📱 New Android Policy Controls: eSIM Management & System Update Compliance

We’re introducing new Android policy-level configurations powered by the latest Android Management API (AMAPI) updates.

These enhancements provide administrators with greater control over connectivity and system update enforcement on company-owned devices running Android 15 and above.

🔐 Control User-Initiated eSIM Additions

Policy: userInitiatedAddEsimSettings

This setting allows IT administrators to define whether end users can add eSIM profiles on corporate-owned devices.

Key highlights:

• 🎯 Enables or restricts user-initiated eSIM additions.
• 🏢 Applies to company-owned devices only.
• 🛡️ Prevents unauthorized eSIM configurations.

This ensures tighter governance over mobile connectivity and reduces the risk of unapproved carrier profiles being installed.

👉🏻 Youcan learn more about userInitiatedAddEsimSettings by following this link.

⏱️ Enforce System Update Compliance

Policy: allowedDaysWithoutUpdate

Part of the System Update configuration object in AMAPI, this setting enforces update compliance policies across managed devices.

Key highlights:

• 📌 Defines the maximum number of consecutive days a device may go without installing a system update.
• 🔢 Accepts integer values greater than zero.
• ⚠️ Flags devices as non-compliant if the threshold is exceeded.

This prevents devices from indefinitely postponing critical OS and security patches, helping maintain operational integrity and network security.

👉🏻 Youcan learn more about allowedDaysWithoutUpdate by following this link.

🔎 Why This Matters

With these new controls, organizations gain fine-grained governance over both device connectivity and update compliance, strengthening security posture while maintaining centralized policy enforcement.