What is the difference between a one-app allow list and kiosk mode?
A one-app allow list limits which apps are allowed, so only one is visible and usable. Full-screen kiosk mode also controls the interface, so the device presents that one experience in full screen. Both lock a device to one app; kiosk is the stricter, more finished form for public or customer-facing screens.
The one-app allow list lives in the app list. You allow a single app, and every other app is hidden or removed. The device still has the normal Android shell around it, but there is only one thing in it. This is quick to set up and works for exam tablets and simple work devices.
Full-screen kiosk mode goes further and controls the screen itself. The app fills the display and the usual navigation is not available to the user. It suits devices that people other than staff will touch, such as a customer-facing screen in a shop.
Both are enforced by Android because Skie is the device owner. In both cases the install guard keeps new apps off, unknown sources are blocked, and the always-on hardening applies. Both are controlled from the dashboard by changing the group's policy or list.
Which to choose? If staff hand the device to one trusted person, a one-app list is usually enough. If the public will use it, choose kiosk. If the device should change by time of day, combine a schedule with the list: for example the order app during opening hours and a dark window overnight. A practical tip: whichever you pick, write the way to change it down before deployment. See how to exit or disable kiosk mode as an admin.