Custom profile support on AirWatch Agent 6.0 for Android for Work devices

Custom profile support on AirWatch Agent 6.0 for Android for Work devices

Android for Work offers advanced MDM functionalities that can be configured through profile in the AirWatch Admin Console. AirWatch uses Custom profiles to allow admins to push features and other settings to Android for Work devices that are not supported through AirWatch.  Note that these profiles require AirWatch Agent 6.0 for Android is installed and configured on devices.

Android for Work devices support the following advanced configuration:

  • Enabling system apps
  • Enabling device restrictions
  • Implementing OS update policy

 

Enabling system apps

There are only a handful of system apps that are pre-installed on the device that are not shown to the user on devices configured for Android for Work-Work Profile or Work Managed Device mode. In order to un-hide or enable system apps inside the Work Profile or Work Managed Device mode, admins will have to push a Custom profile with specific XML code.

From the AirWatch Admin Console, follow the steps below to unhide systems apps for end user devices:

  • Navigate to Devices > Profiles > List View > Add > Add Profile > Android >Android for Work
  • Configure the General profile settings as desired.
  • Select the Custom Settings profile.
<characteristic type="com.airwatch.android.androidwork.application" uuid="1e1b1e8c-98de-46b6-92c9-f9d40fa782fe"> 
    <parm name="EnabledSystemApplicationName" value="Sony Music, Sony Radio" />
    <parm name="EnabledSystemApplicationId" value="com.sonyericsson.music, com.sonyericsson.fmradio" />
    <parm name="EnableSystemAppsInWorkProfile" value="True" />
</characteristic> 
  • Select Save & Publish.

 

Enabling device restrictions

The following device restrictions have been implemented to support native features of Android Lollipop and Marshmallow:

  • Device Functionality
    • Force Screen On when Plugged In on AC Charger
    • Force Screen On when Plugged In on USB Charger
    • Force Screen On when Plugged In on Wireless Charger
    • Allow Status Bar
    •  Allow Keyguard
    • Allow Adding Users
    • Allow Removing Users
    • Allow Safe Boot
  • Network
    • Allow NFC
    • Allow Managed Wi-Fi Profile Changes
    • Allow Data Roaming
  • Location Services
    • Allow Location Access
    • Allow No Location Access
    • Allow GPS Location Only
    • Allow Battery Saving Location Updates Only
    • Allow High Accuracy Location Only
  • Work and Personal
    • Allow Work contact's caller ID info to show in phone dialer
    • Share Enterprise Contacts with Bluetooth Devices

From the AirWatch Admin Console, follow the steps listed to implement device restrictions:

  • Navigate to Devices > Profiles > List View > Add > Add Profile > Android  > Android for Work
  • Configure the General profile settings as desired.
  • Select the Custom Settings profile.
  • Use the following custom XML code to implement this policy:
<characteristic type="com.airwatch.android.androidwork.restrictions" uuid="c235a1d7-d707-4a5e-bd91-3dd060d7d9ec">
    <parm name="forceScreenOnPluggedAC" value="False" />
    <parm name="forceScreenOnPluggedUSB" value="False" />
    <parm name="forceScreenOnPluggedWireless" value="False" />
    <parm name="allowStatusBar" value="True" />
    <parm name="allowKeyguard " value="True" />
    <parm name="allowBluetoothContactSharing" value="True" />
    <parm name="allowNFC" value="True" />
    <parm name="allowAddingUsers" value="True" />
    <parm name="allowRemovingUsers" value="True" />
    <parm name="allowManagedWifiChanges" value="True" />
    <parm name="allowSafeBoot" value="True" />
    <parm name="allowLocationAccess" value="3" />
</characteristic>

 

  • Enter the desired value for the allowLocationAccess restriction:
    • 0 - No Location Access
    • 1 - Sensors Only Location Access Mode
    • 2 - Battery Saving Location Access Mode
    • 3 - High Accuracy Location Access Mode
  • Select Save & Publish.

 

Implementing OS update policy

You can control OS updates with this profile in three ways:

  • Install Updates Automatically – Always automatically update when new update are available.
  • Defer Update Notifications – Defer all updates. Send a policy that blocks OS updates for a maximum of 30 days.
  • Set Update Window – Set a time window in which to update the device.

Follow the steps below to implement this policy:

  • Navigate to Devices > Profiles > List View > Add > Add Profile > Android > Android for Work.
  • Configure the General profile settings as desired.
  • Select Custom Settings > Configure.
  • Use the following custom XML code to implement this policy:
<characteristic type="com.airwatch.android.androidwork.systemupdatepolicy" uuid="c235a1d7-d707-4a5e-bd91-3dd060d7d9ec">
    <parm name="installPolicy" value="1" />
    <parm name="startTime" value="00" />
    <parm name="endTime" value="00" />
</characteristic>

 

  • Select Save & Publish.

 

Enter the desired value for the Install Policy to determine how the updates are controlled:

  • 1 – Install Updates Automatically
    • Note: “startTime” and “endTime” are not used when this value is chosen
  • 2 – Defer Update Notifications (up to 30 days)
    • Note: “startTime” and “endTime” are not used when this value is chosen
  • 3 – Set Update Window. Specify the Start Time and End Time in 24 hour format.
Have more questions? Submit a request

0 Comments

Article is closed for comments.