Create an Android Device Restrictions Policy

The Android Device Restrictions Policy lets you configure and enforce device-level functionality on managed Android devices. This policy works for devices running Android 5.1 and later.

Prerequisites

• JumpCloud’s Android EMM is configured for your organization. See Set Up Android EMM.
• Your Android devices are enrolled in EMM. See Add and Manage Android Devices and Users: Enroll Your Personal Android Device.

To create an Android Device Restrictions policy:

1. Log in to the JumpCloud Admin Portal.
2. Go to DEVICE MANAGEMENT > Policy Management.
3. In the All tab, click (+).
4. On the New Policy panel, select the Android tab.
5. Select the Bluetooth Restrictions policy from the list, then click configure.
6. On the New Policy panel, optionally enter a new name for the policy, or keep the default. Policy names must be unique.
7. For Policy Notes, enter details like when you created the policy, where you tested it, and where you deployed it.
8. Under Settings, complete these fields:
   1. Under Encryption, determine how to enable encryption on fully managed and dedicated devices:
      • Select Without Password to enable encryption when the user boots the device without requiring a password.
      • Select With Password to enable encryption and require a password.
   2. Under Auto Date And Time Zone, determine how to enable automatic date, time, and time zone on fully managed and dedicated devices:
      • Select User Choice to let users decide if they want automatic date, time, and time zone enabled on their device. This is the default setting.
      • Select Enforced to force enable automatic date, time, and time zone on fully managed and dedicated devices.
   3. Under Camera Access, select a control for the use of the device’s camera and whether the user has access to the camera access toggle.
      • User Choice: Make the device’s camera available for users.
      • Disable: Prevent user access to the device’s camera.
      • Enforce: Force the device’s camera to be available.
   4. Select Disable Screen Capture to block all users from taking screenshots or screen captures on the work profile and the device.
   5. Under Microphone Access, determine how users access the microphone on fully managed devices. The microphone toggle exists only on devices running Android 12 or later.
      • Select User Choice to make the device’s microphone available for users. This is the default setting.
      • Select Disabled to prevent user access to the device’s microphone.
      • Select Enforced to force the device’s microphone to be available. ​​On devices running Android 12 and later, users can not access the microphone access toggle. 
   6. Select Disable Volume Adjustment to prevent users from adjusting the master volume. This setting applies to fully managed and dedicated devices.
   7. Select Disable Wallpaper Modification to block users from changing the wallpaper. This setting applies to fully managed and dedicated devices.
   8. Select Disable Easter Egg to prevent users from being able to access the Easter egg game in the device’s Settings.
   9. (Optional) For Lock Screen Message, enter the device owner information that will be displayed on the lock screen. Note that this setting applies to fully managed and dedicated devices running Android 7.0 or later.
      
   10. (Optional) For Short Support Message, enter a message that will be displayed to the user on the Settings screen wherever functionality has been disabled. Note that this setting applies to fully managed and dedicated devices running Android 7.0 or later.
       
   11. (Optional) For Long Support Message, enter a message that will be displayed to the user on the device administrator settings screen. Note that this setting applies to fully managed and dedicated devices running Android 7.0 or later.
       
9. (Optional) Select the Device Groups tab. Select one or more device groups where you will apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
10. (Optional) Select the Devices tab. Select one or more devices where you will apply this policy.

11. Click save.