Android

: Apps rules

Send SMS/MMS logs to UEM

Specify whether the device synchronizes logs for SMS text messages and MMS messages with your EMM server.

Work space only (Premium)

Not selected

Send phone logs to UEM

Specify whether the device synchronizes the call log for the Phone app with your EMM server. This rule applies only to the following activation types: Work space only (Premium)

Work space only (Premium)

Not selected

Require app verification

Specify whether the device must verify apps. If this rule is not selected, the user can disable app verification. This rule affects both work and personal apps.

Selected

Allow installation of non Google Play apps override

Specify whether users can install apps from sources other than Google Play (unknown sources) globally on the device for all users, install apps using the app installer (the ACTION_INSTALL_PACKAGE mechanism), or install non Google Play apps. If this rule is not selected, the user cannot change this setting on the device. If the rule is selected, users can access the UI that allows them to install non Google Play apps. If you disallow installation of non-Google play apps using this rule, the settings for the same rule in personal and work profiles are ignored. If this rule is selected, you can disallow installation of non-Google play apps in just the work profile or just the personal profile.

Selected

Allow installation of non Google Play apps

Specify whether users can install apps using the app installer (the ACTION_INSTALL_PACKAGE mechanism).

Not selected

Installation policy of non Google Play apps

Specify whether users can install apps from sources other than Google Play (unknown sources)

Allow phone

Specify if a user can use the phone. If this rule is not selected, the device can only make emergency calls. All other calls and messages are blocked. Applies only to devices that support Samsung Knox API level 2 and later.

Selected

Allow outgoing MMS

Specify if a device can send MMS messages.

Selected

Allow incoming MMS

Specify if a device can receive MMS messages.

Selected

Allow RCS features

Specify whether Rich Communication Services can be used on the device.

Selected

Set SMS/MMS Signature

Specify the signature that is appended to outgoing SMS or MMS messages sent by the user. The signature can contain a maximum of 30 characters.

Allow outgoing SMS

Specify if a device can send SMS messages.

Selected

Allow incoming SMS

Specify if a device can receive SMS messages.

Selected

Default app permissions

Specify whether app permission requests are granted or denied by default. If you select "Prompt user" the user is asked to grant or deny permissions. If you select "Always grant" the user is not prompted and permission requests are always granted. If you select "Always deny" the user is not prompted and permissions requests are always denied. "Always grant" is supported by some sensor-related permissions only with Workspace only activations.

Prompt user

Skip first use hints

Specify whether work apps should to skip showing any introductory hints that display the first time the app is launched.

Not Selected

Apps restricted from metered networks

Specify the apps that are restricted from using metered data networks. You may want to restrict app network usage due to data costs and limits or battery and performance issues.

Apps allowed to access work calendar

Specify the personal app package IDs that are allowed to access the work calendar.

Apps allowed to manage certificates

Specify the list of app package IDs that can manage certificate.

Apps allowed to request cross-profile access

Specify the package IDs of apps that can request permission from the user to access data in both the work and personal profiles.

Allow S Voice

Specify whether a device can use the S Voice app.

This rule does not apply to devices running Android OS 13 and later.

Applies only to devices that support Samsung Knox API level 6 and later.

Selected

Enable JavaScript

Specify whether the native Android browser prevents the browser from running JavaScript code for a website. If this rule is not selected, a website that requires JavaScript to be active to execute a function (for example, an animation) cannot execute the function. If this rule is not selected, a user cannot change the setting on the device.

Applies only to devices that support Samsung Knox API level 2 and later.

Selected

Allow Google Play

Specify whether a user can use Google Play to install apps. This rule applies when a device is not connected to your organization's network.

Work and personal - full control (Samsung Knox)

Selected

Allow Android Backup Service

Specify if the user can back up device data to Google servers.

Work and personal - full control (Samsung KNOX)

Selected

Allow browser cookies

Specify if the built-in Android browser prevents websites from storing cookies on a device. If this rule is not selected, websites that use cookies to preload user authentication information cannot do so. If this rule is not selected, the user cannot change this setting on the device.

Selected

Allow autofill setting

Specify if the built-in Android browser prevents websites from providing autofill suggestions when a user is filling in form data on a webpage, even if the user has previously filled in the form. If this rule is not selected, the user cannot change this setting on the device.

Selected

Enable pop-up browser setting

Specify if the built-in Android browser overrides the default pop-up browser setting to prevent websites from popping up new browser windows when the user navigates to a website that invokes this action. If this rule is not selected, the user cannot change this setting on the device.

Selected

Allow Google services

Specify whether a user can use Google services such as Gmail, Google Settings, and Google Play.

This rule applies to the Knox Workspace only.

Selected

Allow unified account view in BlackBerry Hub

Specify whether BlackBerry Hub can display both work and personal accounts and messages together in a single view. If this rule is not selected, the device must display work accounts and messages in a separate view from personal accounts and messages in BlackBerry Hub. If this rule is selected, the app must also be configured to allow a unified view for this rule to have an effect.

Selected