General Settings
Available
Description
Mobile platform supported
Android Enterprise
Android GMS compulsory
Available from Android 6 Marshmallow
Android Enterprise does not support Android AOSP.
iOS
We recommend dedicated iOS EMMs
EMM Deployment options
Cloud SaaS
Solution developed & hosted on Google Cloud Platform
On-Premise
WizyEMM is Cloud only
Device deployment options
Device Owner / Kiosk mode
COSU – Locked down device with applications silently pushed on device
Device Owner / Standard mode
COBO – Android like user interface with Managed Google Play Store accessible to select and install apps
Work Profile for corporate devices
Available in Q1 2021
COPE – Available with the Android Management API end Q4 2020
Work Profile for BYOD
BYOD – A set of applications and restrictions embedded in a container managed by the entreprise
Device enrolment options
Device Owner mode
Running the DPC to become Device Owner
Need Factory reset to perform an enrolment
From Android 6+ for devices with NFC
From Android 6+
From Android 7+
From Android 8 + for supported devices
From Android 8 + for supported devices
Device enrolment options
Work Profile mode
For BYOD devices
From Android 6+
WIFI & Network Management
WIFI can be pre-configured in the console and applied to all devices in a profile
- Supports WPA / WPA2 PSK and 802.1xEAP
- Supports WEP – PSK
- Supports WEP – EAP
- Supports TLS and TTLS
- Define proxy configurations
- IP Settings DHCP or Static
- Option to setup WIFI priority orders
This can be used to force a VPN on a device (always-on VPN)
Group Management
Grouping of devices
Device group management
Define groups of devices by applying labels to devices
You can then:
- Filter devices by group on the device list page
- Apply actions on a group (lock, wipe, change profile etc.)
- Filter by group on the geolocation map
Dynamic group management with dashboard alerts
Available in Q1 2021
Define groups based on dynamic criteria (eg: devices that went offline for more than 24h)
Define geofences and assign them to groups.
When a device leaves a geofence, it will be blocked, and will receive a message inviting the user to bring back the device to the geofence.
Fleet of Devices
Listing of all devices
With advanced filtering options:
- By IMEI
- By serial number
- By status
- By profile
- By user
Option to restrict enrolment to Devices pre-approved / imported in the console
Profile Management
Devices are managed through Profiles
Profile features
A Profile includes
- Kiosk mode option
- Device Policies restrictions (see below for details)
- Application management:
- Android apps (public or private) can be whitelisted, force-installed, pre-installed, blocked
- Web Applications pushed on the device
- Configuration of location settings
- Configuration of System and App Updates (automatic, postponed or windowed)
- Configuration of password constraints
- Configuration of keyguard
- Configuration of permission management (prompt, grant, deny)
- Configuration of whitelisted Wifi Networks
- Configuration of language of device during enrollment
- Configuration of timezone of device during enrollment
Profile update options
Automatic update of all devices when a profile is updated in the console
Time-based policy management
Available in Q1 2021
Apply a policy to devices in a specific timeframe
Integration with Partner systems
Private APIs for partners
For Customer creation, deletion and billing
Partner console
Dashboard to create & manage customers accounts
Allows administrators to perform OS and security updates on Zebra devices without a physical connection (Over The Air). Needs a valid subscription to Zebra Lifeguard.
Kiosk mode
Define pre-approved applications on the kiosk mode
Force-install applications on the kiosk
Customize the kiosk launcher display by:
- Uploading a background wallpaper of your choice
- Choosing where to place your app icons on your kiosk display
- Displaying a bottom banner with additional device details, such as Serial Number
- Defining the rotation of the device : portrait, landscape, or auto-rotate
Advanced settings management
Available Q1 2021
Enable a limited settings app, which only grants access to:
- Wifi management
- Bluetooth management
- Brightness and sound settings
Multiple profiles with password access
Available Q1 2021
Define multiple users on your kiosk each with different application permissions, with password access
Leave Kiosk
Leave the kiosk from the device with an administrator password. This feature works both online and offline.
Service Management
Help desk support management
Online Guide & Ticketing platform hosted on Zendesk
Remote view of device
Optional at extra Cost
Optional at extra Cost, available on all Android devices
Remote control of device, including unattended access
Optional at extra Cost
Optional at extra Cost
Note : this depends on the device manufacturer
- Available on: HP, Lenovo, Sony, Zebra, Samsung, Honeywell, Archos, Point Mobile
- Devices coming Q1 2021: Datalogic, Unitech
This list is not exhaustive and subject to change
Mobile Application Management
Available
Description
Remote actions on devices
Update Play Store available on the device
Updating the Managed Playstore in the console will update the Applications available to download / install on the devices
Uninstall Apps from the device
Deleting an App in the Profile applied to the device or in the Managed Play store will immediately uninstall the App from the device
Pre Install Apps
Apps are automatically downloaded from the Play Store and silently installed on the device. User can delete the apps.
Force Install Apps
Apps are automatically downloaded from the Play Store and silently installed on the device. User cannot delete the apps.
Blacklist Apps
Apps that are blacklisted in the console will automatically be deleted from the device
Hide Apps installed
Apps installed on the device are hidden to the user
Feedback Channel
Ensure that application configurations have been correctly applied on the device.
We call this feedback channel “Application Logs” in our console
Install applications outside of the Google Play store
Sideload an APK remotely onto devices from the WizyEMM console
Play Store
Managed Google Play Store
Android Enterprise Managed Playstore is embedded in WizyEMM console.
Open the Public Managed Play Store to approve Public Apps to be listed in Your Managed PlayStore.
With Approval Preferences, automatically decide what to do when permissions required by an app are changed: either keep the app approved or remove it from the Managed Play Store.
Private Apps
3 possibilities to add private apps to the Managed Play Store
- Upload the apk file in your private Google Play Store console and privately target it to your organization. After approval, it will be listed in your Managed Apps.
- Host the apk file on your servers and upload the APK link directly into your managed Google Play store.
- Sideloaded APK directly on the device with some manual setup.
We highly recommend method 1, because it automatically includes the security scanning of the Google Play Protect.
List your Web Apps directly in the Profile menu. They will be automatically added as an Icon on the Device home page. Decide how to display the content: within a browser like Chrome with navigation buttons or in full screen .
Applications management
Available in the profile menu
These are used for developers to gradually test and rollout applications versions. For applications with tracks enabled on Google Play console
Enable specific system apps (i.e. stock apps preinstalled on a device by the manufacturer)
For applications with Permissions settings enabled
For applications with Managed Configurations enabled
You can use variables to automatically pull information from your devices and input it as a value into your WizyEMM console. The information you can pull is data specific to each device, such as a device’s IMEI number, MAC address, or associated username
Mobile Device Management
Available
Description
Information on Devices
Device Information
Enrollment time, Applied profile name, Applied profile version, Last profile sync time
User information
Email, First Name, Last Name
Android Information
API Level
Memory Information
Total RAM, Total internal storage
Battery information
Shutdown temperatures, Throttling temperatures, Current temperature, Level, Status
Device Status
Mode (Device Owner or Profile Owner), Current state (Active or Disabled), Last status report time
Display Information
Refresh rate, State, Width, Height, Density
Device Settings
Encryption, Unknown sources enabled, Development settings enabled, Verify apps enabled
Hardware Information
Brand, Hardware, Manufacturer, Model, CPU/GPU/Skin throttling and shutdown temperatures
Software Information
Android version, Android Device Policy version code and name, Kernel version, Android build time, Security patch level, Primary language code, Device build signature, Android build number
Application Information
List of system and Play Store apps installed on the device
Memory Events
RAM measurement, Internal storage measurement, External storage measurement, External storage detection
Power Management Events
Battery level, Power connected, Power disconnected, Low power mode, Boot completed, Shut down
Hardware Status
Battery temperature, CPU/GPU/Skin temperatures, CPU usage, Fan speed
Network Information
IMEI, Operator name, MAC address, Phone Number, Data network type
Geolocation
Visualized on Google Maps
Data consumption per App
Available in Q1 2021
Monitor data consumption per app then update the policies dynamically (eg: blocking an app)
Remote Actions on devices
Delete all data, and perform a factory reset (Applies to fully-managed devices only). On BYOD devices, it will only remove the business managed apps.
Lock or Unlock the device in 1 click. Lock message can be set and displayed on the device
Geolocate
Location on Google Maps in 1 click
Send a message on the Device screen
Reboot
Reboot the device (available from Android 7.0+)
Start applications remotely on any enrolled device
Ping device
Ping a device to test its connectivity
Reinitialize the user password or force a new one
Turn the screen off
Update Profile
Can be used to
- Update Hardware Policies (see list in next sections)
- Update Password constraints
Push PDF file
Can be used to push a PDF file to devices remotely.
Push certificate
Can be used to push a certificate to devices
Can be used to push any file to a device’s SD card remotely.
Install APK outside of Google Play over-the-air
Can be used to silently install an APK which cannot be uploaded to a private Google Play store.
Define list of bundled actions to be applied on devices
Bundle actions together, and apply them to devices during enrolment or afterwards.
Retrieve Files
Available Q1 2021
Can be used to retrieve files from device and system, application logs
Note : This feature is already available on the OEMConfig app for Zebra devices
Camera, screen and audio
Mute audio
Set the master volume mute on or off.
Disable Camera
After setting this, no applications will be able to access any cameras on the device.
Disable screen capture
Set whether the screen capture is disabled. Disabling screen capture also prevents the content from being shown on display devices that do not have a secure video output.
Single use devices
Disable status bar
Disabling the status bar blocks notifications, quick settings and other screen overlays that allow escaping from a single use device.
Disable keyguard
Setting the keyguard to disabled has the same effect as choosing “None” as the screen lock type, meaning that the user does not unlock the device to access Android. However, this call has no effect if a password, pin or pattern is currently set. If a password, pin or pattern is set after the keyguard was disabled, the keyguard stops being disabled.
Secure settings
Allow install from unknown sources
Enabling the install from unknown sources allows the user to install apps which are not listed on the Google Play Store. This is a security risk, since you cannot rely on Google Play Protect anymore.
System and applications updates
Determines when over-the-air system updates are installed on a device.
Unspecified
Follow the default update behavior for the device, which typically requires the user to accept system updates.
Auto install
Installs system updates (without user interaction) as soon as they become available.
Postpone
Postpones the installation of system updates for 30 days. After 30 days, the parameter falls back to Auto Install.
Windowed
Installs system updates (without user interaction) during a daily maintenance window. After 30 days, the parameter falls back to Auto Install.
Freeze time period
All incoming system updates (including security patches) are blocked and won’t be installed. When a device is outside the freeze period, normal update behavior applies.
*End date must be no later than 90 days from the start date. If the end date is earlier than the start date, the freeze period is considered wrapping year-end.
Global settings
(*) Applies to fully-managed devices only
Geolocation
Disable Camera*
Disable screen capture*
Disable status bar
Disable keyguard
Allow install from unknown sources*
Allow debugging features
Set auto time required
Set bluetooth off
Disallow data roaming (Android 7.0+)
Enable USB mass storage*
Advanced keyguard configurations
Factory reset protection
User restrictions
(*) Applies to fully-managed devices only
Disallow add user
Disallow adjust volume
Disallow config bluetooth (Android 7.0+)
Disallow config cell broadcasts (Android 7.0+)
Disallow config mobile networks (Android 7.0+)
Disallow config tethering (Android 7.0+)
Disallow config VPN (Android 7.0+)
Disallow config Wi-Fi
Disallow create windows*
Disallow factory reset
Disallow fun
Disallow install applications*
Disallow modify accounts*
Disallow mount physical media
Disallow network reset
Disallow outgoing beam
Disallow outgoing calls (Android 7.0+)
Disallow remove user
Disallow safe boot
Disallow set user icon
Disallow set wallpaper
Disallow share location*
Disallow SMS (Android 7.0+)
Disallow uninstall applications*
Disallow unmute microphone
Disallow USB file transfer*
Ensure verify applications*
Disallow config credentials
Report settings
(*) Applies to fully-managed devices only
Enable application reports*
Enable device settings*
Enable software information*
Enable memory information*
Enable network information*
Enable display information
Enable power management events
Enable hardware status*
Hardware management
(*) Applies to fully-managed devices only
OEMConfig
Supports OEM config for Zebra, Honeywell, Samsung and all other manufacturer that provides OEMConfig application
Dashboard
Description
Alerts
Application logs errors
Low device battery
Device command failed to apply
Email and Bell Notifications
Custom Alert
On demand development
KPIs
Android device distribution
Android version distribution
Number of EMM Profiles
Number of Work Profiles
Advanced dashboarding
Self-service dashboards for advanced data analytics & historical analysis with Google Data Studio and Google BigQuery (extra cost for customer)