[Intro] Android - What Device Policy can I set?

The Policy can apply numerous system limitation to let the device looks like a regular device, but the end-users can only access certain functions as the company designed. With the system-level restriction of the Policy, including App usage management, various system settings, and more, you can create an exceptional secure user environment for your company-owned devices.

Before you start to design your company policy for your devices, please note:

1. If this icon shows next to an option, it means the Biz Daemon must have Device Owner permission, or the device must be enrolled via Android Enterprise for the option to affect the device.
2. If this icon shows next to an option, it means the Android System of the device must be above a certain version for the option to affect the device.
3. If this icon shows next to an option, it means some features are restricted or not supported for devices enrolled through Android Enterprise and/or Zero Touch.
4. If this icon  shows, it means the function is a complex one which needs some more explanation to set it right, please hover your mouse on the icon.

Please check this document for detailed information on the minimum system requirement of every Policy restriction.

Let us introduce briefly to you what rule you can set in every section of a Policy:

• Password: You can ask the end-user to set a password that aligns with the company standard, or you can set a password for the devices. You can also set the rule to reset the device when someone wants to breach the device.
• App Blocklist / Allowlist: Applications listed on the App Blocklist will be invisible or uninstalled on the affected devices. If the app is hidden, you are not able to access it even from the Settings application.
  If the application is listed on the App allowlist, it will be the only application that is displayed on the App drawer of the affected devices.
  Note: To ensure the stability of the Android system, system apps will remain visible when using App Allowlist.
• Restriction: You can set various restrictions for system settings here, e.g., disable reboot in safety mode, USB file transfer, access to the camera, install/uninstall an app, internet connection, etc.
• General Settings: In this section, you can set some general settings such as APN, VPN, Credential Setting, language, and audio settings.
• Kiosk Activation: You can choose to integrate the Policy with Kiosk mode here. If you are not familiar with Kiosk mode, please check this article to learn how to set up a Kiosk config file.
  Reminder: some settings in the Kiosk is overlapped with the Policy; thus, such settings will only be shown in the Policy section.

If you want to know how to create or edit a Policy Config file, please check this article.