{"id":83488,"date":"2023-05-19T16:07:41","date_gmt":"2023-05-19T20:07:41","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=83488"},"modified":"2024-08-20T13:46:48","modified_gmt":"2024-08-20T17:46:48","slug":"create-an-android-application-based-restrictions-policy","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy","title":{"rendered":"Create an Android Application-based Restrictions Policy"},"content":{"rendered":"\n<p>The Android Application-based Restriction Policy lets you configure restrictions for third-party software apps that are installed on managed Android devices. These restrictions can also control how other apps interact with your app\u2019s components. This policy works for devices running Android 5.1 and later.<\/p>\n\n\n\n<p><strong>Prerequisites<\/strong>:<\/p>\n\n\n\n<ul>\n<li>JumpCloud\u2019s Android EMM is configured for your organization. \n<ul>\n<li>See\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/set-up-android-emm\" target=\"_blank\" rel=\"noreferrer noopener\">Set up Android EMM<\/a>.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Your Android devices are enrolled in EMM. \n<ul>\n<li>See\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/add-and-manage-android-devices\" target=\"_blank\" rel=\"noreferrer noopener\">Add and Manage Android Devices<\/a>\u00a0and\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/users-enroll-your-personal-android-device\" target=\"_blank\" rel=\"noreferrer noopener\">Users: Enroll Your Personal Android Device<\/a>.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p><strong>To create an Android Application-based Restrictions policy<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT &gt; Policy Management<\/strong>.<\/li>\n\n\n\n<li>In the&nbsp;<strong>All<\/strong>&nbsp;tab, click (<strong>+<\/strong>).<\/li>\n\n\n\n<li>On the New Policy panel, select the&nbsp;<strong>Android<\/strong>&nbsp;tab.<\/li>\n\n\n\n<li>Select the Application-based Restrictions policy from the list, then click&nbsp;<strong>configure<\/strong>.<\/li>\n\n\n\n<li>On the New Policy panel, optionally enter a new name for the policy, or keep the default. Policy names must be unique.<\/li>\n\n\n\n<li>For&nbsp;<strong>Policy Notes<\/strong>, enter details like when you created the policy, where you tested it, and where you deployed it.<\/li>\n\n\n\n<li>Under&nbsp;<strong>Settings<\/strong>, set the app restrictions:\n<ol start=\"1\" class=\"is-lower-alpha\">\n<li>Select\u00a0<strong>Disable Installation of Apps<\/strong>\u00a0to prevent users and admins from installing software apps on their devices. If you decide to allow users and admins to install apps and you deselect this field, be cautious when allowing unknown apps.<\/li>\n\n\n\n<li>Select\u00a0<strong>Disable Uninstallation of Apps<\/strong>\u00a0to prevent users and admins from uninstalling software apps. This also prevents apps from being uninstalled through the app itself.<\/li>\n\n\n\n<li>Select <strong>Skip System App Tutorials<\/strong> to allows the system recommendation for apps to skip their user tutorial and other introductory hints on first startup. This setting applies to Dedicated Devices on Android 6.0 or later only.<\/li>\n\n\n\n<li>Under&nbsp;<strong>Play Store Mode<\/strong>, determine which apps are available to the user in the Google Play Store and the behavior on the device when apps are removed from the policy:\n<ul>\n<li><strong>Allowlist<\/strong>&nbsp;&#8211; Permit only apps that are available to appear here. If apps do not appear, they are automatically uninstalled from the device. This is the default.<\/li>\n\n\n\n<li><strong>Blocklist<\/strong>&nbsp;&#8211; Allow all available apps, and block any app that should not be on the device.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Under&nbsp;<strong>Google Play Protect Verification<\/strong>, set whether to check app content for any harmful behavior before you install it:\n<ul>\n<li><strong>Enforce<\/strong>&nbsp;&#8211; Enable app verification. This is the default.<\/li>\n\n\n\n<li><strong>User Choice<\/strong>&nbsp;&#8211; Let the user choose to enable app verification.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Under<strong>&nbsp;Unknown Source App Installation<\/strong>, set the control over installation of untrusted apps (apps from unknown sources) on user devices:\n<ul>\n<li><strong>Disallow<\/strong>&nbsp;&#8211; Prevent untrusted apps from being installed anywhere on the device. This is the default.<\/li>\n\n\n\n<li><strong>Allow in Personal Profile Only<\/strong>&nbsp;&#8211; For devices with work profiles, allow untrusted apps to be installed only in the device&#8217;s personal profile.<\/li>\n\n\n\n<li><strong>Allow Device Wide<\/strong>&nbsp;&#8211; Allow untrusted app installations anywhere on the device.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Under&nbsp;<strong>Developer Options<\/strong>, set access to developer settings like developer options and safe boot:\n<ul>\n<li><strong>Disable<\/strong>&nbsp;&#8211; Prevent users from accessing all developer settings. This is the default.<\/li>\n\n\n\n<li><strong>Allow<\/strong>&nbsp;&#8211; Allow users to access and configure the developer settings.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Under&nbsp;<strong>Runtime Permissions<\/strong>, choose how to grant permission requests to apps:\n<ul>\n<li><strong>Allow<\/strong>&nbsp;&#8211; Automatically grant a permission request.&nbsp;<\/li>\n\n\n\n<li><strong>Prompt<\/strong>&nbsp;&#8211; Prompt the user to grant a permission request. This is the default.<\/li>\n\n\n\n<li><strong>Deny<\/strong>&nbsp;&#8211; Automatically deny a permission request.\u200b\u200b\u200b\u200b\u200b<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Under <strong>Minimum Android API Level<\/strong>, enter the minimum allowable API level for apps. Learn more about <a href=\"https:\/\/source.android.com\/docs\/setup\/about\/build-numbers\" target=\"_blank\" rel=\"noreferrer noopener\">Android API Levels<\/a>.<\/li>\n\n\n\n<li>Under <strong>Override Individual Permission Requests<\/strong>, set specific actions to take for application permissions or permission groups:\n<ul>\n<li><strong>Permission<\/strong> &#8211; Enter the Android permission or permission group, e.g. <strong>android.permission.READ_CALENDAR<\/strong> or <strong>android.permission_group.CALENDAR<\/strong>.<\/li>\n\n\n\n<li><strong>Policy<\/strong> &#8211; Select the policy for granting permission:\n<ul>\n<li><strong>Prompt<\/strong> &#8211; always prompt the user for permission<\/li>\n\n\n\n<li><strong>Allow<\/strong> &#8211; grant automatically<\/li>\n\n\n\n<li><strong>Deny<\/strong> &#8211; deny automatically.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Click <strong>Add Apps<\/strong> to add additional fields.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>(Optional) Select the&nbsp;<strong>Device Groups<\/strong>&nbsp;tab. Select one or more device groups where you will apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.<\/li>\n\n\n\n<li>(Optional) Select the&nbsp;<strong>Devices<\/strong>&nbsp;tab. Select one or more devices where you will apply this policy.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>For this policy to take effect, you must specify a device or a device group.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"11\">\n<li>Click&nbsp;<strong>save<\/strong>.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>The Android Application-based Restriction Policy lets you configure restrictions for third-party software apps that are installed on managed Android devices. [&hellip;]<\/p>\n","protected":false},"author":202,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2927,2852,3080],"support_tag":[],"coauthors":[2836,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Create an Android Application-based Restrictions Policy<\/title>\n<meta name=\"description\" content=\"Learn how to create, configure, and apply an application based restrictions policy for Android devices using JumpCloud EMM.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Create an Android Application-based Restrictions Policy\" \/>\n<meta property=\"og:description\" content=\"Learn how to create, configure, and apply an application based restrictions policy for Android devices using JumpCloud EMM.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-20T17:46:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"denasteward, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy\",\"url\":\"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy\",\"name\":\"How to Create an Android Application-based Restrictions Policy\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-05-19T20:07:41+00:00\",\"dateModified\":\"2024-08-20T17:46:48+00:00\",\"description\":\"Learn how to create, configure, and apply an application based restrictions policy for Android devices using JumpCloud EMM.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Create an Android Application-based Restrictions Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Create an Android Application-based Restrictions Policy","description":"Learn how to create, configure, and apply an application based restrictions policy for Android devices using JumpCloud EMM.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy","og_locale":"en_US","og_type":"article","og_title":"Create an Android Application-based Restrictions Policy","og_description":"Learn how to create, configure, and apply an application based restrictions policy for Android devices using JumpCloud EMM.","og_url":"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy","og_site_name":"JumpCloud","article_modified_time":"2024-08-20T17:46:48+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes","Written by":"denasteward, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy","url":"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy","name":"How to Create an Android Application-based Restrictions Policy","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-05-19T20:07:41+00:00","dateModified":"2024-08-20T17:46:48+00:00","description":"Learn how to create, configure, and apply an application based restrictions policy for Android devices using JumpCloud EMM.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/create-an-android-application-based-restrictions-policy#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Create an Android Application-based Restrictions Policy"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/83488"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/202"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/83488\/revisions"}],"predecessor-version":[{"id":114715,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/83488\/revisions\/114715"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=83488"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=83488"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=83488"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=83488"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}