SkieCan students add a new user on a managed tablet?
No. Skie blocks adding users with Android's add-user restriction, and it is on by default. A new user would start with its own apps, settings and accounts, outside the rules of the student's profile, so the Add user option is removed from Settings and the quick panel on a managed device.
Android lets one tablet host several users, each with its own home screen, apps and data. That is handy at home. In a school, a second user is a separate space where an app list, a filter or a time window does not apply in the same way, which is why it is a classic way to get a clean, unrestricted tablet.
Skie sets DISALLOW_ADD_USER as the device owner. The Add user and Add guest entries are removed, and a person cannot create a new space even from the lock screen. Android enforces this, not an app that a student could stop.
This protection is on by default, and it is part of a group with its own entries: blocking work profiles, clone profiles and private spaces, blocking switching between users, and blocking removing users. Together they keep a managed tablet as one space that is yours to manage.
The admin sees the add users switch in the hardening section. Its state is read back from Android after every apply and counted in the compliance score. Skie also follows the rule of one student, one device, so the tablet has one assigned person in the dashboard.
If you need to share a tablet between students, do it in Skie by reassigning the device or using a schedule, rather than creating Android users. Practical tip: for a shared lab, assign the device to a group and use schedules to switch app sets by period, instead of looking for multi-user features.