> For the complete documentation index, see [llms.txt](https://docs.cubilock.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cubilock.com/profile-management/profile-policies/global-restrictions.md).
# Global Restrictions
Policies tab includes a list of 50+ policies allow you to configure Bluetooth, Status Bar, Settings, Camera etc.
You can configure the device policies by heading over to **Device Profiles** and choose **Update Profile** from context menu**.** You will be navigated to **Edit Device Profile** page where you can configure all the available settings.
### Global Restrictions
Below is the detail list of global restrictions that you can apply on any device:
| **Policy Name** | **Policy Details** | **Options Available** | **What This Policy Does (Android Enterprise)** | **UI Navigation** |
| -------------------------------------- | ----------------------------------------------------------------------------------------- | -------------------------------------------------------------- | -------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------- |
| **Disable Camera** | Whether all cameras on the device are disabled. | Enabled / Disabled | Blocks camera hardware access system‑wide, preventing any app from opening the camera. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disable Camera**. |
| **Disable Screen Capture** | Whether screen capture is disabled. | Enabled / Disabled | Prevents screenshots and screen captures on managed devices. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disable Screen Capture**. |
| **Disable Keyguard** | Whether the keyguard is disabled. | Enabled / Disabled | Disables the lock screen (keyguard). The device will not enforce a lock screen. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disable Keyguard**. |
| **Set Auto Time Required** | Whether auto time is required, preventing manual date/time changes. | Enabled / Disabled | Forces automatic network‑provided date/time; user can’t manually adjust. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Set Auto Time Required**. |
| **Set Bluetooth Off** | Whether Bluetooth is disabled. | Enabled / Disabled | Turns Bluetooth off and prevents users from enabling it. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Set Bluetooth Off**. |
| **Disallow Data Roaming** | Whether data roaming configurations are disabled. | Enabled / Disabled | Prevents users from enabling data roaming. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disallow Data Roaming**. |
| **Enable USB Mass Storage** | Whether USB storage is enabled. | Enabled / Disabled | Controls USB file transfer (disallow prevents data transfer over USB). | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Enable USB Mass Storage**. |
| **Disabled Uninstallation of Apps** | Whether user uninstallation of applications is disabled. | Enabled / Disabled | Prevents apps from being uninstalled by users. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disabled Uninstallation of Apps**. |
| **Disabled Changing Wallpaper** | Whether changing the wallpaper is disabled. | Enabled / Disabled | Blocks the ability to change home and lock screen wallpapers. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disabled Changing the Wallpaper**. |
| **Disabled Bluetooth Contact Sharing** | Whether Bluetooth contact sharing is disabled. | Enabled / Disabled | Prevents contacts being shared via Bluetooth. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disabled Bluetooth Contact Sharing**. |
| **Disabled Share Location** | Whether location sharing is disabled. | Enabled / Disabled | Disables location sharing services. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disabled Share Location**. |
| **Disabled SMS** | Whether sending/receiving SMS is disabled. | Enabled / Disabled | Prevents SMS messages from being sent or received. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disabled SMS**. |
| **Disabled Unmute Microphone** | Whether microphone audio and volume adjustment is disabled. | Enabled / Disabled | Mutes microphone system‑wide and blocks audio adjustments. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disabled Unmute Microphone**. |
| **Enabled Network Escape Hatch** | Whether the network escape hatch is enabled. | Enabled / Disabled | Permits bypassing some network restrictions for troubleshooting. (Vendor/MAM feature) | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Enabled Network Escape Hatch**. |
| **Enabled Skip First Use Hints** | Skip system hints/tutorials on first app start. | Enabled / Disabled | Skips built‑in app/setup tutorial hints after enrollment. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Enabled Skip First Use Hints**. |
| **Enabled Private Key Selection** | Shows UI for user to choose a private key alias if no rule matches. | Enabled / Disabled | Enables the private key alias selection UI when needed. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Enabled Private Key Selection**. |
| **Disabled Credentials Config** | Whether configuring user credentials is disabled. | Enabled / Disabled | Blocks credential (certificate/keystore) configuration by users. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Disabled Credentials Config**. |
| **Printing Policy** | Controls whether printing is allowed. | Unspecified , Allowed , Disallowed | Determines if Android printing services are usable. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Printing Policy**. |
| **Assist Content Policy** | Controls whether AssistContent (assistant data) can be sent to privileged assistant apps. | Unspecified , Allowed , Disallowed | Restricts sending contextual content to assistant apps. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Assist Content Policy**. |
| **Auto Date and Time Zone** | Whether auto date/time/timezone is enabled. | Unspecified , User Choice , Enforced | Forces use of network‑provided date/time & timezone settings. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Auto Date and Time Zone**. |
| **Credential Provider Policy Default** | Controls which apps are allowed to act as credential providers on Android 14+. | Unspecified,
Disallowed ,Disallowed except system
| Determines default credential provider apps on OS ≥14. | Go to **Edit Profile > Policies > Global Restrictions** and toggle **Credential Provider Policy Default**. |