Mobile Device Management on Android
Overview
MDM (Mobile Device Management) is a way to remotely configure, monitor, and manage mobile devices and apps.
It allows admins to:
- Configure app settings
Prerequisites
To use application restrictions on Android, the device must be managed by an enterprise mobility solution based on Android Enterprise.
This ensures that an administrator (or “Restrictions Provider”) can enforce and deliver configurations to applications.
How it Works
The application:
- Uses
android.content.RestrictionsManagerto read restrictions - Defines available configuration keys in an XML file
- Declares this XML in the app manifest using a
meta-datatag
Available Restrictions
| Key | Type |
|---|---|
| proxy_host | string |
| proxy_port | integer |
| base_url | string |
| disable_multiaccount | bool |
| disable_sharing | bool |
| disable_clipboard | bool |
| disable_more_external_site | bool |
| disable_intro | bool |
| disable_log | bool |
| enforce_protection | bool |
How to Deploy Configuration Profiles
- The app is installed on managed devices
- The MDM / Restrictions Provider reads the app’s restrictions XML
- Available configuration options (e.g.,
enforce_protection,disable_sharing) are displayed in the admin console - The admin sets desired values
- These values are pushed to the device
- The app reads and applies them at runtime
No changes to the app are required after deployment. The configuration is fully controlled externally.
Subscriber exclusive content
A Nextcloud Enterprise Subscription provides unlimited access to our knowledge base articles and direct access to Nextcloud engineers.