Home / Knox Guard / How-to guides / Manage devices /

Update app access control

Last updated October 8th, 2026

This document is new for the Knox cloud services 26.10 UAT.

On this tab

To use this feature, you need a Knox Guard Advanced license.

The App access control policy allows you to both block and allow specific apps from your devices. Restrict access to frequently used apps, while also letting device users access essential apps required for day-to-day functions. You can use this feature to encourage payment compliance, or apply measures to help prevent business devices from being misused.

This device action updates app access controls for a specific device. To configure your tenant-wide app access control settings, see App access control.

Update app access control

You can apply both an allowlist and blocklist to devices. To learn more about how this feature works, see How app access control works.

To update your app access control settings for select devices:

  1. On the Devices page, select one or more devices.

  2. Click ACTIONS > Manage policy > Update app access control.

  3. To prevent specific apps from running on the device, enable Block apps and enter up to 50 package names.

  4. To allow only specific apps to run on the device, enable Allow apps and enter up to ten package names.

  5. Enable Warning notification to display a message on devices when this policy takes effect. We recommend you use this message to explain the restrictions applied, and if applicable, what actions the device user can take to remove these restrictions.

    You can also configure how and when this message displays on devices:

    • Persistent notification: The message displays permanently in the notification panel.
    • Dismissible notification: Device users can remove the message from the notification panel. You can also choose for the message to Show after device reboot.

  6. Click SAVE.

Update app access control in bulk

You can select devices in bulk by entering their IMEIs or serial numbers into a standardized template. The maximum number of devices you can select in one action is 10,000.

To update the app access control for devices in bulk:

  1. Click BULK ACTIONS in the bottom of the left navigation pane.

  2. Click the Download CSV template link from the top portion of the screen.

    For more information on how to create a properly-formatted CSV file, click Instructions for all bulk actions at the bottom of the screen.

  3. Under ADVANCED CONTROLS, click UPDATE APP ACCESS CONTROL and upload your CSV file containing the device IDs.

  4. To prevent specific apps from running on the device, enable Block apps and enter up to 50 package names.

  5. To allow only specific apps to run on the device, enable Allow apps and enter up to ten package names.

  6. Enable Warning notification to display a message on devices when this policy takes effect. We recommend you use this message to explain the restrictions applied, and if applicable, what actions the device user can take to remove these restrictions.

    You can also configure how and when this message displays on devices:

    • Persistent notification: The message displays permanently in the notification panel.
    • Dismissible notification: Device users can remove the message from the notification panel. You can also choose for the message to Show after device reboot.

  7. Click SAVE.

Is this page helpful?