Manage restrictions in the Library

Related Video: Restriction Management

Restriction management allows an admin to enable and disable settings that affect device functionality, security and privacy, internet, media, and more. Restriction sets are created in the library and can be applied to single or multiple devices.

In the restrictions library, an admin can add a new Android-, iOS-, or macOS-specific restriction set; edit or remove a restriction set; or view all devices with a specific restriction set applied.

Restriction Sets: Library view:

Add a new restriction set to the Library

A Restriction set is a grouping of multiple restrictions that are created, named, and saved as a single set, then applied to devices. Restriction sets are created and managed in the restrictions library.

Select the Libraries tab in top navigation.
Click Add New , then choose Android, iOS, or macOS.
Name and describe the restriction set, then enable or disable the available restrictions.
When you are done, click Save Restriction Set.

Edit a restriction set

A restriction set can only be edited in the library—it cannot be edited from the individual devices view.

Select the Libraries tab in top navigation.
Open the restrictions library.
Select the restriction that you'd like to edit.
In the right panel, click Edit.
Make changes, then click Update Restriction Set.

Android devices: About Google Play Store app restrictions

Restrictions related to the apps available from the Google Play Store depend on the managed device's enrollment path (AMAPI or EMM). The following table illustrates the available settings and their behavior.

	Allow personal accounts in the managed Google Play Store: Enabled	Allow personal accounts in the managed Google Play Store: Disabled
Restrict app usage: Allow ALL approved apps	When apps are installed from a personal Google Play Store (not from the Apps Library): AMAPI-enrolled devices: When Inventory occurs, these apps are removed. EMM-enrolled devices: When inventory occurs, these apps are not removed.	AMAPI-enrolled devices: Personal Play Store account is not allowed. Only apps from work Play Store account appear available for installation. EMM-enrolled devices: Same as AMAPI-enrolled devices.
Restrict app usage: Block specific apps	AMAPI-enrolled devices: Any apps from the Google Play Store can be installed (with or without a personal Google Play Store account), including any blocked apps. When Inventory occurs, blocked apps are removed. Non-blocked apps installed from the Google Play Store remain installed. EMM-enrolled devices: Any apps from the Google Play Store appear available for installation (with a personal Google Play Store account), however blocked apps cannot be installed. When Inventory occurs, apps installed form the Google Play Store remain installed.	AMAPI-enrolled devices: Any apps from the Google Play Store can be installed (with or without a personal Google Play Store account), however blocked apps cannot be installed. When Inventory occurs, non-blocked apps installed from the Google Play Store remain installed. EMM-enrolled devices: Google Play Store is limited to the apps in the Apps Library.
Restrict app usage: Allow specific apps	AMAPI-enrolled devices: Only the allowed apps from the Google Play store appear available for installation, and also those specified in any policies associated with the device. EMM-enrolled devices: Same as AMAPI-enrolled devices.	AMAPI-enrolled devices: Only the allowed apps appear in the Google Play Store, and they are installed automatically. EMM-enrolled devices: Only the allowed apps appear in the Google Play Store, and they are NOT installed automatically.

Remove a restriction set from the Library

Removing a restriction set from the library will also remove it from any devices on which it was installed.

Select the Libraries tab in top navigation.
Select one or more restriction set from the main list.
Click Remove, then Confirm.