Deploy a restrictions payload for added security on Android for Work devices. Restrictions payloads devices can disable end user access to device features to ensure devices are not tampered with.

To create a restrictions profile:

  1. Navigate to Devices > Profiles & Resources > Profiles > Add > Add Profile > Android.
  2. Select Android for Work.
  3. Configure the profile's General settings as appropriate.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  4. Select the Restrictions profile to configure the settings including:

    Settings Description
    Device Functionality Device-level restrictions can disable core device functionality such as the camera, screen capture and factory reset to help improve productivity and security. For example, disabling the camera protects sensitive materials from being photographed and transmitted outside of your organization. Prohibiting device screen captures helps protect the confidentiality of corporate content on the device.
    Application Application-level restrictions can disable certain applications such as YouTube, Google Play Store and native browser, which enables you to enforce adherence to corporate policies for device usage.
    Sync and Storage Control how information is stored on devices, allowing you to maintain the highest balance of productivity and security. For example disabling Google or USB Backup keeps corporate mobile data on each managed device and out of the wrong hands.
    Network Prevent devices from accessing Wi-Fi and data connections to ensure that end users are not viewing sensitive information through an insecure connection.
    Work and Personal

    Determine how information is accessed or shared between personal container and work container. These settings apply to the Work Profile Mode only.

  1. Select Save & Publish to assign the profile to associated devices.