| Android
Legacy |
AE feature
mapping path |
| Category |
Policy |
| System
|
Factory reset |
Android Enterprise |
> |
System |
> |
Factory Reset |
|
|
|
|
| Power off |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Power off |
|
|
|
|
| Backup |
Android Enterprise |
> |
System |
> |
Backup |
|
|
|
|
| Settings |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Settings |
|
|
|
|
| OTA upgrade |
Samsung Knox(Android Enterprise) |
> |
System |
> |
OTA Upgrade |
|
|
|
|
| System app
close |
N/A |
|
|
|
|
|
|
|
|
| App crash
report to Google |
N/A |
|
|
|
|
|
|
|
|
| Multiple users |
N/A |
|
|
|
|
|
|
|
|
| Expand status
bar |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Expand Status Bar |
|
|
|
|
| Change
wallpaper |
Android Enterprise |
> |
System |
> |
Change Wallpaper |
|
|
|
|
| Automatic date
and time |
Android Enterprise |
> |
System |
> |
Automatic Date and Time |
|
|
|
|
| Camera |
Android Enterprise |
> |
System |
> |
Camera |
|
|
|
|
| Screen capture |
Android Enterprise |
> |
System |
> |
Screen Capture |
|
|
|
|
| Clipboard |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Clipboard |
|
|
|
|
| Share via apps |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Share via Apps |
|
|
|
|
| S beam |
Android Enterprise |
> |
System |
> |
S Beam |
|
|
|
|
| Encryption for
storage |
Android Enterprise |
> |
System |
> |
Encryption for Storage |
|
|
|
|
| External SD
card |
Android Enterprise |
> |
System |
> |
External SC Card |
|
|
|
|
| Unauthorized
SD card |
N/A |
|
|
|
|
|
|
|
|
| Action of
compromised OS is detected |
Android Enterprise |
> |
System |
> |
If Compromised OS is Detected |
|
|
|
|
| Smart Select |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Smart Select |
|
|
|
|
| Device
administrators to install and activate apps |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Device-wide policies |
> |
Device Admin allowlisting |
|
| Developer mode |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Developer Mode |
|
|
|
|
| Safe mode |
Android Enterprise |
> |
System |
> |
Safe Mode |
|
|
|
|
| Reboot banner |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Reboot Banner |
|
|
|
|
| Domain
blocklist settings |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Domain Blocklist Settings |
|
|
|
|
| NTP settings |
Android Enterprise |
> |
System |
> |
NTP Settings |
|
|
|
|
| Set
notifications from an event to On |
Android Enterprise |
> |
System |
> |
Set Notifications from an event to On |
|
|
|
|
| Set
notifications from an event to Off |
Android Enterprise |
> |
System |
> |
Set Notifications from an event to Off |
|
|
|
|
| Fix event
notification |
Android Enterprise |
> |
System |
> |
Fix Event Notification |
|
|
|
|
| Control power
saving mode |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Control Power Saving Mode |
|
|
|
|
| Firmware
download mode control |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Firmware Download Mode Control |
|
|
|
|
| Samsung
keyboard settings control |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Samsung Keyboard Settings Control |
|
|
|
|
| Data saver
mode |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Device-wide policies |
> |
Device Restriction |
> |
Allow data saver mode |
| Interface
|
Wi-Fi control |
Android Enterprise |
> |
Interface |
> |
Wi-Fi |
|
|
|
|
| Wi-Fi hotspot |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
Wi-Fi Hotspot |
|
|
|
|
| Wi-Fi SSID
whitlist setting |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
Wi-Fi SSID Allowlist Setting |
|
|
|
|
| Wi-Fi SSID
blocklist setting |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
Wi-Fi SSID Blocklist Setting |
|
|
|
|
| Wi-Fi auto
connection |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
Wi-Fi SSID Auto Connection |
|
|
|
|
| Wi-Fi minimum
security level setting |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
Wi-Fi Minimum Security Level Setting |
|
|
|
|
| Bluetooth |
Android Enterprise |
> |
Interface |
> |
Bluetooth |
|
|
|
|
| Bluetooth UUID
allowlist |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
Bluetooth UUID Allowlist Setting |
|
|
|
|
| Bluetooth UUID
blockList |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
Bluetooth UUID Blocklist Setting |
|
|
|
|
| NFC control |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
NFC Control |
|
|
|
|
| PC connection |
Android Enterprise |
> |
Interface |
> |
PC Connection |
|
|
|
|
| USB tethering |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
USB Tethering |
|
|
|
|
| USB host
storage(OTG) |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
USB Host Storage(OTG) |
|
|
|
|
| USB debugging |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
USB Debugging |
|
|
|
|
| Microphone |
Android Enterprise |
> |
Phone |
> |
Microphone |
|
|
|
|
| GPS |
Android Enterprise |
> |
Location |
> |
GPS |
|
|
|
|
| Wearable
equipment policy inheritance |
N/A |
|
|
|
|
|
|
|
|
| Security
|
Device Password |
Android Enterprise |
> |
Security |
> |
Password for Fully Managed |
|
|
|
|
| Secure startup |
Samsung Knox(Android Enterprise) |
> |
Security |
> |
Secure Startup |
|
|
|
|
| Lock screen |
Android Enterprise |
> |
Security |
> |
Lock Screen |
|
|
|
|
| Connection
attempt between server and device |
N/A |
|
|
|
|
|
|
|
|
| Smartcard
browser authentication |
N/A |
|
|
|
|
|
|
|
|
| Certification
deletion |
N/A |
|
|
|
|
|
|
|
|
| Certificate
verification during installation |
N/A |
|
|
|
|
|
|
|
|
| Attestation |
Android Enterprise |
> |
Security |
> |
SafetyNet Attestation |
|
|
|
|
| Google Android
security update policy |
Android Enterprise |
> |
Security |
> |
Google Android Security Update
Policy |
|
|
|
|
| Kiosk
|
Kiosk App Settings |
Android Enterprise |
> |
Kiosk |
> |
Kiosk App Settings |
|
|
|
|
| Delete kiosk
app when policy is removed |
Android Enterprise |
> |
Kiosk |
> |
Delete Kiosk App when Policy is Removed |
|
|
|
|
| Task manager |
Samsung Knox(Android Enterprise) |
> |
kiosk |
> |
Task Manager |
|
|
|
|
| System bar |
Samsung Knox(Android Enterprise) |
> |
kiosk |
> |
System Bar |
|
|
|
|
| Prohibit
hardware key |
Android Enterprise |
> |
Kiosk |
> |
Prohibit Hardware Key |
|
|
|
|
| Multiple
windows |
Samsung Knox(Android Enterprise) |
> |
kiosk |
> |
Multiple Windows |
|
|
|
|
| Air command |
Samsung Knox(Android Enterprise) |
> |
kiosk |
> |
Air Command |
|
|
|
|
| Air view |
Samsung Knox(Android Enterprise) |
> |
kiosk |
> |
Air View |
|
|
|
|
| Edge screen |
Samsung Knox(Android Enterprise) |
> |
kiosk |
> |
Edge Screen |
|
|
|
|
| Application
|
Installation of application from
untrusted sources |
Android Enterprise |
> |
Application |
> |
Installation of
Application from Untrusted Sources |
|
|
|
| Play store |
N/A (It can be replaced
with App execution blocklist setting) |
|
|
|
|
|
|
| Youtube |
N/A (It can be replaced
with App execution blocklist setting) |
|
|
|
|
|
|
| App
installation block/allowlist setting |
N/A (It can me managed by
Managed Google Play in AE) |
|
|
|
|
|
|
| Application
execution blocklist |
Android Enterprise |
> |
Application |
> |
App Execution Blocklist Setting |
|
|
|
|
| Application
execution allowlist |
N/A |
|
|
|
|
|
|
|
|
| Application
force stop prohibition list setting |
N/A |
|
|
|
|
|
|
|
|
| App execution
prevention list setting |
Android Enterprise |
> |
Application |
> |
App Execution Blocklist Setting |
|
|
|
|
| App
uninstallation prevention list setting |
Android Enterprise |
> |
Application |
> |
Application
Uninstallation Prevention List Setting |
|
|
|
| Action when
apps are compromised |
N/A |
|
|
|
|
|
|
|
|
| Battery
optimization exceptions |
Samsung Knox(Android Enterprise) |
> |
Application |
> |
Battery Optimization Exceptions |
|
|
|
|
| Location
|
Report device location |
Android Enterprise |
> |
Location |
> |
Report Device Location |
|
|
|
|
| High accuracy
mode |
Android Enterprise |
> |
Location |
> |
High Accuracy Mode |
|
|
|
|
| Browser
|
Android browser control |
N/A (It can be replaced
with App execution blocklist setting) |
|
|
|
|
|
|
| Browser proxy
URL |
Samsung Knox(Android Enterprise) |
> |
Browser |
> |
Browser Proxy URL |
|
|
|
|
| Phone |
Airplane mode |
Android Enterprise |
> |
Phone |
> |
Airplane Mode |
|
|
|
|
| Cellular Data
Connection |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Device-wide policies |
> |
Device Restriction |
> |
Allow cellular data |
| Prohibit voice
call |
Samsung Knox(Android Enterprise) |
> |
Phone |
> |
Prohibit Voice Call |
|
|
|
|
| Data usage
limit |
N/A |
|
|
|
|
|
|
|
|
| Data usage
restriction |
N/A |
|
|
|
|
|
|
|
|
| Data
connection during roaming |
Samsung Knox(Android Enterprise) |
> |
Phone |
> |
Data Connection during Roaming |
|
|
|
|
| WAP push
during roaming |
Samsung Knox(Android Enterprise) |
> |
Phone |
> |
WAP Push during Roaming |
|
|
|
|
| Data sync
during roaming |
Samsung Knox(Android Enterprise) |
> |
Phone |
> |
Data Sync during Roaming |
|
|
|
|
| Voice calls
during roaming |
Samsung Knox(Android Enterprise) |
> |
Phone |
> |
Voice Calls during Roaming |
|
|
|
|
| SMS or MMS(Incoming or Outgoing) |
Samsung Knox(Android Enterprise) |
> |
Phone |
> |
Disallow SMS or MMS |
|
|
|
|
| Use SIM card
locking |
Samsung Knox(Android Enterprise) |
> |
Phone |
> |
Use SIM Card Locking |
|
|
|
|
| Set app voice
recording allowlist |
N/A |
|
|
|
|
|
|
|
|
| Firewall
|
Firewall permitted by IP per app |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
Permitted Policy(IP) |
|
|
|
|
| Firewall
prohibited by IP per app |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
Prohibited Policy(IP) |
|
|
|
|
| Firewall
permitted by domain per app |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
Permitted Policy(Domain) |
|
|
|
|
| Firewall
prohibited by domain per app |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
Prohibited Policy(Domain) |
|
|
|
|
| DNS
setting |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
DNS Setting |
|
|
|
|
| Logging
|
Save logs |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Device-wide policies |
> |
Audit Log(Premium) |
|
|
| Set log level |
N/A |
|
|
|
|
|
|
|
|
| Set maximum
log size(MB) |
N/A |
|
|
|
|
|
|
|
|
| Set maximum
days for storage(Day) |
N/A |
|
|
|
|
|
|
|
|
| DeX
|
Allow DeX mode |
Samsung Knox(Android Enterprise) |
> |
DeX |
> |
Allow DeX mode |
|
|
|
|
| Allow ethernet
only |
Samsung Knox(Android Enterprise) |
> |
DeX |
> |
Allow Ethernet Only |
|
|
|
|
| Application
execution blocklist |
Samsung Knox(Android Enterprise) |
> |
DeX |
> |
Application Execution Blocklist |
|
|
|
|
| Settings
|
Wi-Fi |
Android Enterprise |
> |
Wi-Fi |
|
|
|
|
|
|
| Exchange |
N/A |
|
|
|
|
|
|
|
|
| Email account |
N/A |
|
|
|
|
|
|
|
|
| Bookmark |
Android Enterprise |
> |
Bookmark |
|
|
|
|
|
|
| APN |
Android Enterprise |
> |
APN |
|
|
|
|
|
|
| Knox VPN |
N/A |
|
|
|
|
|
|
|
|
| VPN |
Android Enterprise |
> |
VPN(only for Pulse
Secure) |
|
|
|
|
| Certificate |
Android Enterprise |
> |
Certificate |
|
|
|
|
|
|
| Knox Workspace |
|
AE feature mapping path |
| Category |
Policy |
| System
|
Screen capture |
Android Enterprise |
> |
System |
> |
Screen Capture |
|
|
|
|
| Clipboard |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Clipboard |
|
|
|
|
| Share via apps |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Share via Apps |
|
|
|
|
| Google account synchronization |
N/A |
|
|
|
|
|
|
|
|
| App crash report to Google |
N/A |
|
|
|
|
|
|
|
|
| System app close |
N/A |
|
|
|
|
|
|
|
|
| Trusted boot verification |
N/A |
|
|
|
|
|
|
|
|
| Third party keyboard |
Samsung Knox(Android Enterprise) |
> |
System |
> |
Samsung Keyboard Settings Control |
|
|
|
|
| Add email account |
N/A |
|
|
|
|
|
|
|
|
| Domain allowlist settings |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Firewall configuration profile |
> |
Domain filters |
|
|
| Allow remote control |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Advanced restrictions in work profile(Premium) |
> |
Allow remote control |
|
|
| Interface
|
Add a new Wi-Fi
network |
N/A |
|
|
|
|
|
|
|
|
| Microphone |
Android Enterprise |
> |
Phone |
> |
Microphone |
|
|
|
|
| Camera |
Android Enterprise |
> |
System |
> |
Camera |
|
|
|
|
| Allow USB Devices for Default Access by App |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
USB Host Storage(OTG) |
|
|
|
|
| Bluetooth |
Android Enterprise |
> |
Interface |
> |
Bluetooth |
|
|
|
|
| Phone Book Access Profile(PBAP) via Bluetooth |
Android Enterprise |
> |
Container |
> |
Phone Book Access Profile(PBAP) via Bluetooth |
|
|
|
|
| NFC control |
Samsung Knox(Android Enterprise) |
> |
Interface |
> |
NFC Control |
|
|
|
|
| Security
|
Knox Container
Password |
Android Enterprise |
> |
Security |
> |
Password with Work Profile |
|
|
|
|
| Maximum screen timeout |
Android Enterprise |
> |
Security |
> |
Maximum Screen Timeout |
|
|
|
|
| Password visibility settings |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Work profile policies |
> |
Password Policy |
|
|
| Pattern lock visibility settings |
N/A |
|
|
|
|
|
|
|
|
| Smartcard browser authentication |
N/A |
|
|
|
|
|
|
|
|
| Unlock with fingerprint |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Work profile policies |
> |
Password Policy(Premium) |
|
| Unlock with iris |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Work profile policies |
> |
Password Policy(Premium) |
|
| Enforce multi-factor authentication |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Work profile policies |
> |
Password Policy(Premium) |
|
| Block function setting on lock screen |
Android Enterprise |
> |
Security |
> |
KeyGuard(Block Functions
on the Work Profile Load Screen) |
|
|
| Application
|
Installation of
application from untrusted sources |
Android Enterprise |
> |
Application |
> |
Installation of
Application from Untrusted Sources |
|
|
|
| App installation block/allowlist setting |
N/A (It can me managed by
Managed Google Play in AE) |
|
|
|
|
|
|
| Application execution blocklist |
Android Enterprise |
> |
Application |
> |
App Execution Blocklist Setting |
|
|
|
|
| App execution prevention list setting |
Android Enterprise |
> |
Application |
> |
App Execution Blocklist Setting |
|
|
|
|
| App uninstallation prevention list setting |
Android Enterprise |
> |
Application |
> |
Application
Uninstallation Prevention List Setting |
|
|
|
| App installation authority allowlisting settings |
N/A |
|
|
|
|
|
|
|
|
| GMS application |
N/A |
|
|
|
|
|
|
|
|
| TIMA CCM profile allowlist |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Device-wide policies |
> |
Client
Certificate management(CCM) policies(Premium) |
| TIMA CCM profile app access restriction exception list settings |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Device-wide policies |
> |
Client
Certificate management(CCM) policies(Premium) |
| Settings for allowlisting apps allowing external SD card |
Android Enterprise |
> |
Application |
> |
Settings for Allowlisting
Apps Allowing External SD Card |
|
|
| Battery optimization exceptions |
Samsung Knox(Android Enterprise) |
> |
Application |
> |
Battery Optimization Exceptions |
|
|
|
|
| Set general area app installation list |
N/A |
|
|
|
|
|
|
|
|
| App data deletion control setting |
N/A |
|
|
|
|
|
|
|
|
| Application force stop prohibition list setting |
N/A |
|
|
|
|
|
|
|
|
| Browser
|
Android browser
control |
N/A (It can be replaced
with App execution blocklist setting) |
|
|
|
|
|
|
| Cookies |
Samsung Knox(Android Enterprise) |
> |
Browser |
> |
Cookies |
|
|
|
|
| Javascript |
Samsung Knox(Android Enterprise) |
> |
Browser |
> |
JavaScript |
|
|
|
|
| Auto fill |
Samsung Knox(Android Enterprise) |
> |
Browser |
> |
Autofill |
|
|
|
|
| Pop-up block |
Samsung Knox(Android Enterprise) |
> |
Browser |
> |
Pop-up Block |
|
|
|
|
| Browser proxy URL |
Samsung Knox(Android Enterprise) |
> |
Browser |
> |
Browser Proxy URL |
|
|
|
|
| Firewall
|
Firewall permitted by
IP per app |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
Permitted Policy(IP) |
|
|
|
|
| Firewall prohibited by IP per app |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
Prohibited Policy(IP) |
|
|
|
|
| Firewall permitted by domain per app |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
Permitted Policy(Domain) |
|
|
|
|
| Firewall prohibited by domain per app |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
Prohibited Policy(Domain) |
|
|
|
|
| DNS setting |
Samsung Knox(Android Enterprise) |
> |
Firewall |
> |
DNS Setting |
|
|
|
|
| Firewall permitted to all packages |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Firewall configuration profile |
> |
Allow rules |
|
|
| Firewall prohibited to all packages |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
Firewall configuration profile |
> |
Deny rules |
|
|
| Container Data |
Moving an application
to container |
N/A |
|
|
|
|
|
|
|
|
| Moving a file to Knox area |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
RCP policy(Premium) |
> |
Allow
moving files from personal space to work profile |
| Moving a file to General area |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
RCP policy(Premium) |
> |
Allow
moving files from work profile to personal space |
| Calendar sync setting |
N/A |
|
|
|
|
|
|
|
|
| Contacts sync setting |
N/A |
|
|
|
|
|
|
|
|
| Copy and paste clipboard per profile |
Android Enterprise |
> |
Container |
> |
Copy and Paste Clipboard per Profile |
|
|
|
|
| Settings
|
Exchange |
N/A |
|
|
|
|
|
|
|
|
| Email account |
N/A |
|
|
|
|
|
|
|
|
| Bookmark |
Android Enterprise |
> |
Bookmark |
|
|
|
|
|
|
| Knox VPN |
Samsung Knox(Android Enterprise) |
> |
Knox Service Plugin |
> |
VPN policy(Premium) |
|
|
|
|
| Certificate |
Android Enterprise |
> |
Certificate |
|
|
|
|
|
|
