Available Policies

In WSO2 EMM, administrators can define policies, which include a set of configurations. WSO2 EMM policies are enforced on EMM users' devices, based on the policy hierarchy, when new users register with EMM and also when a policy is edited. The EMM policy functions will vary based on the mobile OS type (i.e., iOS or Android) of the device. For more information on managing policies, see Managing Policies.

WSO2 EMM policies

The policies that are available on each mobile OS are given below:

√ - feature is available on the mobile OS.

X - feature is not available on the mobile OS.

Policies	Description	Android	iOS	Windows
Passcode policy	Define a password policy for the devices.	√	√	√
Restrictions	Restricts the usage of the camera, Wi-Fi, VPN other functions on Android and iOS devices. Windows only supports device restrictions on the camera. For more information on the API to restrict function on Android devices, see Adding a User Restriction Policy on Android Devices. For more information on the API to restrict function on iOS devices, see Adding Operation Restrictions on iOS Devices.	√	√	√
Other restrictions	Restrict apps, device features and media content available on an iOS device. This is specific only to the iOS platform. Example: restrictions on allowing Siri, AirDrop etc.	`X`	√	`X`
Encrypt storage	Encrypt data on the device, when the device is locked and make it readable when the passcode is entered.	√	`X`	√
Wi-Fi	Ability to configure the Wi-Fi access on a device. For more information on the Wi-Fi policy for Android, click here. You are able to configure the Wi-Fi settings for the `WEP`, `WPA/WPS 2PSK` and `802.1 EAP` security types. The `802.1 EAP` security type works only for Android 4.3 and above. WSO2 EMM supports the following EAP methods: `PEAP`, `TLS`, `TTLS`, `PWD`, `SIM`, and `AKA`. If you want to provide the identity of the user that access the Wi-Fi through their Android device, you can provide `[user]` as the value for Identity and it will provide the username used by the user to enroll their Android device with WSO2 EMM. This setting is only applicable for the following EAP methods: `PEAP`, `TLS`, `TTLS`, and `PWD`.	√	√	`X`
Email	Ability to configure settings for connecting to your POP or IMAP email accounts.	`X`	√	`X`
AirPlay	Ability to configure settings for connecting to AirPlay destinations.	`X`	√	`X`
LDAP	Ability to configure settings for connecting to LDAP servers.	`X`	√	`X`
Calendar	Ability to configure settings for connecting to CalDAV servers.	`X`	√	`X`
Calendar Subscription	Ability to configure settings for calendar subscriptions.	`X`	√	`X`
APN	Ability to specify Access Point Names ( APN ).	`X`	√	`X`
Cellular Network	Ability to specify Cellular Network Settings on an iOS device	`X`	√	`X`
VPN	Ability to specify the VPN and per app VPN settings.	√	√	`X`
Work-Profile Configurations	Ability separate the personal and work related data on your device via the managed profile feature. For more information on how it works, see Data Containerization for Android Device.	√	`X`	`X`
Application restrictions	Ability blacklist and whitelist applications on the Android platform.	√	`X`	`X`