Profile for Android

Android

 

Based on version of Android OS, available device setting is different.  Especially Work Profile and Device Owner Mode are only available for Android 5.x. or later with MDM Agent version 1.4 and later.

BizMobile, Inc. confirmed Work Profile and Device Owner Mode works at Google Nexus Series (Nexus 5/5X, 6/6P and 7) with Android 5.1 or 6.0.1 as of Feb. 2019.

 

Note: Android OS does not support for simultaneous assignment of Work Profile and Device Owner Mode.

 

Android Enterprise (EMM)

If EMM is disabled, the following functions cannot be used.

 

  • Silent installation / uninstallation of Google Play Store apps

  • Set password policy for Work Profile

  • Application Configuration Per App Settings"

 

The following conditions must be met in order to use the EMM features.

 

  • Ver. 2.0 or later of the BizGo! MDM Agent app installed on the device

  • Enable the EMM feature from the web console of BizMobile Go!

 

 

Profile Type Description
Work Profile Managed device is divided into a personal area (called Work Profile) and a work area (called User Profile), data and applications related to work are managed by the company administrator, and applications and data of other personal accounts are managed by the user.
Device Owner All areas of device are made available for business use and the devices are placed under corporate control. Enabling this setting allows for broader device management. Before you can apply a Device Owner Profile to device, the device must be configured as Device Owner.
Simple (deprecated)

Profile settings that enable only simple feature restrictions, such as setting password policies or disabling the camera. When you apply Simple profile to device, you do not need to preconfigure the device like Device Owner.

 

With Android 10 and later, password policy cannot be set in Simple Profile, only Lock/Wipe can be used.
Watch Profile settings available for Google's Wear OS.

 

 

Create Android Profile

  1. Go to CONFIG > Profile and click Create button.



  2. Enter necessary information
    Input items for Android (* is mandatory field)

    version 2.x 3.x 4.x 5.x 6.x 7.x 8.x 9.x  
    OS*

    ○

    		 ○ ○ ○ ○ ○ ○ ○ Select Android
    Name* ○ ○ ○ ○ ○ ○ ○ ○  
    Description ○ ○ ○ ○ ○ ○ ○ ○  
    Device Type △ △ △ ○ ○ ○ ○ ○ Select type of Profile. See above for a description of each Profile.
    Type ○ ○ ○ ○ ○ ○ ○ ○  
    Template ○ ○ ○ ○ ○ ○ ○ ○ Select Template(s) to apply this Profile. You can register this profile from Template create screen later.

     

    When using Work Profile (Android 5+)

     

    Item name Description EMM OS version BizGo! MDM

    Password Policy (Device Password)

    Device password defines the password policy for the password used to unlock the device

    Note: If you set this policy and do not meet the password policy on the device, the work app (with bag symbol) will be hidden or grayed out and cannot be used. Once you meet the password policy, you will be able to access the work app. You will be asked for a password when you use it, which you will need to enter.

    Maximum Password Attempts Before Wipe

    Select number

    		      

    Maximum Time to Lock

    Select number (minutes)

    		      

    Password Minimum Length

    Select number

    		      

    Password Quality

    Select Password Quality from below options.

    • Complex
    • Something
    • Numeric (Allow PIN)
    • Alphabetic
    • Alphanumeric
    		      

    Expiration Timeout

    Set 1 to 730 as Date of password expiration.

    		      

    History Restriction

    (Password Quality is not “something”)

    Select number

    		      

    Password Policy (Work Profile Password)

    Work Profile password defines the password policy for the password used to unlock the Work Profile (Android 7.0+)

    Note: If you set this policy and do not meet the password policy on the device, the work app (with bag symbol) will be hidden or grayed out and cannot be used. Once you meet the password policy, you will be able to access the work app. You will be asked for a password when you use it, which you will need to enter.

    Maximum Password Attempts Before Wipe

    Select number

    		 Required 7.0+ 2.0+

    Maximum Time to Lock

    Select number (minutes)

    		 Required 7.0+ 2.0+

    Password Minimum Length

    Select number

    		 Required 7.0+ 2.0+

    Password Quality

    Select Password Quality from below options.

    • Complex
    • Something
    • Numeric (Allow PIN)
    • Alphabetic
    • Alphanumeric
    		 Required 7.0+ 2.0+

    Expiration Timeout

    Set 1 to 730 as Date of password expiration.

    		 Required 7.0+ 2.0+

    History Restriction

    (Password Quality is not “something”)

    Select number

    		 Required 7.0+ 2.0+

    Configurations Policy

    Hide Caller Contact in Work Profile Disable incoming calls contact information from the Work Profile being shown in the user profile.      
    Allow Cross Profile Intent

    Allow Intent from User Profile to Work Profile.  Need to set Action and Mimetype of the Intent.

    		     
    Persistent Preferred Activity

    Set a default intent handler for an action (like "always open with...").  Need to set Action, Mimetype, Application package name and Activity.

    		      
    Restriction Policy
    Disable Camera Disable camera on the device      
    Disabled Screen Capture Disable taking screen shots for the applications in Work Profile      

    User Restrictions:

    User cannot modify applications in Settings or launchers

    		 Prevent user from changing installed application settings such as Force stop or uninstallation at Work Profile.      

    User Restrictions:

    Clipboard of profile cannot be pasted to other profiles

    Disable copy and paste between Work Profile and User Profile.

     

    e.g. Copy Text at User Profile but cannot paste it into Work Profile

    		      

    User Restrictions:

    Applications cannot be installed

    		 Prevent user from application installation at Work Profile.      

    User Restrictions:

    User cannot install apps from unknown sources

    		 Prevent user from installation from unknown sources.      

    User Restrictions:

    User cannot add or remove accounts

    		 Prevent user from account change (add or remove) at Work Profile.      

    User Restrictions:

    Location cannot be shared

    		 Disable Location settings on the device.      

    User Restrictions:

    Applications cannot be uninstalled

    		 Prevents user from uninstallation of installed applications at Work profile.      

    User Restrictions:

    Application verification cannot be disabled

    		 Prevent user from disabling application verification of security.      

    User Restrictions:

    Debugging features cannot be configured

    		        

    Allowed Input Methods

    Configure allowed input method from below options.

    • Enabled
    • Disabled
    • Manual Entry

    Enter Package name of input method application for Manual Entry option.

    		      
    Disable Account Management Disable adding account to the application at Work Profile.      
    Disable Non-EMM Google Play Accounts Disable using Google accounts except EMM accounts on Google Play Store. Required   2.3.3+
    Wi-Fi
    SSID Specify the SSID of the Wi-Fi network to be used. (Required)      
    Hidden Network Must be included if the Wi-Fi network to be used is not open or broadcast.      
    Security Type Specify the type of encryption to be used when connecting to a Wi-Fi network. The following "Password" and other settings will change according to the security type.      
    Password Specify the password for the Wi-Fi network to which you are connecting.      
    Secure Settings

    Default Input Method

    Set Default input method by entering Package Name with class. Blank is device default input method.　　Need to install input method application before set this configuration. Please do not set without input method application to configure, to prevent all keyboard disabling.

    		      
    Application Configuration

    Hidden Applications

    List of hidden applications at Work Profile.

    Each application is identified by its package name (Example: com.bizmobile.xxx)

     

    (Note) Hidden Applications are displayed as "Not Installed" on the App Catalog.

    		      

    Per App Settings

    A free form dictionary for applications at Work Profile. The free form dictionary is used by the application to set application specific restrictions. Each application is identified by its package name (com.bizmobile.xxx). JSON format is used for per app settings.

    		 Recommended   2.0-

    Cross Profile Widgets

    White-list of widget package names that are available on the User Profile and can be added to the Work Profile. Each application is identified by its package name (com.bizmobile.xxx).

    		      

    System Applications

    List of system applications to display in the Work Profile.

     

    Each application is identified by its package name (com.bizmobile.xxx).

    		      

    Uninstallable Applications

    List of applications at Work Profile that the user is unable to uninstall. Each application is identified by its package name (com.bizmobile.xxx).

    		      
    Permission Request Policy
    Global Runtime Permission Policy Permission behavior can be specified when the application is launched.     2.0-
    Per App Runtime Permission Policy Permission behavior at app startup can be specified per app basis.     2.0-


    When using Device Owner Mode (Android 5+)

     

    Item name Description EMM OS version BizGo! MDM

    Password Policy

    Device password defines the password policy for the password used to unlock the device

    Note: If you set this policy and do not meet the password policy on the device, the app will be hidden or grayed out and cannot be used. Once you meet the password policy, you will be able to access the apps. You will be asked for a password when you use it, which you will need to enter.

    Maximum Password Attempts Before Wipe

    Select number

    		      

    Maximum Time to Lock

    Select number (minutes)

    		      

    Password Minimum Length

    Select number

    		      

    Password Quality

    Select Password Quality from below options.

    • Complex
    • Something
    • Numeric (Allow PIN)
    • Alphabetic
    • Alphanumeric
    		      

    Expiration Timeout

    Set 1 to 730 as Date of password expiration.

    		      

    History Restriction

    (Password Quality is not “something”)

    Select number

    		      
    System Setting
    Sleep Specify the period of time for device to sleep.      

    Configurations Policy

    Http Proxy

    Set Global Proxy URL and Port 

    Note: Incorrect Proxy setting can cause device networking to fail, making the device unmanageable. Please be careful with setting Proxy.

    		      
    Mute Master Volume

    Set device master volume as mute, and volume button on the device is disabled.

    		      
    Persistent Preferred Activity

    Set a default intent handler for an action (like "always open with...").  Need to set Action, Mimetype, Application package name and Activity.

    		      
    Restriction Policy
    User Restrictions: Tick to disable camera Disable camera on the device      
    User Restrictions: Tick to disable time setting Disable Time Setting      
    User Restrictions: Tick to disable screen capture Disable taking screen shots for the applications in Work Profile      

    User Restrictions:

    User cannot modify applications in Settings or launchers

    		 Prevent user from changing installed application settings such as Force stop or uninstallation at Work Profile.      

    User Restrictions:

    Clipboard of profile cannot be pasted to other profiles

    Disable copy and paste between Work Profile and User Profile.

     

    e.g. Copy Text at User Profile but cannot paste it into Work Profile

    		      
    User Restrictions: Windows cannot be created Disable pop up screen at application.      

    User Restrictions:

    Applications cannot be installed

    		 Prevent user from application installation at Work Profile.      

    User Restrictions:

    User cannot install apps from unknown sources

    		 Prevent user from installation from unknown sources.      

    User Restrictions:

    User cannot add or remove accounts

    		 Prevent user from account change (add or remove) at Work Profile.      

    User Restrictions:

    Location cannot be shared

    		 Disable Location settings on the device.      

    User Restrictions:

    Applications cannot be uninstalled

    		 Prevents user from uninstallation of installed applications at Work profile.      

    User Restrictions:

    Application verification cannot be disabled

    		 Prevent user from disabling application verification of security.      
    User Restrictions: Users cannot be added Prevent user from adding new user profile.      
    User Restrictions: Volume is adjustable Prevent user from adjusting volume.      
    User Restrictions: Bluetooth cannot be configured Prevent user from changing Bluetooth configuration      
    User Restrictions:Cell broadcasts cannot be configured Prevent user from changing Cell broadcast configuration      
    User Restrictions: User credentials cannot be configured        
    User Restrictions:Mobile networks cannot be configured        
    User Restrictions: Tethering & hotspots cannot be configured Prevent user from configuration change of Tethering & portable hotspot.      
    User Restrictions: VPN cannot be configured Prevent user from configuration change of VPN.      
    User Restrictions: Wi-Fi cannot be configured Prevent user from configuration change of Wi-Fi access point.      

    User Restrictions:

    Debugging features cannot be configured

    		 Prevent user from configuration change of USB debugging.      
    User Restrictions: User cannot perform a factory reset Prevent user from performing factory reset.      
    Use　Restrictions: User cannot reboot into safe boot mode        

    Use　Restrictions: Physical media is unmountable

    		 Prevent user from unmounting external storage device such as SD card.This setting does not work if device does not have external media.      
    User Restrictions: Users cannot be removed Prevent user from account change (add or remove)      

    User Restrictions: SMS messages cannot be sent

    		 Disable SMS sending.      
    User Restrictions: Microphone cannot be unmuted        
    User Restrictions: Files cannot be transferred over USB        
    User Restrictions: NFC cannot transfer data Disable Data transfer via NFC.      
    Tick to disable accessibility services        

    Allowed Input Methods

    Configure allowed input method from below options.

    • Enabled
    • Disabled
    • Manual Entry

    Enter Package name of input method application for Manual Entry option.

    		      
    Disable Account Management Disable adding account to the application at Work Profile.      
    Disable Non-EMM Google Play Accounts Disable using Google accounts except EMM accounts on Google Play Store. Required   2.3.3+
    Keyguard on Lock screen Disable ticked item on the lock screen.      
    Restrict Outgoing Calls Prevent user from calling except emergency call.      
    Wi-Fi
    SSID Specify the SSID of the Wi-Fi network to be used. (Required)      
    Hidden Network Must be included if the Wi-Fi network to be used is not open or broadcast.      
    Security Type Specify the type of encryption to be used when connecting to a Wi-Fi network. The following "Password" and other settings will change according to the security type.      
    Password Specify the password for the Wi-Fi network to which you are connecting.      
    Global Settings

    Adb

    Set enable or disable of Android debug bridge.

    		      

    Bluetooth

    Set enable or disable of Bluetooth

    		      

    Data Roaming

    Set enable or disable of Data Roaming

    		      

    Development Settings

    Set enable or disable of developer settings

    		     

    WiFi

    Set enable or disable of Wifi.

     

    Note: Please use this setting only for 3G/LTE enabled device.  If disable Wifi for Wifi only device, all connection is lost.

    		     

    WiFi Sleep Policy

    Set Wifi status during device in sleep mode.

    		     
    Secure Settings

    Default Input Method

    Set Default input method by entering Package Name with class. Blank is device default input method.　　Need to install input method application before set this configuration. Please do not set without input method application to configure, to prevent all keyboard disabling.

    		      

    Allow Non Play Store Apps

    Set enable or disable to allow unknown source application installation.  Used device default configuration in case select “Not Specified”.

    		      

    Location Mode

    Set Location mode configuration with below options.

    • Use defaults
    • Allow best effort location computation
    • GPS and other sensors only
    • Saving Battery, reducing accuracy
    • Disable Location Services
    		      
    Application Configuration

    Hidden Applications

    List of hidden applications at Work Profile.

    Each application is identified by its package name (Example: com.bizmobile.xxx)

     

    (Note) Hidden Applications are displayed as "Not Installed" on the App Catalog.

    		      

    Per App Settings

    A free form dictionary for applications at Work Profile. The free form dictionary is used by the application to set application specific restrictions. Each application is identified by its package name (com.bizmobile.xxx). JSON format is used for per app settings.

    		 Recommended   2.0+

    Cross Profile Widgets

    White-list of widget package names that are available on the User Profile and can be added to the Work Profile. Each application is identified by its package name (com.bizmobile.xxx).

    		      

    System Applications

    List of system applications to display in the Work Profile.

     

    Each application is identified by its package name (com.bizmobile.xxx).

    		      

    Uninstallable Applications

    List of applications at Work Profile that the user is unable to uninstall. Each application is identified by its package name (com.bizmobile.xxx).

    		      
    Allowed Lock Task Mode Applications

    List of applications that are permitted to use the lock task mode.  Each application is identified by its package name (com.bizmobile.xxx).

     

    Note: Please note that application itself should have lockdown function to enable this configuration.

    		      
    Permission Request Policy
    Global Runtime Permission Policy Permission behavior can be specified when the application is launched.     2.0+
    Per App Runtime Permission Policy Permission behavior at app startup can be specified per app basis.     2.0+
    System Update
    System Update Policy

    OS update execution settings can be specified from the following options.

    • None

    • Auto Install Updates

    • Auto Install Updates At Certain Time

    • Postpone Updates for 30 Days

    		      
    Kiosk
    Kiosk Type

    • Single App - Pin a single application to the screen (device owner mode only)

    • Multi App - Restrict the applications that will be displayed on the home screen

    		     2.0+
    Applications Select the applications to display on the device home screen     2.0+
    Passcode Enter a code that can be used to exit Kiosk Mode on the device     2.0+
    Lock Screen Message
    Lock Screen Message Message displayed on the lock screen   7+ 2.6.6+


  3. Click Save to register information, or Cancel to cancel this registration.