Core Concepts
Before diving deeper into AndroidNexus, it's helpful to understand the core concepts that power the platform.
Enterprise
An Enterprise is your organization's container in AndroidNexus. It holds all your:
- Devices
- Policies
- Applications
- Users
- Settings
Each enterprise is completely isolated from others, ensuring your data remains secure and private.
Devices
A Device is any Android device enrolled in your enterprise. AndroidNexus supports multiple management modes:
| Mode | Description | Best For |
|---|---|---|
| Fully Managed | Complete device control by IT | Company-owned work devices |
| Dedicated | Locked to specific apps | Kiosks, signage, shared devices |
| COPE | Work profile on company device | Company-owned with personal use |
| BYOD | Work profile container on personal device | Employee-owned devices |
Device Information
Each device shows key information including:
- Last Sync - When the device last checked in with the server
- Compliance - Whether the device meets policy requirements
- Policy - The currently applied policy
Policies
A Policy defines how devices should be configured and what users can do. Policies control:
- Security Settings - Password requirements, encryption, screen lock
- App Management - Which apps are installed, blocked, or required
- Network Configuration - Wi-Fi, VPN, proxy settings
- Restrictions - Camera, USB, Bluetooth, screen capture
- Kiosk Mode - Lock device to specific apps
Policies are applied in order of specificity. Device-specific settings override group settings, which override enterprise defaults.
Tags
Tags help you organize devices and filter them at scale. Common tagging strategies:
- By department (Sales, Engineering, Support)
- By location (HQ, Remote, Field)
- By device type (Tablets, Phones, Rugged)
- By use case (Kiosk, Standard, Shared)
Tags can be added to devices from the device detail view and used as filters on the Devices page.
Applications
AndroidNexus manages applications through:
Managed Google Play
- Deploy public apps from Google Play
- Distribute private/internal apps
- Configure managed app settings
- Silent install without user interaction
Web Apps
- Create Progressive Web Apps (PWAs)
- Add shortcuts to websites
- Custom icons and launch behavior
Quick Actions
Quick Actions are commands you can send to devices remotely from the device detail view:
| Action | Description |
|---|---|
| Lock | Immediately lock the device screen |
| Reboot | Restart the device |
| Reset Password | Set a new device password |
| Clear App Data | Clear data for specific applications |
| Start Lost Mode | Enable lost mode with custom contact information |
| Stop Lost Mode | Disable lost mode on the device |
| Factory Reset | Wipe all data and reset device (destructive) |
Onboarding Tokens
Onboarding Tokens are secure credentials that authorize devices to join your enterprise. Tokens are created with:
- Token Name - A descriptive identifier for the token
- Description - Optional details about the token's purpose
- Expiration Date - When the token becomes invalid
- Max Uses - Limit how many devices can use this token (leave empty for unlimited)
- Auto Approve - Automatically approve enrollments without manual review
- Policy Assignment - Automatically apply a policy to devices enrolled with this token
Compliance
Compliance refers to whether a device meets your security requirements. AndroidNexus continuously monitors:
- Password strength
- Encryption status
- OS version
- Security patch level
- Installed applications
Non-compliant devices can be:
- Notified with warnings
- Restricted from accessing resources
- Automatically wiped (if configured)
Next Steps
Now that you understand the basics: