Path: Policies > Actions > Edit > Security and Permission

Android security has been built upon a permission-based mechanism which restricts accesses of third-party Android applications and to other critical resources on an Android device.

 For example, when you install an app from Google Play on a device running Android 6.0 and higher, you control capabilities or information that app can access known as permissions. For example, an app might want permission to see your device contacts or location. You can control which permissions an app can access after the app installs on your device. You can also control other key elements of the tablets like camera, Bluetooth, Mobile networks, Factory resets, etc.



  • Install apps disabled (Whether user installation of apps is disabled)
  • USB file transfer disabled (Whether the user wants to disable the USB file transfers)
  • Mount Physical Media Disabled (Whether the user mounting physical external media is disabled)
  • Screen Capture (Enabling this option would disable the screen capture)
  • Add User Disabled (User can't add another User)
  • Block Applications Enabled (Whether applications other than the ones configured in applications are blocked from being installed. When set, applications that were installed under a previous policy but no longer appear in the policy are automatically uninstalled)
  • Factory Reset Disabled (Whether factory resetting from settings is disabled)
  • Modify Accounts Disabled (Whether adding or removing accounts is disabled)
  • Safe Boot Disabled (Whether the status bar is disabled. This disables notifications, quick settings and other screen overlays that allow escape from full-screen mode)
  • Status Bar Disabled (Whether the status bar is disabled. This disables notifications, quick settings and other screen overlays that allow escape from full-screen mode)
  • Keyguard Disabled Features (Keyguard features which may be disabled.  For example, CAMERA: Disable the camera on secure keyguard screens)
  • System updates (AUTOMATIC: Install automatically as soon as an update is available. WINDOWED: Install automatically within a daily maintenance window. POSTPONE: Postpone automatic install up to a maximum of 30 days)
  • Camera Disabled (Whether all cameras on the device are disabled)
  • Bluetooth Disabled (Upon enabling Bluetooth option is disabled. User can't change the Bluetooth settings)
  • Apps from Unknown Sources (Whether the user is allowed to enable the "Unknown Sources" setting, which allows installation of apps from unknown sources)
  • Mobile Networks Config Disabled (Whether configuring mobile networks is disabled)
  • Bluetooth Config Disabled (Whether Bluetooth contact sharing is disabled)
  • Uninstall Apps Disabled (Whether user uninstallation of applications is disabled)
  • Account types with Management Disabled (Account types that cannot be managed by the user)
  • Keyguard Disabled (Whether the keyguard is disabled)
  • Credentials Config Disabled (Whether configuring user credentials is disabled)
  • App Verification (Whether app verification is force-enabled)
  • Remove User Disabled (Whether the user is disabled)
  • Encrypt Policy (Whether encryption is enabled)


We hope this article was useful. Thank you for reading. For more AMGuard insights, please explore the Visual Knowledge-base Series.

For more details, please do visit https://augmentalis.com

If you need any help on this,  contact AMGuard Support Email.