reorganize secondary user feature docs
This commit is contained in:
parent
b0015fc05c
commit
265efb6046
@ -104,13 +104,18 @@
|
||||
</li>
|
||||
<li><a href="#more-complete-patching">More complete patching</a></li>
|
||||
<li><a href="#sandboxed-google-play">Sandboxed Google Play</a></li>
|
||||
<li><a href="#disabling-secondary-user-app-installation">Disabling secondary
|
||||
user app installation</a></li>
|
||||
<li><a href="#user-installed-apps-can-be-disabled">User installed apps
|
||||
can be disabled</a></li>
|
||||
<li><a href="#broad-carrier-support">Broad carrier support without invasive carrier access</a></li>
|
||||
<li><a href="#private-screenshots">Private screenshots</a></li>
|
||||
<li><a href="#improved-user-profiles">Improved user profiles</a></li>
|
||||
<li>
|
||||
<a href="#improved-user-profiles">Improved user profiles</a>
|
||||
<ul>
|
||||
<li><a href="#more-user-profiles">More user profiles</a></li>
|
||||
<li><a href="#end-session">End session</a></li>
|
||||
<li><a href="#disabling-app-installation">Disabling app installation</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li><a href="#other-features">Many other features</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
@ -411,18 +416,6 @@
|
||||
section on sandboxed Google Play</a> for instructions.</p>
|
||||
</section>
|
||||
|
||||
<section id="disabling-secondary-user-app-install">
|
||||
<h3><a href="#disabling-secondary-user-app-installation">Disabling secondary
|
||||
user app installation</a></h3>
|
||||
|
||||
<p>GrapheneOS adds a toggle to the user management settings for disabling
|
||||
secondary user app installation. You can install the apps you want to be
|
||||
usable in a secondary user and then disable the ability to install more apps
|
||||
as that user in the Owner profile. Android supports this as a standard device
|
||||
management feature but doesn't make it available to a user who owns their own
|
||||
device.</p>
|
||||
</section>
|
||||
|
||||
<section id="user-installed-apps-can-be-disabled">
|
||||
<h3><a href="#user-installed-apps-can-be-disabled">User installed apps can be disabled</a></h3>
|
||||
|
||||
@ -479,20 +472,41 @@
|
||||
apps, app data and profile data (contacts, media store, home directory, etc.).
|
||||
Apps can't see the apps in other user profiles and can only communicate with
|
||||
apps within the same user profile (with mutual consent with the other app).
|
||||
Each user profile has their own encryption keys based on their lock
|
||||
method.</p>
|
||||
Each user profile has their own encryption keys based on their lock method.
|
||||
They're a great fit for GrapheneOS with a lot of room for improvement.</p>
|
||||
|
||||
<p>GrapheneOS raises the limit on the number of secondary user profiles to 16
|
||||
(15 + guest) instead of only 4 (3 + guest) to make this feature much more
|
||||
flexible.</p>
|
||||
<p>GrapheneOS provides improvements to user profile functionality and is
|
||||
working on further improvements to make switching between them and monitoring
|
||||
other profiles much more convenient.</p>
|
||||
|
||||
<p>GrapheneOS also enables support for logging out of user profiles without
|
||||
needing a device manager controlling the device to use this feature. Logging
|
||||
out makes profiles inactive so none of the apps installed in them can run. It
|
||||
also purges the disk encryption keys from memory and hardware registers,
|
||||
putting the user profile back at rest.</p>
|
||||
<section id="more-user-profiles">
|
||||
<h4><a href="#more-user-profiles">More user profiles</a></h4>
|
||||
|
||||
<p>Further UX improvements are in active development and testing.</p>
|
||||
<p>GrapheneOS raises the limit on the number of secondary user profiles to 16
|
||||
(15 + guest) instead of only 4 (3 + guest) to make this feature much more
|
||||
flexible.</p>
|
||||
</section>
|
||||
|
||||
<section id="end-session">
|
||||
<h4><a href="#end-session">End session</a></h4>
|
||||
|
||||
<p>GrapheneOS also enables support for logging out of user profiles without
|
||||
needing a device manager controlling the device to use this feature. Logging
|
||||
out makes profiles inactive so none of the apps installed in them can run. It
|
||||
also purges the disk encryption keys from memory and hardware registers,
|
||||
putting the user profile back at rest.</p>
|
||||
</section>
|
||||
|
||||
<section id="disabling-app-installation">
|
||||
<h4><a href="#disabling-app-installation">Disabling app installation</a></h4>
|
||||
|
||||
<p>GrapheneOS adds a toggle to the user management settings for disabling
|
||||
secondary user app installation. You can install the apps you want to be
|
||||
usable in a secondary user and then disable the ability to install more apps
|
||||
as that user in the Owner profile. Android supports this as a standard device
|
||||
management feature but doesn't make it available to a user who owns their own
|
||||
device.</p>
|
||||
</section>
|
||||
</section>
|
||||
|
||||
<section id="other-features">
|
||||
|
Loading…
x
Reference in New Issue
Block a user