Configure Settings for Android Policies

You can create and apply policies to enforce specific behavior on the Android devices you manage. For example, you can create a policy that requires users to enter a device passcode and a work profile device passcode that controls access to corporate applications and data in an Android work profile.

Prerequisites

• Android 5.1 (Lollipop) and later for employee-owned devices.
• Android 8.0 (Oreo) and later for company-owned, personally enabled devices used for work and personal use.
• Your enterprise is registered with Android EMM and all Android devices are enrolled in EMM. See Set up Android EMM, Add and Manage Android Devices, and Users: Enroll Your Personal Android Device.

JumpCloud supports these Android policies. You can create these policies and apply them to your Android devices and device groups. If a policy contains fields that require additional configuration, click the link in the Learn More column.

note

JumpCloud will continue to add additional policies, settings, and values to existing policies, and support for other enrollment types which might leverage these settings slightly differently. Modifying existing policies and resaving them might be necessary to apply the updated payload.

Android Policy	Description	Category	Learn More
Account Restrictions	Control how authorized corporate accounts interact with corporate data, email, and apps.	Device Access, Security	Create an Android Account Restrictions Policy
Application-based Restrictions	Configure restrictions for third-party software apps that are installed on managed Android devices.	Enterprise Settings, Software Management	Create an Android Application-based Restrictions Policy
Battery Mode	Prevent the screen display from turning off when dedicated Android devices are charging.	Configuration, Enterprise Settings	Create an Android Battery Mode Policy
Bluetooth Restrictions	Control access to communications over Bluetooth on managed Android devices.	Network, Security	Create an Android Bluetooth Restrictions Policy
Cellular Restrictions	Control access to cellular communications on fully-managed and dedicated Android devices.	Network, Security	Create an Android Cellular Restrictions Policy
Common Criteria Mode	Enforce a strict security model typically only required for IT products used in national security systems and other highly sensitive organizations.	Network, Security	Create an Android Common Criteria Mode Policy
Compliance Enforcement	Block use of a device or work profile when it fails to comply with certain policies.	Compliance, Security	Create an Android Compliance Enforcement Policy
Custom Payload	Configure and deploy settings that may not be available in the JumpCloud Admin Portal. Custom policies can be created from Google API's Explorer documentation and added here as a JSON file.	Configuration, Enterprise Settings	Create an Android Custom Payload Policy
Device Restrictions	Configure and enforce device-level functionality on managed Android devices.	Device Access, Security	Create an Android Device Restrictions Policy
Factory Reset Protection	Prevent unauthorized access to factory reset company-owned devices in the event of loss or theft.	Enterprise Settings, Security	Create an Android Factory Reset Protection Policy
Hardware Security	Prevent hardware and software from accessing data on managed Android devices. Enforcing this type of security can prevent data loss.	Device Access, Security	Create an Android Hardware Security Policy
Kiosk Mode	Configure the functionality of dedicated devices running in Kiosk mode.	Device Access, Enterprise Settings	Create an Android Kiosk Mode Policy
Location Services	Control location sharing for your users’ apps and services. Location sharing can help apps find your phone’s location more accurately.	Enterprise Settings, Monitoring	Create an Android Location Services Policy
Lock Screen Restrictions	Manage which features users can see before they unlock their device’s lock screen.	Device Access, Security	Create an Android Lock Screen Restrictions Policy
Passcode	Secure corporate and personal Android devices by defining a device passcode and a work profile passcode. The work profile passcode secures corporate data and apps in that work profile.	Compliance, Security	Create an Android Passcode Policy
Proxy Settings	Secure personal and company data by routing HTTP and HTTPS network traffic through a configured proxy.	Enterprise Settings, Network	Create an Android Proxy Settings Policy
Runtime Permissions	Set a default response to runtime permission requests that are made by Android work apps.	Enterprise Settings, Software Management	Create an Android Runtime Permissions Policy
System Updates	Control how system updates are applied to corporate owned devices.	Enterprise Settings, OS Management	Create an Android System Updates Policy
VPN	Configure Virtual Private Network (VPN) settings and associated restrictions for users when accessing other networks.	Enterprise Settings, Network	Create an Android VPN Policy
WiFi Configuration	Configure a wireless network for managed Android devices. One WiFi configuration policy is allowed.	Enterprise Settings, Network	Create an Android WiFi Configuration Policy
WiFi Restrictions	Prevent users from manually configuring WiFi access points on their devices.	Network, Security	Create an Android WiFi Restrictions Policy
Work & Personal Usage	Control which information is enabled on the personal side of the work profile. Keeping information separate and secure in a personal profile lets you maintain appropriate personal usage policies.	Configuration, Device Access	Create an Android Work & Personal Use Policy

Each Android policy provides additional information about the Minimum Supported Version for that policy.