Restrictions Payload (Android/iOS/Windows Phone)

The name of the payload.

Allows the user to access and change the Android device settings.

Allows the user to use a YouTube application.

Allows the user to encrypt external SD cards on Samsung SAFE devices. The encryption process must be performed by users at the device level.

To encrypt an external SD card on a device after deploying a restrictions payload with this option selected, launch the Settings app and navigate to Security > Encrypt external SD card. Tap Set screen lock type >Password and then set and confirm a password. This password is used to access data on the SD card, as well as decrypt the card. After setting the password, you are returned to the Encrypt external SD card screen and you must tap Continue and then enter the password to start the encryption process. When fully encrypted, a notification appears at the top of the screen.

To decrypt an external SD card, this option must be deactivated in Avalanche and synced to the device. Once synced, launch the Settings app and navigate to the Encrypt external SD card screen. Tap Turn off and enter the password you set previously. Tap Apply and then wait for the SD card to be decrypted. A notification appears at the top of the screen when complete.

For a demo on encrypting an external SD card on a device, see the video below.

Allows you to list specific applications that will be allowed or blocked on the device. When creating a Restrictions payload for Android devices, you can establish a list of blocked or approved apps for kiosk mode. A White List indicates the approved apps and prevents all other apps from launching. A Black List indicates apps not approved for use and redirects users to the home screen when an unapproved app is launched.

If you create a White List, you must select a default home app from the Restrictions payload screen. Generally the home app is an app launcher that lists the available apps. After deploying the payload, tap the Home button on a device to launch the home app. Holding down the home button or navigating to a blocked app displays a dialog box that lists the available apps.

To block or add a specific app, you can type the name and package details in the text boxes and click Add. Type the friendly name for the app in the Name text box, and the Android package name in the Package text box. For example, in order to block or add a Gmail app, type:

Gmail		com.google.android.gm

You can also click Browse for more apps to search the Google Play Store for the name of the application — this will populate the name and package details. To delete an app from the list, enable the checkbox next to the name of the app and click Delete.

In order for the device user to override app restrictions on the device, you must set a Smart Device Client Administrator Password from the System Settings screen in Avalanche. After setting the password and syncing the device, you can input the password on a device to disable app restrictions.

To deactivate app restrictions, edit the original payload, disable Use App List, redeploy the payload, and sync the desired devices.

Deploying white or blacklisting restrictions on a Samsung SAFE device will disable both hard and soft home keys and create a button that allows the user to navigate back to the home app.

Allows you to create a list of specific applications and assign restrictions or allowances on how an app interacts with other apps and can be used on a Samsung SAFE device.

To add a specific app for management in this payload, you can type the name and package details in the text boxes and click Add. Type the friendly name for the app in the Name text box, and the Android package name in the Package text box. For example, in order to add restrictions to the Gmail app, type:

Gmail		com.google.android.gm

You can also click Browse for more apps to search the Google Play Store for the name of the application — this will populate the name and package details. To delete an app from the list, enable the checkbox next to the name of the app and click Delete.

Once you add an app, you can click the arrow on the left side of the row to expand and view available restrictions, which includes Install, Status Notification, Widget Install, and Force Stop.

You can set more restrictions on an app-by-app basis by clicking the Add more restrictions button, which allows you to set any restriction listed on the SAFE Permission Blacklist tab. Options selected here will only apply to the app you're restricting. If an app requires use of an option you've restricted, the app will automatically close when launched and display an error message. If an open app asks for permission to access a restricted setting and the device user gives permission, this will also force the app to close. To set global restrictions, navigate to the SAFE Permission Blacklist tab.

Allows you to globally restrict how all apps interact with each other and your Samsung SAFE device. Selecting a restriction prevents any apps on the device from performing the specified action. For example, if you select Read SMS, devices that receive this payload cannot open and view SMS messages. These restrictions can be set on an app-by-app basis from the Safe App Permission Control tab, though results may vary depending on the type of app.

If an app requires use of an option you've restricted, the app will automatically close when launched and display an error message. If an app asks for permission to access a restricted setting and the device user gives permission, this will also force the app to close.

The name of the payload.

Allows apps on the device to use a cellular data connection.

Allows applications to access Find My Friends.

Movies. The level of allowed content for movies.

TV Shows. The level of allowed content for TV shows.

Apps. The level of allowed content for apps.

Allows apps identified by the bundle IDs to enter Single App Mode.

This option only applies if you have apps that have the ability to enter Single App Mode. Avalanche does not make apps enter Single App Mode, it only allows the app to do it.

Allows the user to share his photo stream and view others' photo streams.

Forces the user to encrypt any backups using iTunes.

Allows the user to install apps. When disabled, the Windows App Store is disabled at the device level. Removing the check for this option does not prevent users from deleting apps on the device. Avalanche cannot prevent the removal of apps at the device level.

Allows you to list specific applications that are allowed for use on the device. When creating a Restrictions payload for Windows Embedded Handheld and Windows Phone 8.1 devices, you can establish a list of approved apps for use at the device-level. This white list indicates any approved apps and prevents all other apps, apart from system apps, from launching.

To add a specific app, you can type the name and package details in the text boxes and click Add. Type the friendly name for the app in the Name text box, and the package name in the Package text box. For example, in order to block or add the OneDrive app, type:

OneDrive		ad543082-80ec-45bb-aa02-ffe7f4182ba8

You can also click Browse for more apps to search the Windows Phone App Store for the name of the application — this will populate the name and package details. To delete an app from the list, enable the checkbox next to the name of the app and click Delete.

App restrictions cannot be overridden at the device level. To deactivate app restrictions, edit the original payload, disable Use App List, and redeploy the payload.