the device's Wi-Fi configurations.	P, W
Allow VPN Management	When enabled, device users can configure their VPN settings. Available on Managed Device only.	P, W Note: Not available on Android 11 COPE devices.
Allow Network Settings Reset	When enabled, device users can reset their network configurations from their settings. Important: This feature is available and applies to Android devices OS 6.0 or later. Available on Managed Device only. Note: Not supported for AMAPI-enrolled devices.	P, W Note: Not available on Android 11 COPE devices.
Minimum Wi-Fi Security Level	Set the minimum Wi-Fi security level that the device can connect to. For example, if you set the minimum Wi-Fi security level to WPA, the device can not connect to a WEP network. Available on Managed Device only.	P, W
Data Roaming	Determines who controls the data roaming settings on the device. Allow User to Configure: The device user can choose whether to turn data roaming on or off. Disable: SOTI MobiControl disables data roaming on the device, and the device user can not turn it back on. Enable: SOTI MobiControl enables data roaming on the device, and the device user can not turn it off. Note: Enable is not supported for AMAPI-enrolled devices. Available on Managed Device only.	P, W
Bluetooth	Determines who has control over the Bluetooth setting. Allow User to Configure: The device user can switch Bluetooth setting on or off Disable: SOTI MobiControl disable Bluetooth on the device and the device user can not enable it. Enable: SOTI MobiControl enables Bluetooth on the device, and the device user can not disable it. Restriction: Enable is not supported for AMAPI-enrolled devices. Available on Managed Device only.	P, W
Wi-Fi	Determines who controls the Wi-Fi connection. Allow User to Configure: The device user can switch networks and turn Wi-Fi connectivity on and off. Disable: Completely disables Wi-Fi connectivity Enable: Wi-Fi connectivity is active, but the device user can not turn it off Available on Managed Devices only Note: Not supported for AMAPI-enrolled devices.	P, W

Security

Security Options


Feature	Description	Profile
Allow All Keyguard Features	When enabled, device users can use keyguard features on the lock screen. Keyguard features include fingerprint authentication, notification viewing, smart lock, and camera access. Enabling Allow All Keyguard Features automatically enables other keyguard options.	P, W
Allow Fingerprint Authentication	When enabled, device users can use Google's fingerprint authentication framework to secure their devices. If you enable the Allow All Keyguard Features feature control option, Allow Fingerprint Authentication automatically enables too. Important: This feature is available and applies to Android devices OS 6.0 or later.	P, W
Allow All Keyguard Notifications	When enabled, all notifications on secure lock screens are visible. If you enable the Allow All Keyguard Features feature control option, Allow All Notifications automatically enables too.	P, W
Allow Account Creation For Personal	Specify whether device users can add new personal accounts to the device. Select an option from the list: All: enables the creation of any type of account, Google accounts included All Accounts except Google Account: enables the creation of non-Google accounts No Accounts: prevents device users from creating any new accounts on the device This does not remove any existing accounts from the device. SOTI MobiControl selects All by default.	P
Allow Account Creation For Work	Specify whether device users can add new work accounts to the device. Select an option from the list: All: enables the creation of any type of account, Google accounts included All Accounts except Google Account: enables the creation of non-Google accounts No Accounts: prevents device users from creating any new accounts on the device This does not remove any existing accounts from the device. SOTI MobiControl selects All by default.	W
Allow Doze Mode	When enabled, the device can restrict the SOTI MobiControl Android Device Agent for battery optimization. Note: Disabling this option negates any battery optimizations provided by doze mode and uses extra battery power to stay connected. Note: Not supported for AMAPI-enrolled devices.	P, W
Always On VPN	Direct all network traffic on the device through a specified VPN. Enter the package name of the VPN app.	P, W
Allow All System UI	When enabled, system UI alerts appear to device users. This includes toast messages, phone activities (including priority), system alerts, system errors, and system overlays. Available on Managed Devices only. Note: Not supported for AMAPI-enrolled devices.	P, W
Allow Verify Apps Enforcement	When enabled, the device user can change the Scan device for security threats option within the Google Play Store's Play Protect settings.	P, W
Play Integrity Attestation Frequency	When enabled, the device performs the SafetyNet check at every device check in, in addition to once daily.	P, W

Data Protection


Feature	Description	Profile
Allow Copy/Paste between Work and Personal	When enabled, device users can copy text or images between the Work and Personal profiles.	W
Allow Sensitive Notifications	When enabled, notifications from Android Enterprise Apps display all their details when they appear on secure lock screens. If you enable Allow All Keyguard Features feature control option, Allow Sensitive Notifications automatically enables too. Important: This feature is available and applies to Android devices OS 6.0 or later.	P, W
Allow Uninstallation of Managed Applications	When enabled, device users can uninstall any managed applications.	W
Allow Third Party Input Methods	When enabled, device users can enable third-party input methods such as keyboards on their devices.	P, W
Allow Caller ID Information for Work Profile Contacts	When enabled, device users can see Caller ID information for calls from contacts saved within the Work profile.	W
Allow Installation from Unknown Sources	When enabled, device users can install apps other than those from the Google Play store.	W
Allow Installation from Unknown Sources on Personal	When enabled, device users can install apps that are not from the Google Play store on the personal profile of the device. Important: This feature is available and applies to Android devices OS 10.0 or later.	P
Allow Sharing from Work Profile to Personal	When enabled, device users can use an app's share function to share between apps on the Work profile and apps on the personal profile. Important: This feature is available and applies to Android devices OS 5.1.1 or later.	W
Allow Outgoing NFC	When enabled, devices users can use NFC to send data (only applies to apps in the Work Profile). Note: For AMAPI-enrolled devices, this option does not impact the NFC option under Settings. Disabling Outgoing NFC impacts the file transfer process via the Android Beam only for the Work profile and not for the Personal profile.	W
USB Debugging	Determines who controls the device's ability to enter USB Debugging mode. Allow User to Configure: The device can enter and exit USB Debugging mode at any point. Disable: Device users can never enter USB Debugging mode. Enable: Device users can enter USB Debugging mode. Note: Enable is not supported for AMAPI-enrolled devices.	P, W
Allow USB File Transfer and USB Storage	When enabled, device users can transfer data using a USB connection or save to a USB storage device. SOTI MobiControl enables this option by default. Note: AMAPI-enrolled devices have deprecated the `usbMassStorageEnabled` property.	P, W
Allow Bluetooth Contact Sharing	When enabled, device users can use Bluetooth to share contact information. Important: This feature is available and applies to Android devices OS 6.0 or later.	P, W
Allow Backup Service	When enabled, device users can control whether the backup service (which manages both backup and restore services) is on or off. Note: Not supported for AMAPI-enrolled devices.	P, W

Policy Messaging

Policy messaging applies to both personal and work profiles.

Restriction Policy

Enter the message that should appear to device users when they try to perform an action blocked by feature control.

Note: If you leave this field empty, the following default message appears to device users:

This
					action is disabled by SOTI MobiControl. Contact your
						organization's administrator to learn more.

Important: This feature is available and applies to Android devices OS 7.0 or later.

Device Admin Description

Enter the description that should appear if the user presses the more prompt on the restriction policy.

Important: This feature is available and applies to Android devices OS 7.0 or later.