You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: docs/dyn/androidmanagement_v1.enterprises.policies.html
+24-12
Original file line number
Diff line number
Diff line change
@@ -152,9 +152,9 @@ <h3>Method Details</h3>
152
152
"androidDevicePolicyTracks": [ # The app tracks for Android Device Policy the device can access. The device receives the latest version among all accessible tracks. If no tracks are specified, then the device only uses the production track.
153
153
"A String",
154
154
],
155
-
"appAutoUpdatePolicy": "A String", # Deprecated. Use autoUpdateMode instead.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.
155
+
"appAutoUpdatePolicy": "A String", # Recommended alternative: autoUpdateMode which is set per app, provides greater flexibility around update frequency.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.
156
156
"applications": [ # Policy applied to apps.
157
-
{ # Policy for an individual app.
157
+
{ # Policy for an individual app. Note: Application availability on a given device cannot be changed using this policy if installAppsDisabled is enabled.
158
158
"accessibleTrackIds": [ # List of the app’s track IDs that a device belonging to the enterprise can access. If the list contains multiple track IDs, devices receive the latest version among all accessible tracks. If the list contains no track IDs, devices only have access to the app’s production track. More details about each track are available in AppTrackInfo.
159
159
"A String",
160
160
],
@@ -239,6 +239,9 @@ <h3>Method Details</h3>
239
239
"dataRoamingDisabled": True or False, # Whether roaming data services are disabled.
240
240
"debuggingFeaturesAllowed": True or False, # Whether the user is allowed to enable debugging features.
241
241
"defaultPermissionPolicy": "A String", # The default permission policy for runtime permission requests.
242
+
"deviceConnectivityManagement": { # Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more. # Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more.
243
+
"usbDataAccess": "A String", # Controls what files and/or data can be transferred via USB. Supported only on company-owned devices.
244
+
},
242
245
"deviceOwnerLockScreenInfo": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # The device owner information to be shown on the lock screen.
243
246
"defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
244
247
"localizedMessages": { # A map containing pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
@@ -487,7 +490,7 @@ <h3>Method Details</h3>
487
490
"usbMassStorageEnabled": True or False, # Whether USB storage is enabled. Deprecated.
488
491
"version": "A String", # The version of the policy. This is a read-only field. The version is incremented each time the policy is updated.
489
492
"vpnConfigDisabled": True or False, # Whether configuring VPN is disabled.
490
-
"wifiConfigDisabled": True or False, # Whether configuring Wi-Fi access points is disabled. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).
493
+
"wifiConfigDisabled": True or False, # Whether configuring Wi-Fi networks is disabled. Supported on fully managed devices and work profiles on company-owned devices. For fully managed devices, setting this to true removes all configured networks and retains only the networks configured using openNetworkConfiguration. For work profiles on company-owned devices, existing configured networks are not affected and the user is not allowed to add, remove, or modify Wi-Fi networks. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).
491
494
"wifiConfigsLockdownEnabled": True or False, # DEPRECATED - Use wifi_config_disabled.
492
495
}</pre>
493
496
</div>
@@ -533,9 +536,9 @@ <h3>Method Details</h3>
533
536
"androidDevicePolicyTracks": [ # The app tracks for Android Device Policy the device can access. The device receives the latest version among all accessible tracks. If no tracks are specified, then the device only uses the production track.
534
537
"A String",
535
538
],
536
-
"appAutoUpdatePolicy": "A String", # Deprecated. Use autoUpdateMode instead.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.
539
+
"appAutoUpdatePolicy": "A String", # Recommended alternative: autoUpdateMode which is set per app, provides greater flexibility around update frequency.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.
537
540
"applications": [ # Policy applied to apps.
538
-
{ # Policy for an individual app.
541
+
{ # Policy for an individual app. Note: Application availability on a given device cannot be changed using this policy if installAppsDisabled is enabled.
539
542
"accessibleTrackIds": [ # List of the app’s track IDs that a device belonging to the enterprise can access. If the list contains multiple track IDs, devices receive the latest version among all accessible tracks. If the list contains no track IDs, devices only have access to the app’s production track. More details about each track are available in AppTrackInfo.
540
543
"A String",
541
544
],
@@ -620,6 +623,9 @@ <h3>Method Details</h3>
620
623
"dataRoamingDisabled": True or False, # Whether roaming data services are disabled.
621
624
"debuggingFeaturesAllowed": True or False, # Whether the user is allowed to enable debugging features.
622
625
"defaultPermissionPolicy": "A String", # The default permission policy for runtime permission requests.
626
+
"deviceConnectivityManagement": { # Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more. # Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more.
627
+
"usbDataAccess": "A String", # Controls what files and/or data can be transferred via USB. Supported only on company-owned devices.
628
+
},
623
629
"deviceOwnerLockScreenInfo": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # The device owner information to be shown on the lock screen.
624
630
"defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
625
631
"localizedMessages": { # A map containing pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
@@ -868,7 +874,7 @@ <h3>Method Details</h3>
868
874
"usbMassStorageEnabled": True or False, # Whether USB storage is enabled. Deprecated.
869
875
"version": "A String", # The version of the policy. This is a read-only field. The version is incremented each time the policy is updated.
870
876
"vpnConfigDisabled": True or False, # Whether configuring VPN is disabled.
871
-
"wifiConfigDisabled": True or False, # Whether configuring Wi-Fi access points is disabled. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).
877
+
"wifiConfigDisabled": True or False, # Whether configuring Wi-Fi networks is disabled. Supported on fully managed devices and work profiles on company-owned devices. For fully managed devices, setting this to true removes all configured networks and retains only the networks configured using openNetworkConfiguration. For work profiles on company-owned devices, existing configured networks are not affected and the user is not allowed to add, remove, or modify Wi-Fi networks. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).
872
878
"wifiConfigsLockdownEnabled": True or False, # DEPRECATED - Use wifi_config_disabled.
873
879
},
874
880
],
@@ -920,9 +926,9 @@ <h3>Method Details</h3>
920
926
"androidDevicePolicyTracks": [ # The app tracks for Android Device Policy the device can access. The device receives the latest version among all accessible tracks. If no tracks are specified, then the device only uses the production track.
921
927
"A String",
922
928
],
923
-
"appAutoUpdatePolicy": "A String", # Deprecated. Use autoUpdateMode instead.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.
929
+
"appAutoUpdatePolicy": "A String", # Recommended alternative: autoUpdateMode which is set per app, provides greater flexibility around update frequency.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.
924
930
"applications": [ # Policy applied to apps.
925
-
{ # Policy for an individual app.
931
+
{ # Policy for an individual app. Note: Application availability on a given device cannot be changed using this policy if installAppsDisabled is enabled.
926
932
"accessibleTrackIds": [ # List of the app’s track IDs that a device belonging to the enterprise can access. If the list contains multiple track IDs, devices receive the latest version among all accessible tracks. If the list contains no track IDs, devices only have access to the app’s production track. More details about each track are available in AppTrackInfo.
927
933
"A String",
928
934
],
@@ -1007,6 +1013,9 @@ <h3>Method Details</h3>
1007
1013
"dataRoamingDisabled": True or False, # Whether roaming data services are disabled.
1008
1014
"debuggingFeaturesAllowed": True or False, # Whether the user is allowed to enable debugging features.
1009
1015
"defaultPermissionPolicy": "A String", # The default permission policy for runtime permission requests.
1016
+
"deviceConnectivityManagement": { # Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more. # Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more.
1017
+
"usbDataAccess": "A String", # Controls what files and/or data can be transferred via USB. Supported only on company-owned devices.
1018
+
},
1010
1019
"deviceOwnerLockScreenInfo": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # The device owner information to be shown on the lock screen.
1011
1020
"defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
1012
1021
"localizedMessages": { # A map containing pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
@@ -1255,7 +1264,7 @@ <h3>Method Details</h3>
1255
1264
"usbMassStorageEnabled": True or False, # Whether USB storage is enabled. Deprecated.
1256
1265
"version": "A String", # The version of the policy. This is a read-only field. The version is incremented each time the policy is updated.
1257
1266
"vpnConfigDisabled": True or False, # Whether configuring VPN is disabled.
1258
-
"wifiConfigDisabled": True or False, # Whether configuring Wi-Fi access points is disabled. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).
1267
+
"wifiConfigDisabled": True or False, # Whether configuring Wi-Fi networks is disabled. Supported on fully managed devices and work profiles on company-owned devices. For fully managed devices, setting this to true removes all configured networks and retains only the networks configured using openNetworkConfiguration. For work profiles on company-owned devices, existing configured networks are not affected and the user is not allowed to add, remove, or modify Wi-Fi networks. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).
1259
1268
"wifiConfigsLockdownEnabled": True or False, # DEPRECATED - Use wifi_config_disabled.
1260
1269
}
1261
1270
@@ -1290,9 +1299,9 @@ <h3>Method Details</h3>
1290
1299
"androidDevicePolicyTracks": [ # The app tracks for Android Device Policy the device can access. The device receives the latest version among all accessible tracks. If no tracks are specified, then the device only uses the production track.
1291
1300
"A String",
1292
1301
],
1293
-
"appAutoUpdatePolicy": "A String", # Deprecated. Use autoUpdateMode instead.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.
1302
+
"appAutoUpdatePolicy": "A String", # Recommended alternative: autoUpdateMode which is set per app, provides greater flexibility around update frequency.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.
1294
1303
"applications": [ # Policy applied to apps.
1295
-
{ # Policy for an individual app.
1304
+
{ # Policy for an individual app. Note: Application availability on a given device cannot be changed using this policy if installAppsDisabled is enabled.
1296
1305
"accessibleTrackIds": [ # List of the app’s track IDs that a device belonging to the enterprise can access. If the list contains multiple track IDs, devices receive the latest version among all accessible tracks. If the list contains no track IDs, devices only have access to the app’s production track. More details about each track are available in AppTrackInfo.
1297
1306
"A String",
1298
1307
],
@@ -1377,6 +1386,9 @@ <h3>Method Details</h3>
1377
1386
"dataRoamingDisabled": True or False, # Whether roaming data services are disabled.
1378
1387
"debuggingFeaturesAllowed": True or False, # Whether the user is allowed to enable debugging features.
1379
1388
"defaultPermissionPolicy": "A String", # The default permission policy for runtime permission requests.
1389
+
"deviceConnectivityManagement": { # Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more. # Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more.
1390
+
"usbDataAccess": "A String", # Controls what files and/or data can be transferred via USB. Supported only on company-owned devices.
1391
+
},
1380
1392
"deviceOwnerLockScreenInfo": { # Provides a user-facing message with locale info. The maximum message length is 4096 characters. # The device owner information to be shown on the lock screen.
1381
1393
"defaultMessage": "A String", # The default message displayed if no localized message is specified or the user's locale doesn't match with any of the localized messages. A default message must be provided if any localized messages are provided.
1382
1394
"localizedMessages": { # A map containing pairs, where locale is a well-formed BCP 47 language (https://www.w3.org/International/articles/language-tags/) code, such as en-US, es-ES, or fr.
@@ -1625,7 +1637,7 @@ <h3>Method Details</h3>
1625
1637
"usbMassStorageEnabled": True or False, # Whether USB storage is enabled. Deprecated.
1626
1638
"version": "A String", # The version of the policy. This is a read-only field. The version is incremented each time the policy is updated.
1627
1639
"vpnConfigDisabled": True or False, # Whether configuring VPN is disabled.
1628
-
"wifiConfigDisabled": True or False, # Whether configuring Wi-Fi access points is disabled. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).
1640
+
"wifiConfigDisabled": True or False, # Whether configuring Wi-Fi networks is disabled. Supported on fully managed devices and work profiles on company-owned devices. For fully managed devices, setting this to true removes all configured networks and retains only the networks configured using openNetworkConfiguration. For work profiles on company-owned devices, existing configured networks are not affected and the user is not allowed to add, remove, or modify Wi-Fi networks. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).
1629
1641
"wifiConfigsLockdownEnabled": True or False, # DEPRECATED - Use wifi_config_disabled.
"description": "Policy for an individual app. Note: Application availability on a given device cannot be changed using this policy if installAppsDisabled is enabled.",
1507
1507
"id": "ApplicationPolicy",
1508
1508
"properties": {
1509
1509
"accessibleTrackIds": {
@@ -2472,6 +2472,29 @@
2472
2472
},
2473
2473
"type": "object"
2474
2474
},
2475
+
"DeviceConnectivityManagement": {
2476
+
"description": "Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more.",
2477
+
"id": "DeviceConnectivityManagement",
2478
+
"properties": {
2479
+
"usbDataAccess": {
2480
+
"description": "Controls what files and/or data can be transferred via USB. Supported only on company-owned devices.",
2481
+
"enum": [
2482
+
"USB_DATA_ACCESS_UNSPECIFIED",
2483
+
"ALLOW_USB_DATA_TRANSFER",
2484
+
"DISALLOW_USB_FILE_TRANSFER",
2485
+
"DISALLOW_USB_DATA_TRANSFER"
2486
+
],
2487
+
"enumDescriptions": [
2488
+
"Unspecified. Defaults to ALLOW_USB_DATA_TRANSFER, unless usbFileTransferDisabled is set to true. If usbFileTransferDisabled is set to true, this is equivalent to DISALLOW_USB_FILE_TRANSFER.",
2489
+
"All types of USB data transfers are allowed. usbFileTransferDisabled is ignored.",
2490
+
"Transferring files over USB is disallowed. Other types of USB data connections, such as mouse and keyboard connection, are allowed. usbFileTransferDisabled is ignored.",
2491
+
"When set, all types of USB data transfers are prohibited. Supported for devices running Android 12 or above with USB HAL 1.3 or above. If the setting is not supported, DISALLOW_USB_FILE_TRANSFER will be set. A nonComplianceDetail with API_LEVEL is reported if the Android version is less than 12. A nonComplianceDetail with DEVICE_INCOMPATIBLE is reported if the device does not have USB HAL 1.3 or above. usbFileTransferDisabled is ignored."
2492
+
],
2493
+
"type": "string"
2494
+
}
2495
+
},
2496
+
"type": "object"
2497
+
},
2475
2498
"DeviceSettings": {
2476
2499
"description": "Information about security related device settings on device.",
2477
2500
"id": "DeviceSettings",
@@ -3609,7 +3632,8 @@
3609
3632
"APP_INSTALLED",
3610
3633
"PENDING",
3611
3634
"APP_INCOMPATIBLE",
3612
-
"APP_NOT_UPDATED"
3635
+
"APP_NOT_UPDATED",
3636
+
"DEVICE_INCOMPATIBLE"
3613
3637
],
3614
3638
"enumDescriptions": [
3615
3639
"This value is disallowed.",
@@ -3622,7 +3646,8 @@
3622
3646
"A blocked app is installed.",
3623
3647
"The setting hasn't been applied at the time of the report, but is expected to be applied shortly.",
3624
3648
"The setting can't be applied to the app because the app doesn't support it, for example because its target SDK version is not high enough.",
3625
-
"The app is installed, but it hasn't been updated to the minimum version code specified by policy."
3649
+
"The app is installed, but it hasn't been updated to the minimum version code specified by policy.",
3650
+
"The device is incompatible with the policy requirements."
3626
3651
],
3627
3652
"type": "string"
3628
3653
},
@@ -3678,7 +3703,8 @@
3678
3703
"APP_INSTALLED",
3679
3704
"PENDING",
3680
3705
"APP_INCOMPATIBLE",
3681
-
"APP_NOT_UPDATED"
3706
+
"APP_NOT_UPDATED",
3707
+
"DEVICE_INCOMPATIBLE"
3682
3708
],
3683
3709
"enumDescriptions": [
3684
3710
"This value is disallowed.",
@@ -3691,7 +3717,8 @@
3691
3717
"A blocked app is installed.",
3692
3718
"The setting hasn't been applied at the time of the report, but is expected to be applied shortly.",
3693
3719
"The setting can't be applied to the app because the app doesn't support it, for example because its target SDK version is not high enough.",
3694
-
"The app is installed, but it hasn't been updated to the minimum version code specified by policy."
3720
+
"The app is installed, but it hasn't been updated to the minimum version code specified by policy.",
3721
+
"The device is incompatible with the policy requirements."
3695
3722
],
3696
3723
"type": "string"
3697
3724
},
@@ -4176,7 +4203,7 @@
4176
4203
"type": "array"
4177
4204
},
4178
4205
"appAutoUpdatePolicy": {
4179
-
"description": "Deprecated. Use autoUpdateMode instead.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.",
4206
+
"description": "Recommended alternative: autoUpdateMode which is set per app, provides greater flexibility around update frequency.When autoUpdateMode is set to AUTO_UPDATE_POSTPONED or AUTO_UPDATE_HIGH_PRIORITY, this field has no effect.The app auto update policy, which controls when automatic app updates can be applied.",
4180
4207
"enum": [
4181
4208
"APP_AUTO_UPDATE_POLICY_UNSPECIFIED",
4182
4209
"CHOICE_TO_THE_USER",
@@ -4308,6 +4335,10 @@
4308
4335
],
4309
4336
"type": "string"
4310
4337
},
4338
+
"deviceConnectivityManagement": {
4339
+
"$ref": "DeviceConnectivityManagement",
4340
+
"description": "Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more."
4341
+
},
4311
4342
"deviceOwnerLockScreenInfo": {
4312
4343
"$ref": "UserFacingMessage",
4313
4344
"description": "The device owner information to be shown on the lock screen."
@@ -4687,7 +4718,7 @@
4687
4718
"type": "boolean"
4688
4719
},
4689
4720
"wifiConfigDisabled": {
4690
-
"description": "Whether configuring Wi-Fi access points is disabled. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).",
4721
+
"description": "Whether configuring Wi-Fi networks is disabled. Supported on fully managed devices and work profiles on company-owned devices. For fully managed devices, setting this to true removes all configured networks and retains only the networks configured using openNetworkConfiguration. For work profiles on company-owned devices, existing configured networks are not affected and the user is not allowed to add, remove, or modify Wi-Fi networks. Note: If a network connection can't be made at boot time and configuring Wi-Fi is disabled then network escape hatch will be shown in order to refresh the device policy (see networkEscapeHatchEnabled).",
0 commit comments