Android Features
Entgra IoTS 4.0.0 is a Google Enterprise Partner for Android.
Supported Operations
Entgra IoT Server facilitates one time Operations that can be performed remotely via the Device Management Console. These operations are useful for runtime maintenance of devices.
The type of operations available for Android devices and are applicable for each enrollment type is summed up as per the table below. For details on each, click here.
Feature - Description | Legacy | Work Profile | Dedicated (Kiosk) | Fully Managed (COPE) | System App |
---|---|---|---|---|---|
Remote screen keyboard and mouse inputs in screen-sharing mode. | ✓ | ✓ | ✓ | ✓ | ✓ |
Allow-list/Block-list connected peripherals plugged-in. | ✓ | ✓ | ✓ | ✓ | ✓ |
Force devices to be locked on to a given WiFi network. | ✓ | ✓ | ✓ | ✓ | ✓ |
Entgra secure browser application with remote settings. | ✓ | ✓ | ✓ | ✓ | ✓ |
Device location history view to track the fleet’s history. | ✓ | ✓ | ✓ | ✓ | ✓ |
Lock device when passcode fail attempts exceeded the limit. | ✓ | ✓ | ✓ | ✓ | ✓ |
Notification displaying for Kiosk mode. | X | X | ✓ | X | X |
Display a custom message when the device is locked and for locked settings. | ✓ | ✓ | ✓ | ✓ | ✓ |
Offline un-enrollement via a special per device admin pin code. | ✓ | ✓ | ✓ | ✓ | ✓ |
Disable airplane mode restrictions. | ✓ | ✓ | ✓ | ✓ | ✓ |
Enroll COPE device using mobile data after a factory reset. | ✓ | ✓ | ✓ | ✓ | ✓ |
Get Device Information - Fetch the device's runtime information. | ✓ | ✓ | ✓ | ✓ | ✓ |
Get Device Location Information - Fetch the device's current location. | ✓ | ✓ | ✓ | ✓ | ✓ |
Get Installed Applications - Fetch the device's installed application list. | ✓ | ✓ | ✓ | ✓ | ✓ |
Ring Device - Ring the device for the purpose of locating the device in case of misplacement. | ✓ | ✓ | ✓ | ✓ | ✓ |
Upload Device - Upload file to a specific folder on the device. | ✓ | ✓ | ✓ | ✓ | ✓ |
Download Device - Download file on a specific folder on the device. | ✓ | ✓ | ✓ | ✓ | ✓ |
Mute Device - Put the device in silent mode. | ✓ | ✓ | ✓ | ✓ | ✓ |
Change Lock Code - Changes the device's currently set lock code. From Android N upwards, clear passcode will not work. | ✕ | ✕ | ✓ | ✓ | ✓ |
Clear Password - Remove any password that the device owner has put. From Android N upwards, clear passcode will not work. | ✕ | ✕ | ✓ | ✓ | ✓ |
Send Notifications/Messages - Send a notification (message) to the device. | ✓ | ✓ | ✓ | ✓ | ✓ |
Enterprise Wipe - Wipe the entreprise portion of the device. | ✓ | ✓ | ✓ | ✓ | ✓ |
Wipe Device (Factory reset) - Factory reset a device. | ✓ | ✓ | ✓ | ✓ | ✓ |
Device Lock (soft lock) - Lock the device remotely. Similar to pressing the power button on the device and locking it. | ✓ | ✓ | ✓ | ✓ | ✓ |
Reboot Device - Restart the phone for example for troubleshooting purposes. | ✕ | ✕ | ✓ | ✓ | ✓ |
Upgrade Firmware - Upgrade Android operating firmware ensuring that firmware and the device has to be compatible and only applicable in OEM scenarios. | ✕ | ✕ | ✕ | ✕ | ✓ |
Execute Shell Command - Remotely execute the shell commands on the device's command prompt. | ✓ | ✓ | ✓ | ✓ | ✓ |
Hard Lock - Lock a device remotely by an admin and only the admin can unlock the device. | ✓ | ✓ | ✓ | ✓ | |
Manage Web Clip - Install a shortcut link to a web page/web app on the phone's home screen. | ✓ | ✓ | ✓ | ✓ | ✓ |
Trigger Google Play App - Install an app from the google play store. | ✓ | ✓ | ✓ | ✓ | ✓ |
Install/Uninstall/update applications - Capability to perform various application management tasks such as install, uninstall and update apps. | ✓ | ✓ | ✓ | ✓ | ✓ |
View Device Screen - Screen sharing with the Admin. | ✓ | ✓ | ✓ | ✓ | ✓ |
Remote Control Device - Allow Admin to remotely control the device. | ✓ | ✓ | ✓ | ✓ | |
Get Logcat - View the log of the operating system. | ✓ | ✓ | ✓ | ✓ | ✓ |
Silent App Install - Install apps on the device without prompting the user to click install. | ✕ | ✓ | ✓ | ✓ | ✓ |
Remote Kiosk Enable - Enable or disable kiosk mode remotely for maintenance reasons, troubleshooting etc. | ✕ | ✕ | ✓ | ✕ | ✕ |
Policies
The Policies that can be applied on an Android device depends on the way the device is enrolled with the server.
Accordingly, the table below indicates the policies applicable for each type of enrollment.
Restrictions Policy
Restriction Policies are those that can be applied on a device restricting or controlling the use of certain specific device features. There are a large number of restrictions that can be applied on an Android device.
The following table lists the available Restriction Policies for Android devices.
Feature - Description | Legacy | Work Profile | Dedicated / Fully Managed / System | Fully managed (COPE) | System app |
---|---|---|---|---|---|
Disable access to camera | ✓ | ✓ | ✓ | ✓ | ✓ |
Disable modifying certificates in the device | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable configuring VPN settings | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable configuring App control by hiding the status bar of App Control | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable cross-profile copy-paste - Copying text between profiles is blocked. | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable debugging - Disable usb debuging | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable installing apps to the device | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable installing apps from unknown sources | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable modifying accounts such as Google, Facebook from being modified/ added/ removed | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable outgoing beams - Disable using NFC to transfer data. | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable sharing device location. | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable uninstalling apps | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable parent profile app linking - Disable apps in the personal profile to handle web links from the work profile. | ✕ | ✓ | ✓ | ✓ | ✓ |
Ensure verifying apps - Enforce only verified apps can be installed on the device. | ✕ | ✓ | ✓ | ✓ | ✓ |
Disable screen capture - Disable capturing the screen of the device. | ✕ | ✓ | ✓ | ✓ | ✓ |
Enable auto timing - Enable or diable using time from mobile network as system time. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable SMS - Disable access to SMS. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable volume adjust - Disable adjusting the volume of the device. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable cell broadcast - Disables cell broadcasting messages of the network. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable configuring bluetooth settings. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable configuring moble network settings. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable configuring tethering settings. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable configuring WiFi settings. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable safe boot - Disable booting into safe mode. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable outgoing calls | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable mount physical media - Disable plugging into different media devices. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable create window - Disable showing certain notifications, toasts and alert by apps. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable factory resetting of devices. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable removing users from device. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable adding new users to device. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable network reset - Disable user from performing network setting reset. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable USB file transfer - Disable transfering data over USB. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable unmute microphone - Configure access to microphone. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable status bar - Block user from opening the notification bar and access to status bar. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable set wallpaper - Disable changing wallpapers. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable auto fill - Disable auto filling forms. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable bluetooth - Disable bluetooth. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable bluetooth sharing - Disable sharing via bluetooth. | ✕ | ✕ | ✓ | ✓ | ✓ |
Disable data roaming - Disable data roaming. | ✕ | ✕ | ✓ | ✓ | ✓ |