IntuneDeviceConfigurationPolicyAndroidWorkProfile¶
Parameters¶
Parameter | Attribute | DataType | Description | Allowed Values |
---|---|---|---|---|
DisplayName | Key | String | Display name of the device general configuration policy for Android WorkProfile. | |
Description | Write | String | Description of the device general configuration policy for Android WorkProfile | |
Assignments | Write | MSFT_DeviceManagementConfigurationPolicyAssignments[] | Assignments of the Intune Policy. | |
PasswordBlockFaceUnlock | Write | Boolean | Indicates whether or not to block face unlock. | |
PasswordBlockFingerprintUnlock | Write | Boolean | Indicates whether or not to block fingerprint unlock | |
PasswordBlockIrisUnlock | Write | Boolean | Indicates whether or not to block iris unlock. | |
passwordBlockTrustAgents | Write | Boolean | Indicates whether or not to block Smart Lock and other trust agents. | |
PasswordExpirationDays | Write | UInt32 | Number of days before the password expires | |
PasswordMinimumLength | Write | UInt32 | Minimum length of passwords | |
PasswordMinutesOfInactivityBeforeScreenTimeout | Write | UInt32 | Minutes of inactivity before the screen times out | |
PasswordPreviousPasswordBlockCount | Write | UInt32 | Number of previous passwords to block | |
PasswordSignInFailureCountBeforeFactoryReset | Write | UInt32 | Number of sign in failures allowed before factory reset | |
PasswordRequiredType | Write | String | Type of password that is required | deviceDefault , lowSecurityBiometric , required , atLeastNumeric , numericComplex , atLeastAlphabetic , atLeastAlphanumeric , alphanumericWithSymbols |
RequiredPasswordComplexity | Write | String | Indicates the required device password complexity on Android. One of: NONE, LOW, MEDIUM, HIGH. | none , low , medium , high |
WorkProfileAllowAppInstallsFromUnknownSources | Write | Boolean | Indicates whether to allow installation of apps from unknown sources. | |
WorkProfileDataSharingType | Write | String | Type of data sharing that is allowed | deviceDefault , preventAny , allowPersonalToWork , noRestrictions |
WorkProfileBlockNotificationsWhileDeviceLocked | Write | Boolean | Indicates whether or not to block notifications while device locked | |
WorkProfileBlockAddingAccounts | Write | Boolean | Block users from adding/removing accounts in work profile | |
WorkProfileBluetoothEnableContactSharing | Write | Boolean | Allow bluetooth devices to access enterprise contacts | |
WorkProfileBlockScreenCapture | Write | Boolean | Block screen capture in work profile | |
WorkProfileBlockCrossProfileCallerId | Write | Boolean | Block display work profile caller ID in personal profile | |
WorkProfileBlockCamera | Write | Boolean | Block work profile camera | |
WorkProfileBlockCrossProfileContactsSearch | Write | Boolean | Block work profile contacts availability in personal profile | |
WorkProfileBlockCrossProfileCopyPaste | Write | Boolean | Boolean that indicates if the setting disallow cross profile copy paste is enabled | |
WorkProfileDefaultAppPermissionPolicy | Write | String | Type of password that is required | deviceDefault , prompt , autoGrant , autoDeny |
WorkProfilePasswordBlockFaceUnlock | Write | Boolean | Indicates whether or not to block face unlock in work profile. | |
WorkProfilePasswordBlockFingerprintUnlock | Write | Boolean | Indicates whether or not to block fingerprint unlock in work profile | |
WorkProfilePasswordBlockIrisUnlock | Write | Boolean | Indicates whether or not to block iris unlock in work profile. | |
WorkProfilePasswordBlockTrustAgents | Write | Boolean | Indicates whether or not to block Smart Lock and other trust agents for work profile | |
WorkProfilePasswordExpirationDays | Write | UInt32 | Number of days before the work profile password expires | |
WorkProfilePasswordMinimumLength | Write | UInt32 | Minimum length of work profile password | |
WorkProfilePasswordMinNumericCharacters | Write | UInt32 | Minimum count of numeric characters required in work profile password | |
WorkProfilePasswordMinNonLetterCharacters | Write | UInt32 | Minimum count of non-letter characters required in work profile password | |
WorkProfilePasswordMinLetterCharacters | Write | UInt32 | Minimum count of letter characters required in work profile password | |
WorkProfilePasswordMinLowerCaseCharacters | Write | UInt32 | Minimum count of lower-case characters required in work profile password | |
WorkProfilePasswordMinUpperCaseCharacters | Write | UInt32 | Minimum count of upper-case characters required in work profile password | |
WorkProfilePasswordMinSymbolCharacters | Write | UInt32 | Minimum count of symbols required in work profile password | |
WorkProfilePasswordMinutesOfInactivityBeforeScreenTimeout | Write | UInt32 | Minutes of inactivity before the screen times out | |
WorkProfilePasswordPreviousPasswordBlockCount | Write | UInt32 | Number of previous work profile passwords to block | |
WorkProfilePasswordSignInFailureCountBeforeFactoryReset | Write | UInt32 | Number of sign in failures allowed before work profile is removed and all corporate data deleted | |
WorkProfilePasswordRequiredType | Write | String | Type of work profile password that is required | deviceDefault , lowSecurityBiometric , required , atLeastNumeric , numericComplex , atLeastAlphabetic , atLeastAlphanumeric , alphanumericWithSymbols |
WorkProfileRequiredPasswordComplexity | Write | String | Indicates the required device password complexity on Android. One of: NONE, LOW, MEDIUM, HIGH in work profile. | none , low , medium , high |
WorkProfileRequirePassword | Write | Boolean | Password is required or not for work profile | |
SecurityRequireVerifyApps | Write | Boolean | Require the Android Verify apps feature is turned on | |
VpnAlwaysOnPackageIdentifier | Write | String | Package identifier for always-on VPN. | |
VpnEnableAlwaysOnLockdownMode | Write | Boolean | Enable lockdown mode for always-on VPN. | |
WorkProfileAllowWidgets | Write | Boolean | Allow widgets from work profile apps. | |
WorkProfileBlockPersonalAppInstallsFromUnknownSources | Write | Boolean | Prevent app installations from unknown sources in the personal profile. | |
Ensure | Write | String | Present ensures the site collection exists, absent ensures it is removed | Present , Absent |
Credential | Write | PSCredential | Credentials of the Intune Admin | |
ApplicationId | Write | String | Id of the Azure Active Directory application to authenticate with. | |
TenantId | Write | String | Name of the Azure Active Directory tenant used for authentication. Format contoso.onmicrosoft.com | |
ApplicationSecret | Write | PSCredential | Secret of the Azure Active Directory tenant used for authentication. | |
CertificateThumbprint | Write | String | Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication. | |
ManagedIdentity | Write | Boolean | Managed ID being used for authentication. | |
AccessTokens | Write | StringArray[] | Access token used for authentication. |
MSFT_DeviceManagementConfigurationPolicyAssignments¶
Parameters¶
Parameter | Attribute | DataType | Description | Allowed Values |
---|---|---|---|---|
dataType | Write | String | The type of the target assignment. | #microsoft.graph.groupAssignmentTarget , #microsoft.graph.allLicensedUsersAssignmentTarget , #microsoft.graph.allDevicesAssignmentTarget , #microsoft.graph.exclusionGroupAssignmentTarget , #microsoft.graph.configurationManagerCollectionAssignmentTarget |
deviceAndAppManagementAssignmentFilterType | Write | String | The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude. | none , include , exclude |
deviceAndAppManagementAssignmentFilterId | Write | String | The Id of the filter for the target assignment. | |
groupId | Write | String | The group Id that is the target of the assignment. | |
groupDisplayName | Write | String | The group Display Name that is the target of the assignment. | |
collectionId | Write | String | The collection Id that is the target of the assignment.(ConfigMgr) |
Description¶
This resource configures an Intune device configuration profile for an Android WorkProfile Device.
Permissions¶
Microsoft Graph¶
To authenticate with the Microsoft Graph API, this resource required the following permissions:
Delegated permissions¶
-
Read
- DeviceManagementConfiguration.Read.All
-
Update
- DeviceManagementConfiguration.ReadWrite.All
Application permissions¶
-
Read
- DeviceManagementConfiguration.Read.All
-
Update
- DeviceManagementConfiguration.ReadWrite.All
Examples¶
Example 1¶
This example creates a new General Device Configuration Policy for Android WorkProfile .
Configuration Example
{
param(
[Parameter()]
[System.String]
$ApplicationId,
[Parameter()]
[System.String]
$TenantId,
[Parameter()]
[System.String]
$CertificateThumbprint
)
Import-DscResource -ModuleName Microsoft365DSC
node localhost
{
IntuneDeviceConfigurationPolicyAndroidWorkProfile 97ed22e9-1429-40dc-ab3c-0055e538383b
{
DisplayName = 'Android Work Profile - Device Restrictions - Standard'
PasswordBlockFingerprintUnlock = $False
PasswordBlockTrustAgents = $False
PasswordMinimumLength = 6
PasswordMinutesOfInactivityBeforeScreenTimeout = 15
PasswordRequiredType = 'atLeastNumeric'
SecurityRequireVerifyApps = $True
WorkProfileBlockAddingAccounts = $True
WorkProfileBlockCamera = $False
WorkProfileBlockCrossProfileCallerId = $False
WorkProfileBlockCrossProfileContactsSearch = $False
WorkProfileBlockCrossProfileCopyPaste = $True
WorkProfileBlockNotificationsWhileDeviceLocked = $True
WorkProfileBlockScreenCapture = $True
WorkProfileBluetoothEnableContactSharing = $False
WorkProfileDataSharingType = 'allowPersonalToWork'
WorkProfileDefaultAppPermissionPolicy = 'deviceDefault'
WorkProfilePasswordBlockFingerprintUnlock = $False
WorkProfilePasswordBlockTrustAgents = $False
WorkProfilePasswordRequiredType = 'deviceDefault'
WorkProfileRequirePassword = $False
Ensure = 'Present'
ApplicationId = $ApplicationId;
TenantId = $TenantId;
CertificateThumbprint = $CertificateThumbprint;
}
}
}
Example 2¶
This example creates a new General Device Configuration Policy for Android WorkProfile .
Configuration Example
{
param(
[Parameter()]
[System.String]
$ApplicationId,
[Parameter()]
[System.String]
$TenantId,
[Parameter()]
[System.String]
$CertificateThumbprint
)
Import-DscResource -ModuleName Microsoft365DSC
node localhost
{
IntuneDeviceConfigurationPolicyAndroidWorkProfile 97ed22e9-1429-40dc-ab3c-0055e538383b
{
DisplayName = 'Android Work Profile - Device Restrictions - Standard'
PasswordBlockFingerprintUnlock = $False
PasswordBlockTrustAgents = $True # Updated Property
PasswordMinimumLength = 6
PasswordMinutesOfInactivityBeforeScreenTimeout = 15
PasswordRequiredType = 'atLeastNumeric'
SecurityRequireVerifyApps = $True
WorkProfileBlockAddingAccounts = $True
WorkProfileBlockCamera = $False
WorkProfileBlockCrossProfileCallerId = $False
WorkProfileBlockCrossProfileContactsSearch = $False
WorkProfileBlockCrossProfileCopyPaste = $True
WorkProfileBlockNotificationsWhileDeviceLocked = $True
WorkProfileBlockScreenCapture = $True
WorkProfileBluetoothEnableContactSharing = $False
WorkProfileDataSharingType = 'allowPersonalToWork'
WorkProfileDefaultAppPermissionPolicy = 'deviceDefault'
WorkProfilePasswordBlockFingerprintUnlock = $False
WorkProfilePasswordBlockTrustAgents = $False
WorkProfilePasswordRequiredType = 'deviceDefault'
WorkProfileRequirePassword = $False
Ensure = 'Present'
ApplicationId = $ApplicationId;
TenantId = $TenantId;
CertificateThumbprint = $CertificateThumbprint;
}
}
}
Example 3¶
This example creates a new General Device Configuration Policy for Android WorkProfile .
Configuration Example
{
param(
[Parameter()]
[System.String]
$ApplicationId,
[Parameter()]
[System.String]
$TenantId,
[Parameter()]
[System.String]
$CertificateThumbprint
)
Import-DscResource -ModuleName Microsoft365DSC
node localhost
{
IntuneDeviceConfigurationPolicyAndroidWorkProfile 97ed22e9-1429-40dc-ab3c-0055e538383b
{
DisplayName = 'Android Work Profile - Device Restrictions - Standard'
Ensure = 'Absent'
ApplicationId = $ApplicationId;
TenantId = $TenantId;
CertificateThumbprint = $CertificateThumbprint;
}
}
}