How to configure restrictions on devices enrolled in Android Enterprise?

Configuring various restrictions for Android Enterprise enabled devices helps you determine how the users can access these devices for enterprise requirements. Restrictions can be applied to devices enrolled in Android Enterprise program to allow/disallow device functionalities, network connections, app configurations etc. It helps enterprises to easily manage, restrict and secure BYOD and corporate-owned devices. Depending on the enrollment type – Profile Owner (BYOD) or Device Owner (Corporate-owned devices), these restrictions can be applied to work enrolled devices. To configure restrictions for Android Enterprise enabled devices, you need to,

1. Navigate to Policies. Click on New Blank Policy to create a new policy or click on a policy name to edit an existing one.
2. Name and describe your policy.
3. Navigate to Android > Restrictions > Basic to set up basic device restrictions.

You’ll have the following restrictions for limiting the functionalities of Android Enterprise enabled devices.

Restricting Basic Device Functionalities

Restricting Network Settings

Location settings

Sync Settings

Restricting advanced device functionalities

Display Settings

Advanced Security options

Connectivity Settings

Account related Settings

Other Device Settings

App based restrictions

Factory Reset Protection

Steps to fetch the package name of an application

To configure the following restrictions, Allow cross-profile app communication and Allow input methods, you must include the correct app package names in the restriction. If these package names are provided incorrectly, the restriction may not function as expected. There are two ways to fetch the app package name within Hexnode UEM. To fetch the correct app package names, follow the steps below in Hexnode UEM.

Method 1

1. Navigate to the Apps tab.
2. If the application is not yet added to the app inventory, first add the app to the app inventory.
3. If it’s already added, search for the app for which you must specify the package name in the restriction.
4. Ensure that the app’s platform is Android, as the same app may be available for multiple platforms.
5. Click on the app to access detailed information about it.
6. In the list of available details, the package name will be listed as the Identifier. Use this as the package name within the restriction.

Method 2

1. If the application is already installed on the device, navigate to the Manage tab > Devices > Select the device to view the complete device management details.
2. Within the device details page, navigate to the Applications tab.
3. Now, ensure that the Identifier column is available. If the column is not present, you can add it by editing the columns available in the table.
4. Next, search for the application and copy the identifier from the column for use in the policy.

Associate Restrictions with Android Enterprise enabled devices

Once you have set up your policy, you need to associate your policy with target devices.

If you haven’t saved your policy,

1. Navigate to Policy Targets and click on +Add devices to add the devices you wish to associate the policy to.
2. Click Save.

If you have saved your policy,

1. Navigate to Manage > Devices.
2. Select the devices and click on Actions > Associate Policy to associate the policy with target devices.

OR

1. Navigate to “Policies”.
2. Search and select the policy you wish to associate with the devices.
3. Click Manage > Associate Targets.
4. Select the devices you wish to associate the policy to. You can also associate the policy with devices groups, users, user groups and even domains.
5. Click on Associate.