| Policy | Function | Fully managed devices | Work profile | Work profile on company owned devices |
| Device security |
|
|
|
|
| Allow use of developer options | On/Off | x |
| x |
| Allow installation of apps from unknown sources | On/Off | x | x |
|
| Enforce app scanning for malware | On/Off | x | x |
|
| Allow Android Debug Bridge (ADB) | On/Off | x |
|
|
| Allow to reboot device in safe mode | On/Off | x |
| x |
| Allow changes to security certificates | On/Off | x | x |
|
| Use Common Criteria mode | On/Off | x |
| x |
| Action on failure of basic integrity check (Do nothing, Lock, Reset) | Selection | x |
| x |
Action on CTS Profile Match check failure (Do nothing, Lock, Reset)
| Selection | x |
| x |
| Password |
|
|
|
|
Force password
| On/Off | x | x | x |
| Simple password | Selection | x | x | x |
| Alphanumeric password (figures and characters) | Selection | x | x | x |
| Complex password (digit and special character) | Selection | x | x | x |
| Use one lock for work profile and device screen | Selection |
| x |
|
| Minimum password length | Enter value | x | x
| x |
| Minimum number of letters | Enter value | x | x | x |
| Minimum number of capital letters | Enter value | x | x | x |
| Minimum number of lowercase letters | Enter value | x | x | x |
| Minimum number of no letters | Enter value | x | x | x |
| Minimum number of numeric characters | Enter value | x | x | x |
| Minimum number symbolic characters | Enter value | x | x | x |
| Password validity (1-730 days, or leave it empty) | Enter value | x | x | x |
Maximum number of failed logins
| Enter value | x | x | x |
Password history
| Enter value | x
| x | x |
Auto lock period (min.)
| Enter value | x | x | x |
| Lock screen |
|
|
|
|
| Allow lock screen features | On/Off | x | x | x |
| Allow use of camera | On/Off | x |
| x |
| Allow showing notifications | On/Off | x |
| x |
| Allow display of notification content | On/Off | x | x |
|
| Allow unlocking with trusted devices (Smart Lock) | On/Off | x | x | x |
| Allow fingerprint authentication | On/Off | x | x | x |
| Apps |
|
|
|
|
| Allow use of Cortado app | On/Off | x |
|
|
| Allow installation of apps | On/Off | x | x |
|
| Allow uninstallation of apps | On/Off | x | x |
|
| Allow use of Chrome | On/Off | x | x | x |
| Behavior on app permissions requests (Prompt, Auto deny, Auto grant) | Selection | x | x |
|
| Allow modifications in device settings or launcher | On/Off | x | x |
|
| Deny list apps | Enter bundle ID | x | x | x |
| Allow list apps | Enter bundle ID | x | x |
|
| Allow apps to display over other apps | On/Off | x |
|
|
| Network & connectivity |
|
|
|
|
| Allow configuration and changing Wi-Fi networks | On/Off | x |
| x |
| Allow sharing Wi-Fi networks added via MDM | On/Off | x |
| x |
| Allow changes to Wi-Fi networks added via MDM | On/Off | x |
| x |
| Allow enabling/disabling Wi-Fi | On/Off | x |
| x |
| Allow using Wi-Fi Direct | On/Off | x |
| x |
| Allow adding Wi-Fi networks | On/Off | x |
| x |
| Minimum Wi-Fi security level (None, Personal, Enterprise) | Select | x |
| x |
| Allow use of Bluetooth | On/Off | x |
| x |
| Allow configuration of Bluetooth | On/Off | x |
| x |
| Allow Bluetooth sharing | On/Off | x | x | x |
| Allow configuration of mobile network connections | On/Off | x |
| x |
| Allow configuration of VPN | On/Off | x |
| x |
| Allow configuration of wireless emergency alerts | On/Off | x |
| x |
| Allow configuration of hotspot & tethering | On/Off | x |
| x |
| Allow use of NFC for outgoing Android Beam | On/Off | x | x | x |
| Allow airplane mode | On/Off | x |
| x |
| Allow data roaming | On/Off | x |
| x |
| Allowed Wi-Fi SSIDs | Enter | x |
| x |
| Disallowed Wi-Fi SSIDs | Enter | x |
| x |
| Phone |
|
|
|
|
| Allow outgoing phone calls | On/Off | x |
| x
|
| Allow SMS send and receive | On/Off | x |
| x |
| Location services |
|
|
|
|
| Location services (User controlled, Always ON, Always OFF) | Selection | x |
|
|
| Share location (not available for Android 11 or higher) | On/Off | x
|
|
|
| Location mode (off, device only, battery saving, high accuracy) (not available for Android 11 or higher) | Selection | x |
|
|
| Reset options |
|
|
|
|
| Allow reset to factory settings erlauben | On/Off | x |
|
|
| Allow resetting network settings | On/Off | x |
|
|
| Enable Factory Reset Protection (FRP) (Google account ID and email address) | Enter | x |
| x |
| Data leakage protection |
|
|
|
|
| Allow modifying accounts | On/Off | x | x |
|
| Allow mounting external storage media | On/Off
| x |
| x |
| Allow USB mass storage | On/Off | x |
|
|
| Allow USB file transfer | On/Off | x |
| x |
| Allow screen capture | On/Off
| x | x | x |
| Allow printing | On/Off | x | x |
|
| Allow use of camera | On/Off
| x | x | x |
| Allow copy & paste data between the work profile and personal profile | On/Off
|
| x |
|
| Kiosk mode |
|
|
|
|
| Enable kiosk mode | On/Off
| x |
|
|
| Show system information (battery status, connectivity and more) | On/Off
| x |
|
|
| Show lock screen | On/Off
| x |
|
|
| Show global actions dialog (power menu) | On/Off
| x |
|
|
| Show home button | On/Off | x |
|
|
| Show overview screen (recent apps) | On/Off | x |
|
|
| Show notifications in status bar | On/Off | x |
|
|
Allow apps to display over other apps
| On/Off
| x |
|
|
| Recovery token | Use token | x |
|
|
| OS updates |
|
|
|
|
| Enable restrictions | On/Off | x |
| x |
| Force installation | On/Off | x |
| x |
Postpone installation
| On/Off | x |
| x |
| Period in which the update should be executed | Enter value | x |
| x |
| Delay the installation by (30 days maximum) | Enter value | x |
| x |
| Wallpaper |
|
|
|
|
| Use custom wallpaper | Upload image | x |
|
|
| Fit (streched, centered) | Select | x |
|
|
| Background color | select | x |
|
|
| Display settings |
|
|
|
|
| Keep the screen turned on: Never | On/Off | x |
|
|
| while plugged in AC | On/Off | x |
|
|
| while plugged in USB | On/Off | x |
|
|
| while plugged in Wireless | On/Off | x |
|
|
| Sound settings |
|
|
|
|
| Allow use of microphone | On/Off | x |
| x |
| Media volume in % | Enter value | x |
|
|
| Call volume in % | Enter value | x |
|
|
Ring & notification volume in %
| Enter value | x |
|
|
| Alarm volume in % | Enter value | x |
|
|
| Ringing mode (default, ringing, vibrate, silent) | Selection | x |
|
|
| Mute master volume (not visible in the device settings) | On/Off | x |
|
|
| Mute master volume | On/Off | x |
|
|
| Device usability |
|
|
|
|
| Allow showing first use hints | On/Off | x |
|
|
| Allow use of status bar | On/Off | x |
|
|
| Allow displaying caller ID information of work profile in the personal phone app | On/Off |
| x | x |
| Allow searching work profile contacts in the personal contacts app | On/Off |
| x | x |
Allow bluetooth devices to access contacts in work profile
| On/Off |
| x | x |
| Allow personal profile apps to open links from the work profile | On/Off |
| x | x |
| Allow personal profile calendar apps to access calendar from work profile | On/Off |
| x |
|
| Restrict access to the following apps | Enter bundle ID |
| x |
|
| Connected work and personal apps | Enter bundle ID |
| x |
|
| User settings |
|
|
|
|
| Allow add user | On/Off | x |
|
|
| Allow remove user | On/Off | x |
|
|
| Date & time |
|
|
|
|
| Allow automatic date & time setting | On/Off | x |
| x |
| Automatic time zone | On/Off | x |
| x |