Skip to main content

Create an Android Bluetooth Restrictions Policy

You can use the Android Bluetooth Restrictions policy to control access to communications over Bluetooth on managed Android devices. This policy lets you disable Bluetooth, block end-user Bluetooth configuration, prevent work contact sharing over Bluetooth, and control outbound Bluetooth file sharing.

Disabling outbound Bluetooth file sharing through Bluetooth Sharing blocks file transfers over Bluetooth while leaving Bluetooth connectivity for authorized peripherals unchanged. This policy works for devices running Android 7.0 and later.

Prerequisites​

Considerations​

  • This policy supports company-owned personally enabled (COPE), fully managed, and dedicated Android enrollment types.
  • Bluetooth Sharing applies to fully managed devices and work profiles. It is supported on Android 8.0 and later.
  • No action is needed on the device to activate this policy after you save and assign it.

Creating the Policy​

To create a Bluetooth Restrictions policy for Android devices, do the following:

Selecting the Policy Template​

  1. Log in to the JumpCloud Admin portal.
Important

If your data is stored outside of the US, check which login URL you should be using depending on your region. If your organization uses LDAP, RADIUS, or requires firewall allow list configuration, the Fully Qualified Domain Names (FQDNs) will also be region specific. See JumpCloud Data Centers for the URLs, FQDNs, and IP addresses.

  1. Go to Device Management > Policy Management. The Policy Management page is displayed.
  2. On the Policy Management page, click +Add New.
  3. Select Device Policy to assign the policy to devices and device groups. On the New Device Policy page:
    • Select the Android tab.
    • Search and select Bluetooth Restrictions, then click Configure. The Details tab of the policy is displayed.
    • On the Details tab, configure the required policy configuration settings.
    • (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
    • (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.

Configuring the Policy​

Under Settings, configure the following fields:

FieldDescription
Disable BluetoothDisables Bluetooth on the device. End users cannot bypass this setting. Applies to fully managed and dedicated enrollment.
Disable Bluetooth ConfigurationPrevents end users from configuring Bluetooth. Applies to fully managed and dedicated enrollment.
Disable Contact SharingBlocks work contact sharing over Bluetooth, such as sharing contacts with a paired car system.
Bluetooth SharingControls whether outbound Bluetooth file sharing is allowed. Bluetooth connectivity for authorized peripherals is unchanged.
Bluetooth Restrictions policy settings including Bluetooth Sharing in the JumpCloud Admin Portal.

Disable Bluetooth

Select the Disable Bluetooth checkbox to turn off Bluetooth on the device. End users cannot re-enable it. This setting applies to fully managed and dedicated devices.

Disable Bluetooth Configuration

Select the Disable Bluetooth Configuration checkbox to prevent end users from changing Bluetooth settings. This setting applies to fully managed and dedicated devices.

Disable Contact Sharing

Select the Disable Contact Sharing checkbox to block work contact sharing over Bluetooth.

note

If a user already paired a device with Bluetooth, clearing the Disable Contact Sharing checkbox might not remove work contacts from that Bluetooth device.

Bluetooth Sharing

Under Bluetooth Sharing, select one option:

OptionDescription
AllowedOutbound Bluetooth file sharing is permitted. Bluetooth connectivity for authorized peripherals is unchanged.
DisallowedOutbound Bluetooth file sharing is blocked. Bluetooth connectivity for authorized peripherals is unchanged.

The default is Allowed.

note

Bluetooth Sharing is supported on Android 8.0 and later for fully managed devices and work profiles.

Configuring Bluetooth Sharing in the Work & Personal Usage Policy

On company-owned devices with a work profile, you can also control Bluetooth sharing on the personal profile through the Work & Personal Usage policy.

Use this policy when you need to restrict Bluetooth file sharing on the personal side of a work profile without changing the Bluetooth Restrictions policy settings on the work profile or fully managed device.

  1. Log in to the JumpCloud Admin Portal.
  2. Go to Device Management > Policy Management.
  3. Create a new Work & Personal Usage policy, or open an existing policy to edit it.
  4. Under Personal Settings, locate Bluetooth Sharing.
Bluetooth Sharing setting under Personal Settings in the Work and Personal Usage policy.

Under Bluetooth Sharing, select one option:

OptionDescription
AllowedBluetooth sharing is allowed on the personal profile.
DisallowedBluetooth sharing is blocked on the personal profile.

The default is Allowed.

note

Bluetooth Sharing in the Work & Personal Usage policy is supported on Android 8.0 and later on company-owned devices with a work profile.

Applying the Policy​

  • (Optional) Select the Device Groups tab. Select one or more device groups where you want to apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
  • Or, select the Devices tab. Select one or more devices where you want to apply this policy.
  • Click save. A success message is displayed indicating the completion of policy creation.

Viewing Policy Status​

  1. Select the Status tab.
  2. To see the last Result Log for a device where this policy is applied, click view.
note
  • If any errors occur, they're listed in Exit Status. If you have an Exit Status of 0, no errors occurred when applying or enforcing this policy.
tip

For this policy to take effect, you must specify a device or a device group.

Was this information helpful?