Set Profile Policies

Enabling the install from unknown sources allows the user to install apps which are not listed on the Google Play Store. This is a security risk, since you cannot rely on Google Play Protect anymore.

If auto time is required, no user will be able set the date and time and network date and time will be used. Note: if auto time is required the user can still manually set the time zone.

Disallow data roaming

If enabled, the time zone will be automatically fetched from the network (NITZ).

Disable screen capture

Set whether the screen capture is disabled. Disabling screen capture also prevents the content from being shown on display devices that do not have a secure video output.

Disable keyguard

If disallowed, it is impossible to tap 7 times on the build number to enable the developer mode. After the first tap, a popup is displayed.

Specifies if a user is disallowed from enabling or accessing debugging features.

Enable mass storage

If enabled, the filesystem of the Android device will be accessible through USB to store any data.

Specifies if bluetooth is disallowed on the device

Disallow config mobile networks

Disallow config VPN

Specifies if a user is disallowed from configuring a VPN

Specifies that windows besides app windows should not be created

Disallow fun

Specifies if the user is not allowed to have fun

Disallow modify accounts

Specifies if a user is disallowed from adding and removing accounts, unless they are programmatically added

Disallow network reset

Specifies if a user is disallowed from resetting network settings from Settings

Disallow outgoing calls

Specifies that the user is not allowed to make outgoing phone calls

Disallow safe boot

Specifies if the user is not allowed to reboot the device into safe boot mode

Disallow set wallpaper (requires API level 24)

User restriction to disallow setting a wallpaper

Disallow SMS

Specifies that the user is not allowed to send or receive SMS messages

Disallow unmute microphone

Specifies if a user is disallowed from adjusting microphone volume

Ensure verify apps

Specifies if a user is disallowed from disabling application verification

Disallow adjust volume

Specifies if a user is disallowed from adjusting the master volume

Disallow config cell broadcasts

Specifies if a user is disallowed from configuring cell broadcasts

Disallow config tethering

Specifies if a user is disallowed from configuring Tethering & portable hotspots

Disallow config Wi-Fi

Specifies if a user is disallowed from changing Wi-Fi access points

Disallow factory reset

Specifies if a user is disallowed from factory resetting from Settings

Disallow install apps

Specifies if a user is disallowed from installing applications

Disallow mount physical media

Specifies if a user is disallowed from mounting physical external media.

Disallow outgoing beam

Specifies if the user is not allowed to use NFC to beam out data from apps

Disallow remove user

When set on the primary user this specifies if the user can remove other users

Disallow set user icon (requires API level 24)

Specifies if a user is not allowed to change their icon

Disallow share location

Specifies if a user is disallowed from turning on location sharing

Disallow uninstall apps

Specifies if a user is disallowed from uninstalling applications

Disallow USB file transfer

Specifies if a user is disallowed from transferring files over USB

Disallow config credentials

Specifies if a user is disallowed from configuring user credentials