Android Restrictions List

Android Restrictions List

App Installation & Permissions

Label	Description	Input Type
Allow Installing or Sideloading Apps	Specifies if a User is disallowed from installing applications.	Allow or Disallow
Allow App Installs from Unknown Sources	Specifies if a User is disallowed from enabling the Unknown Sources setting.	Allow or Disallow
Allow App Installs Unknown Sources Globally	Disable Install from all sources including 3rd party App Stores.	Allow or Disallow
Auto Grant Runtime Permissions to Apps	Adding apps here will automatically grant runtime permissions to the app.	Package Names

App Management & Control

Label	Description	Input Type
Allow user to uninstall apps	Specifies if a User is disallowed from uninstalling applications.	Allow or Disallow
Allow user to clear App Cache and Storage	Specifies if a User is disallowed from modifying applications in Settings or launchers.	Allow or Disallow
Blacklist Apps	Hide specified apps on the device (will not uninstall).	Package Names
Whitelist Apps	Add apps that were previously blacklisted to restore them.	Package Names
Disable Apps from Uninstall	Disallow Users from uninstalling listed apps.	Package Names
Enable Apps for Uninstall	Reverse the Disable Apps from Uninstall list (does not uninstall automatically).	Package Names
Uninstall Listed Apps from Device	Force uninstall apps if previously installed.	Package Names
Permitted Apps on Device	Keep only these apps on the device; others will be removed or disabled.	Package Names
Action for Unauthorized App installs	Action to take for apps not permitted (No Action / Uninstall / Hide / Suspend).	dropdown (options: No Action / uninstall / hide / suspend)

App Monitoring & Diagnostics

Label	Description	Input Type
App Watchdog Settings	Monitor activity/services for an app and restart if not running (system-level).	watchdogmodal
Collect App Logs	Monitor folders and upload zipped logs to FTP server.	applogmodal

Password & Lock Screen

Label	Description	Input Type
Unified Password	Managed Profile not allowed to have unified lock screen challenge.	Allow or Disallow
Max. Failed Password Attempts	Maximum number of failed password attempts before device wipe.	number
Allow Lock Screen	Specifies if a User is allowed to use Keyguard or not.	Allow or Disallow
Keyguard Password Security	Ensures the type of Lock screen password for the device.	dropdown (options: High / Medium / Low / Any)
Keyguard Timeout	Force user to reset passcode after this duration.	dropdown (options: 10 days / 20 days / 30 days / Never)
Lock Screen Message	Device owner info shown on lock screen (overrides user-set info).	text

Multi-User & Account Management

Label	Description	Input Type
User Switch	Specifies if User Switching is blocked.	Allow or Disallow
Allow add Managed Profile	Specifies if a User is disallowed from adding managed profiles.	Allow or Disallow
Add User	Specifies if a User is disallowed from adding new users.	Allow or Disallow
Remove Managed Profile	Specifies if Managed Profiles can be removed by non-owners.	Allow or Disallow
Remove User	Specifies if the primary user can remove other users.	Allow or Disallow
Allow Change User Icon	Specifies if a User can change their icon.	Allow or Disallow
Share Into Managed Profile	Specifies whether the user can share files into the managed profile.	Allow or Disallow
Modify Accounts	Specifies if a User is disallowed from adding/removing accounts.	Allow or Disallow
Cross Profile Copy Paste	Specifies if the clipboard can be exported to other users/profiles.	Allow or Disallow

Device Reset & Boot Security

Label	Description	Input Type
Factory Reset	Specifies if a User is disallowed from factory resetting from Settings.	Allow or Disallow
Hard Reset	Specifies if a User is disallowed from doing Hard reset using Download mode.	Allow or Disallow
Safe Boot	Specifies if the User is allowed to reboot into safe boot mode.	Allow or Disallow
OEM Unlock	Specifies whether the User is allowed to unlock the bootloader.	Allow or Disallow
Google Factory Reset Protection ID	Comma separated Account IDs for Factory reset protection.	text

Developer & Debug Settings

Label	Description	Input Type
Debugging Features (ADB)	Specifies if a User is disallowed from enabling/accessing debugging features.	Allow or Disallow

Location Services

Label	Description	Input Type
Location State	Automatically enable/disable Location Services.	dropdown (options: Always ON / Always OFF)
Location Toggle	Specifies if a User is disallowed from enabling/disabling location providers.	Allow or Disallow
Location Sharing	Specifies if a User is disallowed from turning on location sharing.	Allow or Disallow

Phone & Messaging

Label	Description	Input Type
Allow Outgoing Calls	Specifies that the User is not allowed to make outgoing phone calls.	Allow or Disallow
Allow SMS	Specifies that the User is not allowed to send or receive SMS messages.	Allow or Disallow

Display & Brightness

Label	Description	Input Type
Ambient Display	Specifies if Ambient Display mode is allowed for the user.	Allow or Disallow
Config Brightness	Specifies if a User is disallowed from configuring brightness.	Allow or Disallow
Config Screen Timeout	Specifies if a User is disallowed from changing screen off timeout.	Allow or Disallow

Organization Settings

Label	Description	Input Type
Organization Name	Specify the organization name to appear on lock screen.	text
Organization Support Message	Specify the organization support message for the Alert Dialog.	text
Organization Long Support Message	Long message shown in device administrators settings screen.	text

Date & Time

Label	Description	Input Type
Config Date Time	Specifies if Date, Time and timezone configuring is disallowed.	Allow or Disallow
Set Time Zone	Enter Time Zone to set for the device (e.g., Asia/Delhi).	text (validate: time zone)
Auto Time Zone	If set to Auto user will not be allowed to change time zone.	dropdown (options: Auto / Manual)
Auto Time	If set to Auto user will not be allowed to change system time.	dropdown (options: Auto / Manual)

Sound & Volume Control

Label	Description	Input Type
Allow Adjust Volume	Specifies if a user is allowed to toggle Volume Controls.	Allow or Disallow
Set System Volume	Set the System Volume.	dropdown (options: silent / vibrate / min / medium / max / system)
Allow Microphone	Disallows user from using Microphone (Android 12+).	Allow or Disallow
Allow Speaker	Control user from using Speaker (Samsung).	Allow or Disallow

Bluetooth Connectivity

Label	Description	Input Type
Allow Bluetooth	Specifies if Bluetooth is Allowed on the device.	Allow or Disallow
Default Bluetooth State	Toggle Bluetooth On or Off.	On / Off
Bluetooth Sharing	Specifies if Outgoing Bluetooth Sharing is disallowed.	Allow or Disallow
Let users Toggle Bluetooth	Specifies if a User is disallowed from changing bluetooth state.	Allow or Disallow

Wallpaper & Customization

Label	Description	Input Type
Allow Changing Wallpaper	User Restriction To Setting a wallpaper.	Allow or Disallow
Set Wallpaper	Set a wallpaper. Provide a HTTPS link to the PNG file.	text (validate: HTTPS link)

Notifications & Status Bar

Label	Description	Input Type
Hide Notifications	Hide notifications from different apps (requires Notification Listener).	pushnotifymodal
Show Notifications (Samsung Only)	Allow or Disallow notifications from ALL apps on status bar (Samsung only).	Allow or Disallow

System-Wide Restrictions

Label	Description	Input Type
Autofill Services	Specifies if a User is not allowed to use Autofill Services.	Allow or Disallow
Status Bar	Specifies if the top status bar should be allowed to swipe or not.	Allow or Disallow
Config Credentials	Specifies if a User is disallowed from configuring user credentials.	Allow or Disallow
Config Locale	Specifies if a User is disallowed from changing the device language.	Allow or Disallow
Samsung Edge Panel UI	Disable/Enable Samsung Edge Panel UI (Samsung only).	Allow or Disallow
Content Capture	Specifies if screen content capture for AI purposes is disallowed.	Allow or Disallow
Content Suggestions	Specifies if the user can receive content suggestions based on screen content.	Allow or Disallow
Create Windows	Specifies that windows besides app windows should not be created.	Allow or Disallow
Printing	Specifies whether the User is allowed to print.	Allow or Disallow
System Error Dialogs	Specifies that system error dialogs should not be shown.	Allow or Disallow
Power Saving Mode	Specifies if a user can toggle power saving mode on Samsung devices.	Allow or Disallow
System Updates	Setting this to Disallow will defer updates for 30-days; Allow sets automatic updates.	Allow or Disallow
Disallow Camera	Disallow user using Camera on the device (Android 12+).	Allow or Disallow
NFC Beam	Disallow NFC to beam out data from apps.	Allow or Disallow
Settings App	Disable Settings App from use (Samsung only).	Allow or Disallow
Screenshot Capture	Disable user from taking screenshots on device.	Allow or Disallow

USB & External Storage

Label	Description	Input Type
Mount Physical Media	Disallow mounting external media like SDCard and USB drives.	Allow or Disallow
Usb File Transfer	Specifies if a User is disallowed from transferring files over USB.	Allow or Disallow
Allow users from changing USB Settings	When disallowed, USB connections (except charging) are prohibited.	Allow or Disallow

Network - WiFi

Label	Description	Input Type
Config Wifi	Specifies if a User is disallowed from changing Wi-Fi access points.	Allow or Disallow
Enforce WiFi Status	Turn on or off WiFi by default always; user cannot change.	On / Off
Predefined WiFi SSID Config	Add/Update system WiFi SSIDs (format: wpa/none settings).	wifimodal

Network - VPN

Label	Description	Input Type
Config Vpn	Specifies if a User is disallowed from configuring a VPN.	Allow or Disallow
Always-ON VPN App	Set an AlwaysON VPN app by package name.	text (validate: package name)

Network - Mobile Data

Label	Description	Input Type
Config Cell Broadcasts	Specifies if a User is disallowed from configuring cell broadcasts.	Allow or Disallow
Config Mobile Networks	Specifies if a User is disallowed from configuring mobile networks.	Allow or Disallow
Force Data Status	On or Off Data for the device (Samsung/Platform).	On / Off
Force Roaming Status	On or Off forcing data roaming for the device.	On / Off
Config Data Roaming	Specifies if a User is not allowed to use cellular data when roaming.	Allow or Disallow
APN Settings	Set APN Settings for the Device.	apnmodal

Network - General

Label	Description	Input Type
Airplane Mode	Specifies if Airplane Mode is disallowed on the device.	Allow or Disallow
Add Private DNS	Specify a Private DNS Server domain (enter domain or "none").	text (validate: domain names)
Config Private DNS	Specifies whether the User is allowed to modify private DNS settings.	Allow or Disallow
Config Tethering/Hotspot	Specifies if a User is disallowed from configuring tethering/hotspot.	Allow or Disallow
Network Reset	Specifies if a User is disallowed from resetting network settings.	Allow or Disallow

Kiosk Mode

Label	Description	Input Type
Kiosk Mode Settings	Provide settings for Kiosk Mode; package names of required apps.	kioskmodal
Kiosk Admin Password	Enter an MD5 hash password for kiosk admin.	text
Kiosk Browse Url	Restrict device to display only a single URL in kiosk browser.	text

Default Apps Configuration

Label	Description	Input Type
Default Dialer	Default Dialer App package name (Android 14+).	text (validate: package name)
Default SMS	Default SMS App package name.	text (validate: package name)
Default Home	Set default Home app package name.	text (validate: package name)
Default Keyboard	Specify default keyboard/IME package name.	text (validate: package name)
Disable Config of Default Apps	Disallow user from modifying default apps (Android 14+).	Allow or Disallow

Web Content Filter

Label	Description	Input Type
Hosts File Link	URL of hosts file containing domains/IPs to block.	text (validate: HTTPS link)
Blacklist Specific Domains	Comma separated domains and IPs to block.	text (validate: domain names)

Device Settings Override

Label	Description	Input Type
System Settings	Control system-level settings (Platform only).	settingsmodal
Secure Settings	Control secure settings (Platform only).	settingsmodal
Global Settings	Control global settings.	settingsmodal

Geofencing

Label	Description	Input Type
Geofencing Boundaries	Create geofencing boundaries; device locked outside boundary.	geofencing

Reboot Device

Label	Description	Input Type
Reboot Schedule	Select reboot schedule (Never / Everyday / alternate days / etc).	dropdown (options: Never / Everyday / Every alternate Day / Every 3 Days / Every 4 Days / Every 5 Days / Every 6 Days)
Reboot around time	Reboot around the time (within ~30 minutes).	Time

Device Usage Limits

Label	Description	Input Type
Apps Daily Usage Limits	Set daily limits on app usage.	App Schedules
Daily Device Cut-off Time	After this time the device cannot be used except emergency apps.	Time
Total Screen Time for the day (in Hours)	Disable apps after total screen time until 4:00 AM.	Time