Contents x
    Delegation Scope Management
    • 23 Oct 2023
    • 2 Minutes to read
    • Print
    • PDF
    Contents

    Delegation Scope Management

    • Updated on 23 Oct 2023
    • 2 Minutes to read
    • Print
    • PDF
    Article Summary

    IT administrators now have the capability to assign additional privileges, such as Certificate Management, app permission management, and the ability to prevent uninstalls, to their third-party application(s). These designated third-party applications can then take control of the assigned privileges and carry out the delegated tasks on the managed Android devices.

    Before you begin

    1. Devices should be OS 8 and above.
    2. Devices should be EMM Managed or BYO.
    3. The application must have the Android Enterprise APIs embedded in their code to fully utilize this feature. You can refer the Google Developer documentation.
    This feature is available in the Enterprise license plan. 

    Configuring App Delegation Settings

    1. Navigate to Device Profiles & Policies section > Device Profiles on the dashboard.
    2. Create a new Profile or edit the existing profile.
    3. Go to Restrictions > Advanced Settings > App Delegation.
    In BYOD Profile, this option will be under Restrictions > Advance Settings. 

    PrivilegesDescription
    Certificate Installation
    		The selected application will get privileges for certificate installation and management i.e., the application will be able to install or uninstall certificates on the device(s).
    Manage App Configurations
    		The selected application will get the privilege for managing app configurations. With this the app configurations for a particular app can be independently set up.
    Package Access State
    		The selected application will get the privilege for managing app state i.e., hide or suspend app.
    Manage App Permissions
    		The selected application will get the privilege for managing app permissions individually with less or no user intervention.
    Block Uninstall
    		The selected application will have the privilege for blocking uninstallation of applications.
    Enable System Apps
    		The selected application will have the privilege for managing system apps by re-enabling the system apps that were disabled by default.
    Input method
    		The select package can be set as the default input method on the device. You can choose a third-party keyboard and set that as the default one on the device.
    Input method will be supported on EMM managed (OS 8 & above), BYO Devices (OS 10 & above) and Wingman devices (OS 5 & above).

    Networking logs
    		The selected package will have access to networking logs of the device.
    All network logs like low network, switch network, network connectivity, usage of APNS, can be tracked by the selected package.
    Your Networking logs will be supported on EMM managed (OS 10 & above) and BYO devices (OS 12 & above).
    Note that the network logs will only include Work Profile network activities and the not the activity on the personal side on BYO devices.

    Security logs
    		The selected package will have the access to security logs of the device.
    Your Security logs are supported on OS 12 & above (EMM managed and BYO devices).



    Was this article helpful?
    What's Next
    Ambitious companies around the world trust Scalefusion to secure and manage endpoints including smartphones, tablets, laptops, rugged devices, POS, and digital signages. Our mission is to make Device Management simple and effortless along with providing world class customer support.
    By Business Initiative
    Top Features
    Existing Users
    Connect With Us
    Sales and Support
    Copyright © 2023 Scalefusion. All rights reserved.