To configure the settings of the Android work profile:
In the console tree, in the Managed devices folder, select the administration group to which the Android devices belong.
In the workspace of the group, select the Policies tab.
Open the policy properties window by double-clicking any column.
In the policy Properties window, select the Android work profile.
In the Android work profile workspace, select the Create work profile check box.
Specify the work profile settings:
To enable App Control in the Android work profile and disable it in the personal profile, select the Enable App Control in Work profile only check box.
In the Users section you can select App Control and use the workspace to create lists of allowed, blocked, recommended, and required apps, as well as allowed and blocked app categories in the section.
To enable Web Protection for Google Chrome in the work profile and disable it in the personal profile, in the workspace of the Android work profile section select the Enable Web Protection in Work profile only check box.
Web Protection for Samsung Internet Browser blocks sites in the work and personal profiles. You cannot enable Web Protection for Samsung Internet Browser only in the work profile. To use Web Protection for Samsung Internet Browser in the work profile, disable the Enable Web Protection in work profile only option. If this option is enabled, Web Protection for Samsung Internet Browser does not run. Web Protection in work profile is disabled by default.
Web Protection on Android devices works only in the Google Chrome browser and in Samsung Internet Browser.
You can specify website access settings (create a list of blocked website categories or a list of allowed websites) in the Web Protection section.
To prohibit the user from copying data by means of the Clipboard from work profile apps to personal apps, select the Prohibit data transfer from work profile to personal profile check box.
To block the user from using USB debugging mode on the mobile device in the work profile, select the Prohibit activation of USB debugging mode check box.
In USB debugging mode, the user can download an app by using a workstation, for example.
To prohibit the user from installing apps in the Android work profile from all sources except Google Play, select the Prohibit installation of apps in work profile from unknown sources check box.
To prohibit the user from removing apps from the Android work profile, select the Prohibit removal of apps from work profile check box.
To configure work profile settings on the user's mobile device, block changes to settings.
Click the Apply button to save the changes you have made.
Mobile device settings are configured after the next device synchronization with the Kaspersky Security Center. The space of the user's mobile device is divided into a work profile and a personal profile.