Allow audio recording

Specify whether a device can record audio. If this rule is not selected, the user can still make calls and use audio streaming using the device microphone. This rule applies to phone calls, voice recognition, and VoIP. If an app declares a use type and does something else, then this rule cannot block the app. If you deselect this rule, any ongoing audio recording is interrupted. Video recording is still allowed if no audio recording is attempted. This rule applies to the Personal space only.

Applies only to devices that support Samsung Knox API level 6 and later.

Selected

Allow video recording

Specify whether a device can record video. If this rule is not selected, the camera is still available so that the user can take pictures and the user can use video streaming. When this rule is not selected, any ongoing video recording is interrupted.

Applies only to devices that support Samsung Knox API level 6 and later.

Selected

Allow sending crash reports to Google

Specify if the user can send crash reports to Google.

Applies only to devices that support Samsung Knox API level 5 and later.

Selected

Allow screen capture

Specify if a user can take screen shots of the device.

Selected

Allow lock screen features

Specify whether special features can be enabled on the device lock screen.

Selected

Allow camera on lock screen

Specify whether users can access the device camera on lock screen.

Depends on: Allow lock screen features

Selected

Allow notifications

Specify whether the device can display notifications on the lock screen.

Depends on: Allow lock screen features

Selected

Allow all notification content

Specify whether all notification content can appear on the lock screen or only the notification type.

Depends on: Allow lock screen features

Selected

Allow fingerprint authentication

Specify whether the user can unlock the device using a fingerprint.

Depends on: Allow lock screen features

Selected

Allow biometrics

Specify whether the user can use biometric authentication to unlock the device.

Depends on: Allow lock screen features

Selected

Allow facial recognition

Specify whether the user can unlock the device using face recognition.

Depends on: Allow lock screen features

Selected

Allow iris authentication

Specify whether the user can unlock the device using an iris scan.

Depends on: Allow lock screen features

Selected

Allow trust agents for Google Smart Lock

Specify whether trust agents can unlock the device using Google Smart Lock.

Depends on: Allow lock screen features

Selected

Allow Google NFC trust agent

Specify if NFC can be used to unlock the device using Google Smart Lock.

Depends on: Allow trust agents for Google Smart Lock

Selected

Allow tags with basic authentication to unlock the device

Specify if NFC tags that authenticate using the tag ID can be used to unlock the device using Google Smart Lock.

Depends on: Allow Google NFC trust agent

Selected

Allow secure NFC tags to unlock the device

Specify if NFC tags that use challenge-response authentication can be used to unlock the device using Google Smart Lock.

Depends on: Allow Google NFC trust agent

Selected

Allow Google Bluetooth trust agent

Specify if Bluetooth can be used to unlock the device using Google Smart Lock.

Depends on: Allow trust agents for Google Smart Lock

Selected

Allow places trust agent

Specify if places can be used to unlock the device using Google Smart Lock.

Depends on: Allow trust agents for Google Smart Lock

Selected

Allow custom places

Specify if a user can trust places other than Home.

Depends on: Allow places trust agent

Selected

Allow Google Face trust agent

Specify if face image can be used to unlock the device using Google Smart Lock.

Depends on: Allow trust agents for Google Smart Lock

Not selected

Allow Google Voice trust agent

Specify if voice can be used to unlock the device using Google Smart Lock.

Depends on: Allow trust agents for Google Smart Lock

Selected

Allow Google On-body trust agent

Specify if On-body can be used to unlock the device using Google Smart Lock.

Depends on: Allow trust agents for Google Smart Lock

Selected

Trust agent inactivity timeout

Specify Device inactivity timeout in minutes. When a device is in an idle state for a certain period of time, Google Smart Lock trust agents will be revoked.

Depends on: Allow trust agents for Google Smart Lock

240 minutes

Minimum value: 1 minute

Maximum value: 525600 minutes (365 days)

Allow AI assistant to use screen content

Specify if the AI assistant on the device can use capture screen content.

Selected

Allow AI to offer suggestions based on screen content

Specify if the AI assistant will provide selection suggestions based on screen content.

Depends on: Allow AI assistant to use screen content

Selected

Allow developer options

Specify whether users can enable developer options on the device.

Not selected

Allowed personal apps from Google Play

Specify the apps that users can install from Google Play in the personal space. You can allow all apps from Google Play, block users from installing specified apps, or allow only specified apps to be installed. This rule does not block users from installing apps in the personal space using a method other than Google Play.

Allow all apps

Personal apps

Specify the package IDs for the apps that you want to block or allow in the personal space. If you chose to block specified apps, users can't install the specified apps from Google Play. If you chose to allow only specified apps, users can install only the specified apps.

Depends on: Allowed personal apps from Google Play

Allow S Voice

Specify whether a device can use the S Voice app.

This rule does not apply to devices with Android OS 13 and later.

Applies only to devices that support Samsung Knox API level 6 and later.

Selected