Already a NinjaOne customer? Log in to view more guides and the latest updates.

NinjaOne Android MDM: Configuring and Editing Application Restrictions and Settings

Topic

This article discusses configuring and editing Android application restrictions and settings in NinjaOne Mobile Device Management (MDM).

Environment

  • NinjaOne Mobile Device Management (MDM)
  • Android

Description

Technicians can edit the applications installed at the policy level to override the default settings for each application.

Procedure

  1. From the Android MDM policy editor, open the Applications tab, select an installed application, and click the Edit button. 

Figure 1: Managed Applications in the MDM Policy Editor (click to enlarge)

  1. The Applications Policy Editor will appear with the General tab open by default. This is a long, scrollable page with many configurable options. Refer to the table underneath Figure 2. for an explanation of each option.

MDMAppMgmt_AppPolicyEditor.png

Figure 2: The Applications Policy Editor (click to enlarge)

Configuration options

SettingDescription
Enabled

Turn OFF toggle switch_off.png to enable the app on the device or turn ON toggle switch_on.pngto prevent app use. 
 

  • This option is helpful for temporarily disabling the use of an app without deleting and re-installing it.
  • If the device's user attempts to use a disabled app, they will receive a notification that the app has been disabled by their administrator. 
Assignment TypeRefer to the Application Assignment Types section for a description of each type. 
Default Permission Policy
  • Permission Policy Unspecified
  • Prompt
  • Grant
  • Deny
Connected Work and Personal App
  • Unspecified—defaults to "Allowed"
  • Disallowed
  • Allowed
Auto Update Mode
  • Unspecified
  • Default
  • Postponed
  • High Priority
Allow force stop and clear dataAllow or restrict a user to force-stop an app and clear the cache. 
Requires Android 11 or later versions. 
Application track for installationThis option lists available closed-track app versions within Google Play. If an app developer supports application tracks and the app has been shared with the customer connection ID, NinjaOne will show these versions of the app here.

Select a track and move between versions. This will only change versions on a device when a newer version code is available than what is installed on the device.
Per app permission overridesSelect a permission from the dropdown list to allow granular permission control. Each app provides its declared permissions and will have a different list of available overrides.
OverridesEach selection from the Per App permission overrides drop-down menu will be displayed here. When an override is added, a new drop-down menu displays. You can allow, deny, or prompt access to the permission. 
Click the X on the right side to remove the override. These will override any global permissions set!
app_permission overrides.png
Delegated Scope OverridesAndroid apps can have additional delegation scopes, letting applications install certificates, access managed configurations, block uninstallation, enable system apps, and more.
Access this feature in the Android policy editor by going to Applications and editing an installed application; it will be at the bottom of the modal.
Select one or more scopes from the dropdown; click the X to remove them. The availability of these scopes may depend on the application selected. 

Additional Resources

For further information about adding and managing Android applications, refer to NinjaOne MDM: Getting Started with Android Device Management.

FAQ

Next Steps