Device Restrictions Overview

Restriction settings are set at the profile level and consists of overriding privacy restrictions which are applied to the device. To configure these restrictions navigate to Profiles then select the Profile you would like to edit using the Pencil icon.  Under the What section you will see the following icon in the edit profile screen: 

Across the operating systems (Android, iOS and macOS), there are three main restriction settings that are common:

• Disable Camera
• Hide Location
• Hide SSID

In addition to these three restrictions there are a number of OS-specific restrictions which can be applied. 

Android

Currently, there are the following additional restriction settings:

• Disable access to settings
• Disable 3rd party browsers
• Configure WiFi settings: Force WiFi On/Off/Users choice
• EMM settings

iOS supervised

Supervised iOS devices running on later versions have the most additional restrictions available to be configured. 

• Airprint
• Block application installation and removal
• Block cloud services
• Block Device Modification
• Block explicit content
• Block files application connectivity
• Block media services
• Block Safari
• Block Sharing
• Block Social
• Block spending
• Block system preferences
• Block voice and text assistant
• Classroom
• Lock Down Privacy
• Lock Down Security

There are additional levels of granularity offered in each of the above points which adds to the control that the user can have over the restriction settings on the device .

The restrictions which apply only to supervised iOS devices and which versions they apply to are clearly identifiable on the screen. 

macOS

Current Restriction settings for MacOS are as follows:

• Block cloud services
• Block media services
• Block Safari
• Block Sharing
• Block Social
• Block system preferences
• Block voice and text assistant
• Lock Down Security

It is important to note that if you have no iOS or macOS restrictions defined then the restrictions will fall back on those defined in the Baseline profile. This is important as these Privacy restrictions can also be set in the Baseline profile.