Courtesy: GitHub

Android AppRestrictionEnforcer Sample

This sample demonstrates how to set restrictions to other apps as a profile owner. Use the AppRestrictionSchema sample to set restrictions.


The Android Device Administration API allows enterprise administrators to enforce specific policies on a managed device. The system provides policies that control settings such as password complexity, screen lock, or camera availability. Developers can also augment this list with custom policies that control specific features within their applications. For example, a web browser could provide access to a whitelist of allowed domains.

This sample demonstrates the 'admin' component and shows how a number of custom properties (booleans, strings, numbers, lists) can be set and enforced on another app.

See the AppRestrictionSchema sample for further details.


  • Android SDK 26
  • Android Build Tools v26.0.1
  • Android Support Repository



Getting Started

This sample uses the Gradle build system. To build this project, use the "gradlew build" command or use "Import Project" in Android Studio.


If you've found an error in this sample, please file an issue:

Patches are encouraged, and may be submitted by forking this project and submitting a pull request through GitHub. Please see for more details.


Copyright 2017 The Android Open Source Project, Inc.

Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

compile ""

compile ""

compile ""

compile ""

compileSdkVersion 26

minSdkVersion 21

targetSdkVersion 26


versionCode 1

versionName 1.0



This activity is started after the provisioning is complete in {@link EnforcerDeviceAdminReceiver}.


Handles events related to managed profile.

Called on the new profile when managed profile provisioning has completed. Managed profile provisioning is the process of setting up the device so that it has a separate profile which is managed by the mobile device management(mdm) application that triggered the provisioning. Note that the managed profile is not fully visible until it is enabled.

Generates a {@link ComponentName} that is used throughout the app. @return a {@link ComponentName}