Android Enterprise Profiles

In this section, we are going to create Android Enterprise profiles to modify devices restrictions and to assist in protecting sensitive data. Profiles serve many different purposes, from letting you enforce corporate rules and procedures to tailoring and preparing Android Enterprise capable devices for how they will be used.

IMPORTANT: If your device is enrolled with Android Enterprise, then ONLY Android Enterprise profiles will take effect on the device, Android device profile will NOT take effect.

1. Restriction Profile Overview

Restrictions profiles provide a second layer of device data protection by allowing you to specify and control how, when and where your employees use their devices. The Restrictions profiles lock down native functionality of Android Enterprise devices and vary based on device enrollment.

2. Create a New Profile

Create a New Profile

In the Workspace ONE UEM Console,

  1. Click Add
  2. Click Profile

2.1. Select the Android Platform

Select the Android Platform

Click Android

2.2. Configure the General Settings

Configure the General Settings
  1. Ensure the General payload is selected
  2. Enter AfW Restrictions for the Name field
  3. Click Smart Groups to display the list of available assignments.  Enter All Devices and select the All Devices ([email protected]) group.

2.3. Configure Restrictions

Configure Restrictions
  1. Enter Restrictions in the payload search box
  2. Click the Restrictions payload
  3. Click Configure

2.4. Configure Screen Capture Restrictions

Configure Screen Capture Restrictions

Uncheck the Allow Screen Capture checkbox for the Work Profile column.

2.5. Configure Camera Restrictions

Configure Camera Restrictions
  1. Scroll down to find the Applications section
  2. Uncheck the Allow Camera checkbox for the Work Profile column
  3. Click Save And Publish

2.6. Publish the Profile

Publish the Profile

Click Publish.

3. Verify the Android Enterprise Camera Restrictions

Verify the Android For Work Camera Restrictions

On your device, notice that after we push the profile your device will no longer have the badged camera application available but your personal side (unbadged) camera will still be available for usage. This confirms the camera restriction that you setup on the Workspace ONE UEM Android profile that was previously created.

  1. Search for camera on the device
  2. Before the profile takes affect, notice that the Camera work (badged) app exists alongside the personal (unbadged) app
  3. After the profile takes affect, notice that the Camera work (badged) app has been removed

NOTE - Due to lab network limitations, it may take a few minutes for the badged Camera application to be removed.  If you still see it on your device, please wait until the application is successfully removed.

4. Screenshot in a non-badged app

Verify the Android for Work Screen Shot Restriction
  1. Search for contacts on the device
  2. Open your Personal (non-badged) Contacts app
  3. Take a screen shot (Power button and volume down / Power Button + Home Button at the same time for 2 seconds), notice that the screenshot was successful.

NOTE - The shortcut to change screenshot may vary depending on your device model. Please see a lab assistant in case assistance is required.

5. Verify the Android Enterprise Screenshot Restriction

Verify the Android for Work Screen Shot Restriction
  1. Search for contacts on the device
  2. Open your Work (badged) Contacts app
  3. Take a screen shot (Power button and volume down / Power Button + Home Button at the same time for 2 seconds), notice that the screenshot was NOT successful.

This shows the screenshot restriction that we applied on the Workspace ONE UEM Android profile created previously.

0 Comments

Add your comment

E-Mail me when someone replies to this comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.