Restrictions

The Restrictions settings restrict specific features, network settings, developer options, and location detection policies on Android devices.

Device features

The following table describes the restrictions that you can configure on an Android device:

Policy setting	Description	Supported devices
Camera	The device can use a camera.	Android 2.2+
Allow SD card	The device can use an SD card. If this setting is disabled in the policy, the SD card cannot be mounted on a device.	SAFE 2.0+
Allow SD card write	The user can manage data on the SD card.	SAFE 3.0+
Allow USB mass storage	The user can connect a device to a computer through the USB port and transfer files between devices.	Android 2.x or Android 3.x
Allow USB media player (MTP, PTP)	The user can connect a device to a computer and transfer files between devices.	SAFE 2.0+
Allow multiple user account	The user can set up multiple user accounts on tablets.	SAFE 4.0+
Allow audio recording	The user can record audio on the device. If this setting is disabled in the policy, the user can still use the device for phone calls and to stream audio with VoIP apps.	SAFE 4.0+
Allow video recording	The user can record video on the device. If this setting is disabled in the policy, the user can still take pictures with the camera.	SAFE 4.0+
Allow S Voice	The user can use the S Voice app on the device.	SAFE 4.0+
Use network-provided date and time	The network provider can automatically update the device with the latest date and time. Enable this setting if you are using the Mobile Expense Management (MEM) feature.	Android 2.2+
Disable screen dim	The device screen remains active until the device is locked.	Android 4+

Network settings

The following table describes the network restrictions that you can configure on an Android device:

Policy setting	Description	Supported devices
Allow Wi-Fi	If this setting is set to Yes, then the device can use Wifi. The device in COSU mode can still access the MaaS360 custom Wi-Fi settings and switch between available networks even though the following settings are set to the desired mode. Allow Wi-Fi is set to No. Allow Settings Changes is disabled. Wi-Fi Restrict edit or delete of profile is set to No.	Android 2.2+
Enforce Wi-Fi is always on	The device is forced to use wifi instead of cellular data.	Android 2.2+
Bluetooth	The device can use Bluetooth.	Android 2.2+
Allow data network	The device can use cellular data.	Android 2.2+
Enable background data synchronization	In the background, the device synchronizes apps on the device, and sends and downloads data.	Android 2.x or Android 3.x
Auto-Sync	The device can automatically synchronize device accounts such as Facebook and Twitter.	Android 2.2+
Allow user to set mobile data limit	The user can set a limit on the amount of cellular data that is used on the device.	SAFE 4.0+
Allow VPN	The device can access a VPN. If this setting is disabled in the policy, the user cannot access the VPN configuration screen to establish a VPN session.	SAFE 2.2+
Allow Wi-Fi Direct	The device can use Wi-Fi Direct.	SAFE 4.0+
Mobile AP	The device can use a Mobile AP (Mobile Access Point).	Android 2.2+
Allow tetheringl	The device can connect (tether) to other devices through wifi, Bluetooth, or USB. If this setting is disabled in the policy, the device cannot connect to other devices through wifi, Bluetooth, or USB. Note: You can block third-party apps that allow tethering.	SAFE 2.0+
USB tethering	The device can connect to another device through USB.	Android 2.2+
Allow Bluetooth tethering	The device can connect to another device through Bluetooth.	SAFE 2.0+
Near Field Communication (NFC)	The device uses Near Field Communication (NFC) for short-range communications.	SAFE 2.0+
Allow Airplane Mode	The device user is allowed to enable Airplane mode if this setting is turned on.	Zebra, Honeywell, Bluebird
Allow Android Beam	The device uses Android Beam to share data with another device that supports NFC. If Android Beam is disabled, S Beam is also automatically disabled.	SAFE 4.0+
Allow S Beam	The device uses S Beam to share data through Wi-Fi Direct.	SAFE 4.0+

Developer options

The following table describes the restrictions that developers can configure on an Android device:

Policy setting	Description	Supported devices
Allow USB debugging	The device provides options for USB debugging, where users can use the Android SDK to connect a device to a computer.	SAFE 2.0+
Allow background process limit	The user can set the number of processes that are running in the background. If this setting is disabled in the policy, the number of processes that run in the background is set at a maximum number.	SAFE 4.0+
Allow killing activities on leave	The device can kill all instances of an activity when the user logs out of the device. If this setting is disabled in the policy, the Don't Keep Activities setting is disabled on the device and the user cannot enable the setting on the device.	SAFE 4.0+
Allow mock locations	The user can fake the GPS location on a device.	Android 2.2+
Allow Google crash report	The device can send the logs for a crash report to Google.	SAFE 3.0+

Location detection policies

The following table describes the restrictions that you can configure to locate an Android device:

Policy setting	Description	Supported devices
Use wireless networks / Google's Location service for location detection	The device can use wifi networks. If this setting is enabled in the policy, the location of the device is tracked through wifi and the mobile network.	Android 2.2+
Use GPS satellites for location detection	The device can use GPS satellites. If this setting is enabled in the policy, the device location is tracked through GPS.	Android 2.2+
Use sensor aiding for location detection	The location of the device is tracked through sensors.	SAFE 3.0+