Search Results

Devices owned by employees can be set up with a work profile. A work profile provides a self-contained space for work apps and data, separate from personal apps and data. Most app, data, and other management policies apply to the work profile only, while emplo...

Setting up a company-owned device with a work profile enables the device for both work and personal use. On company-owned devices with work profiles:Most app, data, and other management policies apply to the work profile only.Employees' personal profiles remai...

Full device management is suitable for company-owned devices intended exclusively for work purposes. Enterprises can manage all apps on the device and can enforce the full spectrum of Android Management API's policies and commands.It's also possible to lock a ...

IT admins can provision company-owned devices using the zero-touch enrollment method, outlined in Zero-touch enrollment for IT admins. When a device is first turned on, the device is automatically forced into the settings defined by the IT admin.IT admins can ...

Cerberus Enterprise uses enrollment tokens to start the Android device enrollment (provisioning) process. The token you select defines the initial policy applied to enrolled devices and influences which provisioning modes are allowed. The Android enrollment ...

Cerberus Enterprise is a comprehensive EMM solution, designed to help you secure and manage your Android and Apple devices. It has all the right features for effective management of BYOD and company-owned devices in a clean and user-friendly dashboard, and you...

In general, any device running Android 6+ with Google Play Services is compatible with Cerberus Enterprise.For a better user experience, we suggest using devices that meet the Android Enterprise Recommended requirements.Some features are limited to specific An...

Open a device from Dashboard → Devices by clicking the device row. The page title shows the device Model (when available) and the internal Id. Historical data vs current enrollment When a device has multiple enrollments, Cerberus Enterprise can show a read-on...

The Device editor provides a Commands panel to send remote commands to a managed device. Available commands depend on the platform (Android or Apple) and device state. If the device is not currently online, the command will be delivered and executed as soon ...

In this section, you can set policies related to app availability, installation, updates, and permission management.Managed Google Play Accounts are automatically created when devices are provisioned. 1. Play Store modeThis mode controls which apps are availab...

With kiosk mode, you can restrict a device's functionality to a single app or multiple apps. Choosing between single-app and multi-app kiosk mode depends on your business goals.In single-app kiosk mode, a device is configured for a single application and does ...

In this section, you can configure security-related policies. Security risk actionsChoose what to do when a device reports a SecurityRisk in status reports. Supported SecurityRisk types:Unknown OS: Play Integrity API detects that the device is running an unkno...

In this section, you can configure camera/microphone behavior, USB data access, printing, and display-related restrictions. 1. Camera accessControls the use of the camera and whether the user can access the camera access toggle (Android 12+). In general, disab...

In this section, you can configure cellular-related policies. 1. Airplane modeControls whether airplane mode can be toggled by the user or not.User choice (default): The user is allowed to toggle airplane mode on or off.Disabled: Airplane mode is disabled. The...

In this section, you can configure networking-related policies.Wi‑Fi configurations can be provisioned and managed by the system via WiFi configurations. Depending on the value set on Configure Wi‑Fi, users may have limited or no control over adding/modifying ...

In this section, you can configure system-related policies. 1. Minimum API levelThe minimum allowed Android API level. 2. Encryption policyWhether encryption is enabled.Default: This value is ignored, i.e. no encryption required.Enabled without password: Encry...

Add user disabledWhether adding new users and profiles is disabled. For devices where managementMode is DEVICE_OWNER this field is ignored and the user is never allowed to add or remove users. Modify accounts disabledWhether adding or removing accounts is disa...

When provisioning a company-owned device for work and personal use, you can specify some rules to limit how the user can operate the device for personale usage, outside the work profile.This section only apply to company-owned devices with work profile. They w...

Only applies to devices with personal and work profiles.Cross-profile copy/pasteWhether text copied from one profile (personal or work) can be pasted in the other profile.Disallowed (default): Prevents users from pasting into the personal profile text copied f...

In this section, you can configure which data should be retrieved from the device. The status data can be viewed in the Device status dashboard page.GeolocationWhether geolocation reporting is enabled. Application reportsWhether app reports are enabled. (Infor...