Android Restrictions List
App Installation & Permissions
| Label | Description | Input Type |
|---|
| Allow Installing or Sideloading Apps | Specifies if a User is disallowed from installing applications. | Allow or Disallow |
| Allow App Installs from Unknown Sources | Specifies if a User is disallowed from enabling the Unknown Sources setting. | Allow or Disallow |
| Allow App Installs Unknown Sources Globally | Disable Install from all sources including 3rd party App Stores. | Allow or Disallow |
| Auto Grant Runtime Permissions to Apps | Adding apps here will automatically grant runtime permissions to the app. | Package Names |
App Management & Control
| Label | Description | Input Type |
|---|
| Allow user to uninstall apps | Specifies if a User is disallowed from uninstalling applications. | Allow or Disallow |
| Allow user to clear App Cache and Storage | Specifies if a User is disallowed from modifying applications in Settings or launchers. | Allow or Disallow |
| Blacklist Apps | Hide specified apps on the device (will not uninstall). | Package Names |
| Whitelist Apps | Add apps that were previously blacklisted to restore them. | Package Names |
| Disable Apps from Uninstall | Disallow Users from uninstalling listed apps. | Package Names |
| Enable Apps for Uninstall | Reverse the Disable Apps from Uninstall list (does not uninstall automatically). | Package Names |
| Uninstall Listed Apps from Device | Force uninstall apps if previously installed. | Package Names |
| Permitted Apps on Device | Keep only these apps on the device; others will be removed or disabled. | Package Names |
| Action for Unauthorized App installs | Action to take for apps not permitted (No Action / Uninstall / Hide / Suspend). | dropdown (options: No Action / uninstall / hide / suspend) |
App Monitoring & Diagnostics
| Label | Description | Input Type |
|---|
| App Watchdog Settings | Monitor activity/services for an app and restart if not running (system-level). | watchdogmodal |
| Collect App Logs | Monitor folders and upload zipped logs to FTP server. | applogmodal |
Password & Lock Screen
| Label | Description | Input Type |
|---|
| Unified Password | Managed Profile not allowed to have unified lock screen challenge. | Allow or Disallow |
| Max. Failed Password Attempts | Maximum number of failed password attempts before device wipe. | number |
| Allow Lock Screen | Specifies if a User is allowed to use Keyguard or not. | Allow or Disallow |
| Keyguard Password Security | Ensures the type of Lock screen password for the device. | dropdown (options: High / Medium / Low / Any) |
| Keyguard Timeout | Force user to reset passcode after this duration. | dropdown (options: 10 days / 20 days / 30 days / Never) |
| Lock Screen Message | Device owner info shown on lock screen (overrides user-set info). | text |
Multi-User & Account Management
| Label | Description | Input Type |
|---|
| User Switch | Specifies if User Switching is blocked. | Allow or Disallow |
| Allow add Managed Profile | Specifies if a User is disallowed from adding managed profiles. | Allow or Disallow |
| Add User | Specifies if a User is disallowed from adding new users. | Allow or Disallow |
| Remove Managed Profile | Specifies if Managed Profiles can be removed by non-owners. | Allow or Disallow |
| Remove User | Specifies if the primary user can remove other users. | Allow or Disallow |
| Allow Change User Icon | Specifies if a User can change their icon. | Allow or Disallow |
| Share Into Managed Profile | Specifies whether the user can share files into the managed profile. | Allow or Disallow |
| Modify Accounts | Specifies if a User is disallowed from adding/removing accounts. | Allow or Disallow |
| Cross Profile Copy Paste | Specifies if the clipboard can be exported to other users/profiles. | Allow or Disallow |
Device Reset & Boot Security
| Label | Description | Input Type |
|---|
| Factory Reset | Specifies if a User is disallowed from factory resetting from Settings. | Allow or Disallow |
| Hard Reset | Specifies if a User is disallowed from doing Hard reset using Download mode. | Allow or Disallow |
| Safe Boot | Specifies if the User is allowed to reboot into safe boot mode. | Allow or Disallow |
| OEM Unlock | Specifies whether the User is allowed to unlock the bootloader. | Allow or Disallow |
| Google Factory Reset Protection ID | Comma separated Account IDs for Factory reset protection. | text |
Developer & Debug Settings
| Label | Description | Input Type |
|---|
| Debugging Features (ADB) | Specifies if a User is disallowed from enabling/accessing debugging features. | Allow or Disallow |
Location Services
| Label | Description | Input Type |
|---|
| Location State | Automatically enable/disable Location Services. | dropdown (options: Always ON / Always OFF) |
| Location Toggle | Specifies if a User is disallowed from enabling/disabling location providers. | Allow or Disallow |
| Location Sharing | Specifies if a User is disallowed from turning on location sharing. | Allow or Disallow |
Phone & Messaging
| Label | Description | Input Type |
|---|
| Allow Outgoing Calls | Specifies that the User is not allowed to make outgoing phone calls. | Allow or Disallow |
| Allow SMS | Specifies that the User is not allowed to send or receive SMS messages. | Allow or Disallow |
Display & Brightness
| Label | Description | Input Type |
|---|
| Ambient Display | Specifies if Ambient Display mode is allowed for the user. | Allow or Disallow |
| Config Brightness | Specifies if a User is disallowed from configuring brightness. | Allow or Disallow |
| Config Screen Timeout | Specifies if a User is disallowed from changing screen off timeout. | Allow or Disallow |
Organization Settings
| Label | Description | Input Type |
|---|
| Organization Name | Specify the organization name to appear on lock screen. | text |
| Organization Support Message | Specify the organization support message for the Alert Dialog. | text |
| Organization Long Support Message | Long message shown in device administrators settings screen. | text |
Date & Time
| Label | Description | Input Type |
|---|
| Config Date Time | Specifies if Date, Time and timezone configuring is disallowed. | Allow or Disallow |
| Set Time Zone | Enter Time Zone to set for the device (e.g., Asia/Delhi). | text (validate: time zone) |
| Auto Time Zone | If set to Auto user will not be allowed to change time zone. | dropdown (options: Auto / Manual) |
| Auto Time | If set to Auto user will not be allowed to change system time. | dropdown (options: Auto / Manual) |
Sound & Volume Control
| Label | Description | Input Type |
|---|
| Allow Adjust Volume | Specifies if a user is allowed to toggle Volume Controls. | Allow or Disallow |
| Set System Volume | Set the System Volume. | dropdown (options: silent / vibrate / min / medium / max / system) |
| Allow Microphone | Disallows user from using Microphone (Android 12+). | Allow or Disallow |
| Allow Speaker | Control user from using Speaker (Samsung). | Allow or Disallow |
Bluetooth Connectivity
| Label | Description | Input Type |
|---|
| Allow Bluetooth | Specifies if Bluetooth is Allowed on the device. | Allow or Disallow |
| Default Bluetooth State | Toggle Bluetooth On or Off. | On / Off |
| Bluetooth Sharing | Specifies if Outgoing Bluetooth Sharing is disallowed. | Allow or Disallow |
| Let users Toggle Bluetooth | Specifies if a User is disallowed from changing bluetooth state. | Allow or Disallow |
Wallpaper & Customization
| Label | Description | Input Type |
|---|
| Allow Changing Wallpaper | User Restriction To Setting a wallpaper. | Allow or Disallow |
| Set Wallpaper | Set a wallpaper. Provide a HTTPS link to the PNG file. | text (validate: HTTPS link) |
Notifications & Status Bar
| Label | Description | Input Type |
|---|
| Hide Notifications | Hide notifications from different apps (requires Notification Listener). | pushnotifymodal |
| Show Notifications (Samsung Only) | Allow or Disallow notifications from ALL apps on status bar (Samsung only). | Allow or Disallow |
System-Wide Restrictions
| Label | Description | Input Type |
|---|
| Autofill Services | Specifies if a User is not allowed to use Autofill Services. | Allow or Disallow |
| Status Bar | Specifies if the top status bar should be allowed to swipe or not. | Allow or Disallow |
| Config Credentials | Specifies if a User is disallowed from configuring user credentials. | Allow or Disallow |
| Config Locale | Specifies if a User is disallowed from changing the device language. | Allow or Disallow |
| Samsung Edge Panel UI | Disable/Enable Samsung Edge Panel UI (Samsung only). | Allow or Disallow |
| Content Capture | Specifies if screen content capture for AI purposes is disallowed. | Allow or Disallow |
| Content Suggestions | Specifies if the user can receive content suggestions based on screen content. | Allow or Disallow |
| Create Windows | Specifies that windows besides app windows should not be created. | Allow or Disallow |
| Printing | Specifies whether the User is allowed to print. | Allow or Disallow |
| System Error Dialogs | Specifies that system error dialogs should not be shown. | Allow or Disallow |
| Power Saving Mode | Specifies if a user can toggle power saving mode on Samsung devices. | Allow or Disallow |
| System Updates | Setting this to Disallow will defer updates for 30-days; Allow sets automatic updates. | Allow or Disallow |
| Disallow Camera | Disallow user using Camera on the device (Android 12+). | Allow or Disallow |
| NFC Beam | Disallow NFC to beam out data from apps. | Allow or Disallow |
| Settings App | Disable Settings App from use (Samsung only). | Allow or Disallow |
| Screenshot Capture | Disable user from taking screenshots on device. | Allow or Disallow |
USB & External Storage
| Label | Description | Input Type |
|---|
| Mount Physical Media | Disallow mounting external media like SDCard and USB drives. | Allow or Disallow |
| Usb File Transfer | Specifies if a User is disallowed from transferring files over USB. | Allow or Disallow |
| Allow users from changing USB Settings | When disallowed, USB connections (except charging) are prohibited. | Allow or Disallow |
Network - WiFi
| Label | Description | Input Type |
|---|
| Config Wifi | Specifies if a User is disallowed from changing Wi-Fi access points. | Allow or Disallow |
| Enforce WiFi Status | Turn on or off WiFi by default always; user cannot change. | On / Off |
| Predefined WiFi SSID Config | Add/Update system WiFi SSIDs (format: wpa/none settings). | wifimodal |
Network - VPN
| Label | Description | Input Type |
|---|
| Config Vpn | Specifies if a User is disallowed from configuring a VPN. | Allow or Disallow |
| Always-ON VPN App | Set an AlwaysON VPN app by package name. | text (validate: package name) |
Network - Mobile Data
| Label | Description | Input Type |
|---|
| Config Cell Broadcasts | Specifies if a User is disallowed from configuring cell broadcasts. | Allow or Disallow |
| Config Mobile Networks | Specifies if a User is disallowed from configuring mobile networks. | Allow or Disallow |
| Force Data Status | On or Off Data for the device (Samsung/Platform). | On / Off |
| Force Roaming Status | On or Off forcing data roaming for the device. | On / Off |
| Config Data Roaming | Specifies if a User is not allowed to use cellular data when roaming. | Allow or Disallow |
| APN Settings | Set APN Settings for the Device. | apnmodal |
Network - General
| Label | Description | Input Type |
|---|
| Airplane Mode | Specifies if Airplane Mode is disallowed on the device. | Allow or Disallow |
| Add Private DNS | Specify a Private DNS Server domain (enter domain or "none"). | text (validate: domain names) |
| Config Private DNS | Specifies whether the User is allowed to modify private DNS settings. | Allow or Disallow |
| Config Tethering/Hotspot | Specifies if a User is disallowed from configuring tethering/hotspot. | Allow or Disallow |
| Network Reset | Specifies if a User is disallowed from resetting network settings. | Allow or Disallow |
Kiosk Mode
| Label | Description | Input Type |
|---|
| Kiosk Mode Settings | Provide settings for Kiosk Mode; package names of required apps. | kioskmodal |
| Kiosk Admin Password | Enter an MD5 hash password for kiosk admin. | text |
| Kiosk Browse Url | Restrict device to display only a single URL in kiosk browser. | text |
Default Apps Configuration
| Label | Description | Input Type |
|---|
| Default Dialer | Default Dialer App package name (Android 14+). | text (validate: package name) |
| Default SMS | Default SMS App package name. | text (validate: package name) |
| Default Home | Set default Home app package name. | text (validate: package name) |
| Default Keyboard | Specify default keyboard/IME package name. | text (validate: package name) |
| Disable Config of Default Apps | Disallow user from modifying default apps (Android 14+). | Allow or Disallow |
Web Content Filter
| Label | Description | Input Type |
|---|
| Hosts File Link | URL of hosts file containing domains/IPs to block. | text (validate: HTTPS link) |
| Blacklist Specific Domains | Comma separated domains and IPs to block. | text (validate: domain names) |
Device Settings Override
| Label | Description | Input Type |
|---|
| System Settings | Control system-level settings (Platform only). | settingsmodal |
| Secure Settings | Control secure settings (Platform only). | settingsmodal |
| Global Settings | Control global settings. | settingsmodal |
Geofencing
| Label | Description | Input Type |
|---|
| Geofencing Boundaries | Create geofencing boundaries; device locked outside boundary. | geofencing |
Reboot Device
| Label | Description | Input Type |
|---|
| Reboot Schedule | Select reboot schedule (Never / Everyday / alternate days / etc). | dropdown (options: Never / Everyday / Every alternate Day / Every 3 Days / Every 4 Days / Every 5 Days / Every 6 Days) |
| Reboot around time | Reboot around the time (within ~30 minutes). | Time |
Device Usage Limits
| Label | Description | Input Type |
|---|
| Apps Daily Usage Limits | Set daily limits on app usage. | App Schedules |
| Daily Device Cut-off Time | After this time the device cannot be used except emergency apps. | Time |
| Total Screen Time for the day (in Hours) | Disable apps after total screen time until 4:00 AM. | Time
|
Related Articles
Primer on Restrictions & Policies
FieldX offers a wide collection of control and security restrictions that let you control and manage your devices better. Setting up device and app restrictions features on the work managed devices reduces distractions and improves the security. ...
Deleting a Restriction
Deleting a restriction will permanently remove it from the Web Portal. However, the settings that were applied by the restriction will not be undone. To delete a restriction: Click on the restrictions link from side menu to view the page where all ...
App Watchdog Settings
The App Watchdog Restriction enables IT Admins to monitor applications with a high level of granularity. This feature is especially valuable for ensuring that an app remains continuously operational. When configured, the Watchdog settings direct ...
Adding new Restriction
To add new restrictions follow the steps below Locate the side menu and click on the "Restrictions" option. Click on the “Add” button at the top of the page. Enter Restriction Details Restriction Name: Enter a user-friendly name for the restriction. ...
Importance of the Global Restriction
The Global Restriction is a default restriction, with an order of one, created by the system. It cannot be deleted, but it can be edited or updated by authorized users. This restriction applies to all devices and can be overridden by any new ...