Glossary
Device management, in plain words.
The terms you will meet when you manage Android phones and tablets for an organisation.
- MDM (mobile device management)
- Software that lets an organisation configure, restrict, monitor and update the phones and tablets it manages from one central dashboard. Read more
- DPC (device policy controller)
- The Android app that enforces management rules on a device. When it is set as the device owner it can apply policies that ordinary apps cannot. Read more
- Device owner
- The most powerful management role on Android. A device owner app is set up when the device is first configured and can block factory reset, safe mode, developer options and unapproved installs. Read more
- Kiosk mode
- A locked-down state where a device only runs one app or a short list of approved apps. Often used for exam tablets, check-in screens and delivery devices. Read more
- Provisioning
- The one-time setup that enrols a device into management, applies its group and rules, and installs the management app. Read more
- Enrolment
- The step that links a specific device to an organisation, group and licence seat so it can receive policies.
- Policy
- A set of rules applied to devices, such as which apps are allowed, whether the browser is open and which settings are locked. Read more
- Policy precedence
- The order in which rules from different levels combine. In SkieOS, rules flow down from organisation to school, branch and class, with the most specific level applying last. Read more
- Allow list
- A list of apps that are permitted on a device. Anything not on the list is blocked or removed.
- Block list
- A list of apps that are explicitly forbidden. Allow lists are stricter and usually safer for children.
- BYOD (bring your own device)
- A model where people use devices they already own. For full device-owner management, a personal device must be reset and set up once. Read more
- 1:1 programme
- A programme where every student has their own school-managed device. Read more
- Factory reset protection
- Controls that stop a user wiping a managed device to escape its rules. Read more
- Geofence
- A virtual boundary on a map. A managed device can be flagged when it enters or leaves, such as a campus or hostel. Read more
- Lost mode
- A state that locks a missing device and records information that helps recover it. Read more
- Breach alert
- A notification sent when a device attempts to get around its rules or stops reporting, routed to the people responsible for that group. Read more
- Role-based access
- A model where each person only sees and changes what is within their own level, such as a teacher managing a class and a principal managing a school. Read more
- Seat licence
- A licence that covers one managed device. Organisations buy a number of seats and enrol devices up to that limit. Read more
- Safe search
- A setting that filters explicit results from search engines. On a managed device it can be enforced so the user cannot switch it off. Read more
- DNS filtering
- Blocking categories of websites at the network lookup stage, so unsuitable sites fail to load whichever browser or app is used. Read more
- Zero-touch enrolment
- A way for new devices to enrol into management automatically on first boot, usually arranged through a reseller.
- Hostel night mode
- A schedule that reduces a device to emergency use, such as incoming calls and a few essential apps, between set hours. Read more
- Exam mode
- A temporary lock to a single approved app or a very short list for the duration of an assessment. Read more
- Managed device
- Any phone or tablet enrolled in a management system and subject to its policies.