The Application Control profile allows you to blacklist applications and prevent uninstalling important apps. While the compliance engine can send alerts and takes administrative actions when a user installs or uninstalls certain applications, Application Control prevents users from even making those changes.
There is no whitelisting option in Android Application Control profile since by default only apps approved by the admin will display in the Play Store. For example, you can automatically push the browser of your choice to the device as a managed app and add it to the required apps Application Group. This setup combined with enabling the Prevent Un-Installation of Required Apps option in the Application Control profile prevents uninstalling the browser and any other required apps configured in the Application Group.
For more information on Application Groups, see the Mobile Application Management Documentation.