Wi-Fi user control blocked by Blueprint + app permissions locked by admin after blueprint change: resolve via Blueprint Wi-Fi mode and app permission reconfiguration

Android

When a Blueprint change is applied to a device, users may find they can no longer manage Wi-Fi settings or that app permissions display a "blocked by administrator" message.

Why this happens

Blueprints continuously enforce the configuration state you define. If a Blueprint's Wi-Fi mode is set to active management, or if app permissions are explicitly denied, the Esper Agent re-applies those restrictions every time the Blueprint converges — overriding any changes users make locally.

Restore user control of Wi-Fi settings

1. Open the Esper Console and navigate to Blueprints. Open the blueprint assigned to the affected device or group.
2. Go to the Network section and locate Wi-Fi Management Mode. Set it to one of the following based on how much control you want to return to users:
   • Provision Only — Wi-Fi credentials are applied once during provisioning; Esper stops managing them afterward.
   • Ignore — Esper does not manage Wi-Fi at all; users have full control.
3. Disable Use Only Saved Wi-Fi Access Points. This setting prevents users from connecting to any network not pre-configured in the Blueprint.
4. Disable Strict Wi-Fi Access Point Synchronization. Without this change, Esper re-enforces your admin-defined access point list on every convergence cycle, immediately overriding user selections.
5. In the Esper Settings section of the same blueprint, confirm that Wi-Fi is toggled on. This controls whether the Wi-Fi option is visible and accessible in the device's system Settings.
6. If the blueprint includes a custom JSON payload, review it for any keys that restrict Wi-Fi access. Remove or correct those entries before saving.
7. Select Save to publish the updated blueprint.

Restore app permissions

1. In the same blueprint, navigate to Apps & Configuration and select the affected app.
2. Under App Permissions, set each restricted permission — such as Camera, Location, or Storage — to Allow or Prompt. Setting a permission to Deny is what produces the "blocked by administrator" message users see.
3. Select Save.

Apply the changes to devices

1. Navigate to Devices & Groups and locate the affected devices. Devices showing an In Drift status will converge to the updated blueprint automatically.
2. To trigger convergence immediately, select the device, then apply the updated blueprint manually. This is useful when you need changes applied without waiting for the next scheduled sync.
3. Monitor device status in the Activity Feed until convergence completes and the status clears.

Verify: On the device, open Settings → Wi-Fi and confirm users can see available networks, switch between them, and configure proxy settings without a restriction message. Open the affected app, go to App Info → Permissions, and confirm permissions show Allow or Ask every time instead of "blocked by administrator." The device status in Devices & Groups should show as no longer In Drift within 5 minutes of convergence completing.

If this doesn't resolve it

If permissions still show as "blocked by administrator" after convergence, a second blueprint or a group-level override may be re-applying the restrictive policy. Before contacting support, collect the following:

• The name of the blueprint currently assigned to the affected device, visible under Devices & Groups → [Device Name] → Blueprint
• A screenshot of the permission state shown under App Info → Permissions on the device
• The device's Activity Feed entries from the time of the Blueprint change

Contact Esper Support with these details so the issue can be investigated further.

Still need help?

If you're still experiencing Wi-Fi connectivity issues or app permission problems after applying these Blueprint configurations, please submit a support ticket and include your Blueprint settings, the specific apps affected, and the sequence of changes you made to your device policies.