Restrict device users from adding accounts

Environment

• Knox Manage
• Android Enterprise
• Fully managed device

Overview

There may be instances where you’re required to restrict device users from adding select account types to their managed device.

How to restrict addition of unmanaged accounts on the device per app

To block specific account types while allowing others, configure a blocklist in your profile policy:

1. On the Knox Manage console, go to Profile and select the profile policy you’d like to modify.

2. On the Set Policy page, click Android Enterprise > System policy drawer, and configure the following policies:

   Policy	Value
   Add or Delete Account	Allow
   Add or Delete Account > Account Type Allowlist and Blocklist	Blocklist Setting
   Add or Delete Account > Account List	Enter Account Name

3. Click Save to save the profile. Alternately, click Save & Assign to push the changes to devices.

4. In the Save & Assign dialog, click OK to confirm.

5. If the Profile Version Update dialog displays, click OK to update the profile version.

6. On the Assign Profile page, select your device(s) and click Assign & Push. The Push Profile dialog displays.

7. Review the changes and click OK.

How to restrict addition of unmanaged accounts device-wide

To block all account additions on the device entirely, disallow the Add or Delete Account policy:

1. On the Knox Manage console, go to Profile and select the profile policy you’d like to modify.

2. On the Set Policy page, click Android Enterprise > System policy drawer, and configure the following policies:

   Policy	Value
   Add or Delete Account	Disallow

3. Save and assign the profile, following steps 3-7 from the per-app procedure above.

List of account names for common apps

The following table details a list of common account types: