Dedicated device

The dedicated device solution set is designed for company-owned devices that fulfill a single use case, such as digital signage, ticket printing, or inventory management. This allows admins to further lock down the usage of a device to a single app or small set of apps, and prevents users from enabling other apps or performing other actions on the device.

Feature list

Select your development method to load the appropriate feature list:


Key

star required star_border optional star advanced remove_circle_outline not supported


1. Device provisioning

1.2. DPC identifier device provisioning Android 6.0+
star
End users can provision a fully managed device using a DPC identifier (e.g. "afw#").
1.3. NFC device provisioning Android 6.0+
star_border
IT admins can "bump" new or factory-reset devices with the EMMs NFC provisioning app to provision a device.
1.4. QR code device provisioning Android 7.0+
star
IT admins can use new or factory-reset device to scan a QR code generated by the EMM's console to provision the device.
1.5. Zero-touch enrollment Android 8.0+ (Pixel 7.1+)
star_border
IT admins can preconfigure devices purchased from authorized resellers and manage them using your EMM console.
1.6. Advanced zero-touch provisioning Android 7.0+
remove_circle_outline
IT admins can automate much of the device enrollment process by deploying DPC registration details through zero-touch enrollment.

2. Device security

2.1. Device security challenge Android 5.0+
star
IT admins can set and enforce a device security challenge (e.g. PIN/pattern/password) of a certain type and complexity on managed devices.
2.3. Advanced passcode management Android 5.0+
star_border
IT admins can configure advanced password settings on devices.
2.4. Smart Lock management Android 6.0+
remove_circle_outline
IT admins can control what trust agents in Android's Smart Lock feature are permitted to unlock devices.
2.5. Wipe and lock Android 5.0+
star
IT admins can use the EMM’s console to remotely lock and wipe work data from a managed device.
2.6. Compliance enforcement Android 5.0+
star
The EMM restricts access to work data and apps on devices that aren't in compliance with security policies.
2.7. Default security policies Android 5.0+
star
EMMs must enforce the specified security policies on devices by default, without requiring IT admins to configure or customize any settings in the EMM's console.
2.8. Security policies for dedicated devices Android 6.0+
star
Users cannot escape a locked down dedicated device to enable other actions.
2.9. SafetyNet support N/A
star
The EMM uses the SafetyNet Attestation API to ensure devices are valid Android devices.
2.10. Verify Apps enforcement Android 5.0+
star_border
IT admins can enable Verify Apps on devices.
2.11. Direct Boot support Android 7.0+
star_border
Direct Boot support ensures that the EMM's DPC is always active and able to enforce policy, even if an Android 7.0+ device has not been unlocked.
2.12. Hardware security management Android 5.1+
star
IT admins can lock down hardware elements of a device to ensure data-loss prevention.
2.13. Enterprise security logging Android 7.0+
remove_circle_outline
IT admins can gather usage data from devices that can be parsed and programmatically evaluated for malicious or risky behavior.

3. Account and app management

3.1. Managed Google Play accounts enterprise enrollment N/A
star
IT admins can create a managed Google Play Accounts enterprise—an entity that allows managed Google Play to distribute apps to devices.
3.3. Managed Google Play device account provisioning Android 5.0+
star
The EMM can create and provision managed Google Play device accounts.
3.5. Silent app distribution N/A
star
IT admins can silently distribute work apps on users' devices without any user interaction.
3.6. Managed configuration management Android 5.0+
star
IT admins can view and silently set managed configurations for any app that supports managed configurations.
3.7. App catalog management N/A
remove_circle_outline
IT admins can import a list of all the apps approved for their enterprise from managed Google Play (play.google.com/work).
3.8. Programmatic app approval N/A
star_border
The EMM's console uses the managed Google Play iframe to support Google Play's app discovery and approval capabilities
3.11. App license management N/A
remove_circle_outline
IT admins can view and manage app licenses purchased in the managed Google Play from the EMM's console.
3.12. Google-hosted private app management N/A
star_border
IT admins can update Google-hosted private apps through the EMM console instead of through the Google Play console.
3.13. Self-hosted private app management N/A
star_border
IT admins can configure and publish self-hosted private apps.
3.14. EMM pull notifications N/A
remove_circle_outline
This requirement is not applicable to the Android Management API.
3.15. API usage requirements N/A
star
The EMM implements Google's APIs at scale, avoiding traffic patterns that could negatively impact customers' ability to manage apps in production environments.

4. Device management

4.1. Runtime permission policy management Android 6.0+
star
IT admins can silently set a default response to all runtime permission requests made by work apps.
4.2. Runtime permission grant state management Android 6.0+
star
After setting a default runtime permission policy, IT admins can silently set responses for specific permissions from any work app built on API 23 or above.
4.3. WiFi configuration management Android 6.0+
star
IT admins can silently provision enterprise WiFi configurations on managed devices.
4.4. WiFi security management Android 6.0+
star
IT admins can provision enterprise WiFi configurations on managed devices.
4.5. Advanced WiFi management Android 6.0+
star_border
IT admins can lock down WiFi configurations on managed devices, to prevent users from creating new configurations or modifying corporate configurations.
4.6. Account management Android 5.0+
star_border
IT admins can ensure that only authorized corporate accounts can interact with corporate data for services such as SaaS storage and productivity apps, or email.
4.8. Certificate management Android 5.0+
star
Allows IT admins to deploy identity certificates and certificate authorities to devices in order to enable access to corporate resources.
4.9. Advanced certificate management Android 7.0+
star
Allows IT admins to silently select the certificates that should be used by specific managed apps.
4.10. Delegated certificate management Android 6.0+
star_border
IT admins can distribute a third-party certificate management app to devices and grant that app privileged access to install certificates into the managed keystore.
4.11. Advanced VPN management Android 7.0+
star
Allows IT admins to specify an Always On VPN to ensure that data from specified managed apps will always go through a configured VPN.
4.13. Advanced IME management Android 5.0+
star_border
IT admins can control what input methods (IMEs) users can configure for their devices.
4.14. Accessibility services management Android 5.0+
star_border
IT admins can control what accessibility services can be enabled on users' devices.
4.16. Advanced location sharing management Android 5.0+
star_border
IT admins can enforce a given location sharing setting on a managed device.
4.17. Factory reset protection management Android 5.1+
star
Enables IT admins to protect company-owned devices from theft by ensuring only authorized users can factory reset devices.
4.18. Advanced app control Android 5.0+
star_border
IT admins can prevent the user from uninstalling or otherwise modifying managed apps through Settings.
4.19. Screen capture management Android 5.0+
star_border
IT admins can block users from taking screenshots when using managed apps.
4.20. Disable cameras Android 5.0+
star_border
IT admins can disable use of device cameras by managed apps.
4.22. Advanced network statistics collection Android 6.0+
remove_circle_outline
IT admins can query network usage statistics for an entire managed device.
4.23. Reboot device Android 7.0+
star_border
IT admins can remotely reboot managed devices.
4.24. System radio management Android 7.0+
star_border
Enables IT admins granular control over system network radios and associated usage policies.
4.25. System audio management Android 5.0+
star_border
IT admins can silently control device audio features.
4.26. System clock management Android 5.0+
star_border
IT admins can control device clock and timezone settings, and prevent users from modifying automatic device settings.
4.27. Advanced dedicated device features Android 6.0+
star
Provides IT admins with the ability to control more granular features dedicated devices to support a variety of kiosk use cases.

5. Device usability

5.1. Managed provisioning customization Android 7.0+
star_border
IT admins can modify the default managed provisioning flow UX to include enterprise-specific features.
5.4. Lock screen messages Android 7.0+
star_border
IT admins can set a custom message that's always displayed on the device lock screen, and does not require device unlock to be viewed.
5.8. System update policy Android 6.0+
star
IT admins can configure and apply over-the-air (OTA) system updates for devices.
5.9. Lock task mode management Android 6.0+
star
IT admins can lock an app or set of apps to the screen, and ensure that users can't exit the app.
5.10. Persistent preferred activity management Android 5.0+
star_border
Allows admins to set an app as the default intent handler for intents that match a certain intent filter.
5.12. Advanced keyguard feature management Android 5.0+
star_border
IT admins can control advanced device keyguard (lock screen) features.
5.13. Remote debugging Android 7.0+
remove_circle_outline
IT admins can retrieve debugging resources from users' devices without requiring users to take additional steps.
5.14. MAC address retrieval Android 7.0+
star_border
EMMs can silently fetch a device's MAC address, to be used to identify devices in other parts of the enterprise infrastructure.

Send feedback about...

Android Enterprise