Deploy a restrictions payload for added security on Android devices. Restrictions payloads devices can disable end user access to device features to ensure devices are not tampered with.

To create a restrictions profile:

  1. Navigate to Devices > Profiles & Resources > Profiles > Add > Add Profile > Android.
  2. Configure the profile's General settings as appropriate.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  3. Select the Restrictions profile to configure the settings including:

    Settings Description
    Device Functionality Device-level restrictions can disable core device functionality such as the camera, screen capture and factory reset to help improve productivity and security. For example, disabling the camera protects sensitive materials from being photographed and transmitted outside of your organization. Prohibiting device screen captures helps protect the confidentiality of corporate content on the device.
    Application Application-level restrictions can disable certain applications such as YouTube, Google Play Store and native browser, which enables you to enforce adherence to corporate policies for device usage.
    Sync and Storage Control how information is stored on devices, allowing you to maintain the highest balance of productivity and security. For example disabling Google or USB Backup keeps corporate mobile data on each managed device and out of the wrong hands.
    Network Prevent devices from accessing Wi-Fi and data connections to ensure that end users are not viewing sensitive information through an insecure connection.
    Work and Personal

    Determine how information is accessed or shared between personal container and work container. These settings apply to the Work Profile Mode only.

    Samsung Knox

    Allows you to enable restrictions specifically for Android devices running Samsung Knox. This section of settings only applies when OEM Settings field in the General profile is toggled to enabled.

    This section is only available when OEM Settings in the General Profile is enabled and Samsung is selected from the Select OEM field.

  1. Select Save & Publish to assign the profile to associated devices.