Policy Management
About the feature
The Policy Management features provide a way for organizations to manage and configure devices seamlessly at scale.
It is an administrative tool for remote device configuration. Lunar Control Center interacts with devices through a collection of APIs integrated with the managed devices through a System application.
Lunar Control Center does not rely on any third-party infrastructure of services, such as Google Play Store or Android Enterprise. It delivers its functionality through services hosted by the organization.
Lunar Control Center admins can manage the following device policies through the Console:
Device policies
Those represent a group of policies, including hardware, device, sync, wipe lock screen, and encryption policies.
Hardware policies
Includes settings related to the availability of functions delivered by hardware components. When disabled, applications will not be able to provide functions that require the use of these components even if applications are granted access to these components.
Service Policies
Includes settings related to the availability of different device functions. When disabled the functions will not be accessible by any application.
Sync Policies
Includes settings related to the frequency of automated device syncs to the server and sync wipe rules.
Wipe Policies
Includes settings related to device wipe functions.
Lock Screen Policies
Includes settings related to the lock screen function for devices.
Application Policies
Application policies determine the access to applications for device users. By using application policies, administrators can select to install and/or uninstall applications from devices.
OS policies
Includes settings related to the OS running on the device. Admins can set the OS version the device will be running on. Can include a specific OS or be set to the latest OS build made available through OS Updater.
Software policies
Includes settings related to the software version of applications on devices.
Policy Levels and Creation of Policies
Lunar Control Center allows the management of policies on multiple levels, including Default System, Group, and Personal policies.
Default System level
Each LCC instance has a set of Default System Policies. Those are the default policies for all users unless a Group or Personal policy overwrites them.
Administrators can set up Default System policies for Device, Applications, OS, and Software Policies.
Select policies
Group level
Groups are objects created by Lunar Control Center administrators in order to manage policies for a collection of accounts. Group policies overwrite Default System policies and are applied to all users part of the Group.
To start you will have to create a group, by following the steps below:
Click on Groups
Fill up fields, including: - Name: the name the group will be identified with - Parent group: allows you to create a group under an already existing parent group. - Group disk quota [MB]: allows you to set up a quota different than the default for the maximum amount of backup each account can use. - Group traffic quota [MB]: allows you to set up a traffic quota different than the default for the maximum network traffic a device can make.
Once you have a group created, you can set up Device, Applications, OS, and Software Policies for it by following the steps:
Select policies
Personal level
Personal policies are created for each user account. Personal policies overwrite Group and Default System policies.
You can do that by following the steps:
Select policies
Assignment of Policies
Newly enrolled devices are automatically assigned with their Group Policies if a group exists, or assigned with the Default System Policies if they are not part of a group.
If the same Policies (Default System or Group) are being edited, the changes will affect devices under those policies.
As a Lunar Control Center admin, you can change the policy for each user account, by following the steps:
User Access Level
The access level of the user determines how much control users can have on their device policies.
There are 3 access levels:
Limited user: users are not able to change their own device policies. Policies assigned to them are forced.
Power-user: power users' devices receive the policies assigned to them, but they can also change those via their Phone Manager application (installed on their device), or through the Lunar Control Center User Portal if such is enabled.
Group administrator: group administrators have all the rights of power users, plus the ability to manage policies for devices that are in their group. Management of group policies is only available in the Lunar Control Center User Portal if such is enabled.
As an administrator, you can change user access level by following the steps:
Permission Groups
Permission groups allow additional policy control for Lunar Control Center administrators.
Permission Groups are used to set restrictions for Power Users, limiting what policies they can manage themselves and what policies are restricted and can not be changed.
To use Permission Groups, you first have to create one by following the steps below:
Fill up fields, including: - Name: the name of the permission group - Group: choose a group associated with the permission group. (users in this group will not be automatically added to the permission) - OS version: select OS version
Configure your permission group rules
Once the permission group is created, you can add user accounts to it by following the steps:
Select users to be added to the permission group by clicking on the checkmark next to the username (only users that are part to the linked Group will be shown as available)
The Manage Users menu also allows you to remove Users from the Permission Group.
Last updated
