Configuration permissions
Configure Bluetooth
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if a user can modify bluetooth settings (e.g. pair new devices). This does not restrict the user from turning bluetooth on or off. For example, this could be used to ensure that a user can only connect to bluetooth devices previously paired by an administrator. Only available on devices that have bluetooth.
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_BLUETOOTH
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Disallow |
GOOG-12-009400 |
NCSC |
Allow |
Bluetooth |
Xewli |
Disallow |
Configure Cell broadcasts
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if a user can modify the cell broadcast settings (e.g. state wireless emergency alerts). Only available on devices that have telephony capability.
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_CELL_BROADCASTS
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Allow |
Cell broadcasts |
Xewli |
Disallow |
Configure Credentials
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if a user can modify user credentials (e.g. adding or removing client certificates or trusted certificate authorities).
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_CREDENTIALS
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Disallow |
GOOG-11-009100 |
NCSC |
Allow |
Credentials |
Xewli |
Disallow |
Configure Date and time
Availability
- Added in
TDM v1
- Available in
Standard, Professional
- Supported in
Android 9+
Specifies if a user can set date, time, timezone, and enable/disable network provided time.
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_DATE_TIME
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Disallow |
GOOG-11-010200 |
NCSC |
Disallow |
Edit time |
Xewli |
Disallow |
Configure Locale
Availability
- Added in
TDM v1
- Available in
Standard, Professional
- Supported in
Android 9+
Specifies if a user can modify the device language.
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_LOCALE
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Allow |
(not specified - use system default) |
Xewli |
Allow |
Configure Location
Availability
- Added in
TDM v1
- Available in
Standard, Professional
- Supported in
Android 9+
Specifies if the location setting can be changed from its current state. For example, this could be used to ensure that a user does not disable location sharing when a situational awareness app is being used. Only available on devices that have location detecting capability (e.g. GPS).
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_LOCATION
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Disallow |
GOOG-12-000200 |
NCSC |
Allow |
(not specified - use system default) |
Xewli |
Allow |
Configure Mobile networks
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if a user can configure mobile networks. Only available on devices that have telephony capability.
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_MOBILE_NETWORKS
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Allow |
Mobile networks |
Xewli |
Allow |
Configure Screen timeout
Availability
- Added in
TDM v1
- Available in
Standard, Professional
- Supported in
Android 9+
Specifies if a user can change the screen off timeout.
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_SCREEN_TIMEOUT
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Allow |
(not specified - use system default) |
Xewli |
Allow |
Configure Tethering
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if a user can configure tethering and portable hotspots. Enabling this setting, will also automatically turn off tethering. Only available on devices that have at least one of Wi-Fi, ethernet, bluetooth or USB.
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_TETHERING
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Disallow |
GOOG-12-009900 |
NCSC |
Allow |
Tethering |
Xewli |
Disallow |
Configure VPN
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if a user can configure a VPN profile. From Android 12, this also clears existing VPN profiles.
Warning
For Android 12 devices running TDMv1, this must be set to allow for VPNs to be used.
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_VPN
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Disallow |
VPN access |
Xewli |
Disallow |
Configure Wi-Fi
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if a user can modify Wi-Fi access points. For example, this could be used to ensure that a user can only connect to access points previously added by an administrator. Only available on devices that have Wi-Fi.
Options:
Equivalent Android Settings:
UserManager.DISALLOW_CONFIG_WIFI
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Allow |
Wi-Fi |
Xewli |
Allow |