Single Webapp Kiosk Mode Via Android Management Api

I'm trying to apply a policy to a few tablets via the Android Management API. I've been able to create my enterprise, web app, policy, and add the devices without issue. The troubl

Solution 1:

If you want to dedicate a device to a single app, then you need managementMode: "DEVICE_OWNER". You enroll the device on initial setup (you can't enrol the device later with this management mode).

You can think of PROFILE_OWNER as the following ... employee has their own Android device, but wants access to employer maintained apps and data etc. Employer wants to control access to those apps, and does so via the Android Management API policies.

So the IT staff associate the employee owned device with a work policy. This process installs a separate profile on the device that's only used for work, and can later be wiped (which won't wipe the users personal profile from the device). So if the employee leaves, the work access is revoked, but their phone is as it was before.

If the device is fully owned by an employer and is designed to run one app, you should absolutely be running in DEVICE_OWNER management mode. This allows you to lock and pin a single application, and stop users breaking out and doing other stuff they shouldn't be doing with the device.