Default security policy override

Learn how to override default security policies.

CAUTION: Though it is possible to override the default security policy, it is recommended that IT admins change it only when it is necessary.
IT admin can override security policies through custom policies. To do that:
  1. Define the override settings in a custom JSON file and upload it through WebUI. For example:
    • Code to allow users to boot into safe mode
      { "advancedSecurityOverrides": { "developerSettings": "DEVELOPER_SETTINGS_ALLOWED" } }
    • Code to allow downloading untrusted apps in the personal profile.
      { "advancedSecurityOverrides": { "untrustedAppsPolicy": "ALLOW_INSTALL_IN_PERSONAL_PROFILE_ONLY" } }
  2. Add the defined custom policy to a policy group with appropriate Assign To Group selected.
  3. Deploy the policy group to MDM server or directly onto the selected devices.