Prompt: Users are prompted to approve the permission.Device default (default): Use the device's default setting.It doesn't have access to pictures or videos.ĭefault permission policy (work profile-level): This setting defines the default permission policy for requests for runtime permissions. Intune only manages access to the device camera. By default, the OS might allow access to the camera. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might let users capture the screen contents as an image.Ĭamera (work profile-level): Block prevents access to the camera on the device. It also prevents the content from being shown on display devices that don't have a secure video output. Screen capture (work profile-level): Block prevents screenshots or screen captures on the device. General Fully managed, dedicated, and corporate-owned work profile devices For fully managed and dedicated devices, these settings apply device-wide. These settings have (work profile-level) in the setting name.

Each setting is under a heading that indicates the enrollment types that can use the setting.įor corporate-owned devices with a work profile, some settings only apply in the work profile. To see which settings are supported by the different enrollment types, sign into the Intune admin center. Some settings aren't supported by all enrollment types.

These settings apply to Android Enterprise enrollment types where Intune controls the entire device, such as Android Enterprise fully managed, dedicated, and corporate-owned work profile devices.

Android Enterprise fully managed, dedicated, and corporate-owned work profile security settingsįully managed, dedicated, and corporate-owned work profile.

To help determine the settings that are right for your organization, you can use the security configuration framework guidance: When you create device restriction policies, there are many settings available.

For Android Enterprise personally owned devices with a work profile (BYOD), go to Android Enterprise device settings to allow or restrict features on personally owned devices using Intune.Ĭreate an Android device administrator device restrictions configuration profile.

For AOSP devices, go to Android (AOSP) device settings to allow or restrict features using Intune.

Android system update