How to make an application an Android device administrator: a complete guide with risks and solutions

Purpose of the application device administrator on Android is powerful a tool that opens up advanced control options for your smartphone or tablet. However, along with useful functions (for example, remote blocking or forced encryption), these rights carry serious security risks. Incorrect use can lead to loss of control over the device, data leakage, or even blocking of access.

Many users are faced with the need to assign an application as an administrator when installing enterprise MDM solutions (for example, Microsoft Intune or VMware Workspace ONE), antiviruses (Kaspersky, Dr.Web), or specialized utilities for parental controls. But what exactly do these rights provide? And why Google with each new version Android tightens the conditions for their provision?

In this article we will look at:

• 🔹 What are administrator rights and how they differ from root access
• 🔹 Step-by-step guide for modern versions of Android (12–15)
• 🔹 List of applicationsthat actually require these rights (and why)
• 🔹 How to revoke rightsif the application begins to behave suspiciously
• 🔹 Alternative solutions for tasks where administrator rights are not required

⚠️ Attention: Starting with Android 10, Google restricts the capabilities of administrative applications in the background. Some features (for example, forced password reset) may not work on new devices without additional permissions.

What are device administrator rights and why you need them?

Rights device administrator (Device Admin) are a special access level that allows an application to perform actions on behalf of the system. Unlike root access (which give full control over the kernel Android), administrator rights are limited to specific functions, but do not require unlocking the bootloader or installing custom firmware.

The main features that an application with these rights receives:

• 🔐 Setting and changing passwords (including PIN, pattern, fingerprint)
• 📱 Remote locking or reset devices (useful for MDM systems)
• 🔄 Forced storage encryption (for example, for corporate policies)
• 🚫 Blocking the camera or installing applications (parental controls)
• 📡 Control of network settings (VPN, proxy, traffic limitation)

However, there is a downside: an attacker who has received such rights can lock a device to ransom, steal data or install malware without the user's knowledge. Therefore Google Play Protect automatically scans applications that ask for administrative rights and blocks suspicious ones.

Examples of legitimate applications that really need these rights:

• 🏢 Corporate MDM (for example, IBM MaaS360, MobileIron) - for managing office phones
• 🛡️ Antiviruses (for example, ESET Mobile Security) - for blocking threats at the system level
• 👨‍👩‍👧 Parental controls (for example, Kids Place, Family Link) - to restrict children's access
• 🔒 Password managers (for example, Bitdefender Wallet) - to force blocking if lost

⚠️ Attention: If an unknown application requests rights administrator for no apparent reason (such as a simple game or flashlight), this is a sure sign of malware. Delete it immediately.

Step-by-step guide: how to assign an application as an administrator

The process of assigning administrator rights differs depending on the version Android and the manufacturer's shell (MIUI, One UI, ColorOS etc.). Below are universal instructions for Android 12–15 (relevant for most devices in 2026).

Step 1. Make sure that the application supports administrator rights

Not all apps can become administrators. Check:

• 📌 Description in Google Play (there should be a mention of Device Admin)
• 📌 Availability of the “Activate administrator” item in the application settings
• 📌 Compatibility with your version Android (some old utilities do not work on new OS)

Step 2. Go to the device administrator settings

The path may vary, but usually it is:

Settings → Security → Advanced settings → Administrators devices

On some devices (Samsung, Xiaomi), the section may be called:

• 🔹 «Special access rights" → "Device Administrators" (MIUI)
• 🔹 «Biometrics and security" → "Other security settings" (One UI)
• 🔹 «System" → "Advanced settings" → "Administrators" (ColorOS)

Step 3. Activate the desired application

In the list find your application and turn on the switch. The system will display a warning about the risks - confirm the action. Some apps (for example, MDM solutions) may require additional authorization through the corporate portal.

Step 4. Check functionality

Run application and make sure that new functions are available. For example:

• 🔹 In antivirus the “Device blocking” option has appeared
• 🔹 In parental control you can set restrictions on time
• 🔹 In MDM system the status “Device is registered” is displayed

Make sure that the application is from a trusted source (Google Play, official website)

Read reviews and ratings in the store

Create a backup copy of important data

Check if there are alternatives without administrator rights

Remember how to revoke rights (see section below)-->

How to revoke administrator rights (and why this may not work)

If an application is no longer needed or behaves suspiciously, it can be revoked as an administrator. However, there are pitfalls: some apps (especially MDM solutions) block this ability until certain conditions are met (for example, logging out of a corporate account).

Standard way to revoke rights:

1. Go to Settings → Security → Device administrators
2. Find the application in the list and remove check mark
3. Confirm the action (you may need to enter a password)

What to do if the shutdown button is inactive?

This is a typical situation for corporate devices:

• 🔹 Contact the administrator of the IT department (if the phone is a business one)
• 🔹 Delete accountlinked to MDM (for example, corporate Google Account)
• 🔹 Reset the device to factory settings (will delete all data!)
• 🔹 Use ADB (for advanced users):

adb shell dpm remove-active-admin com.package.name

Where com.package.name is the application package identifier (can be found through App Inspector or adb shell pm list packages).

⚠️ Attention: On some devices with Android 13+ revocation of administrator rights may require confirmation via Google Accountif the application was installed via MDM. This is a protection measure against unauthorized removal of corporate policies.

Yes, for work

Yes, for antivirus/security

Yes, for parental controls

No, never

Difficult to answer-->

Risks and limitations: what not to do with administrator rights

Despite the wide possibilities, administrator rights have strict restrictions laid Google for user safety. Here's what Cannot can be done even with these rights:

In addition, starting from Android 10applications with administrator rights cannot:

• 🔹 Work in background without restrictions (rules apply Doze Mode)
• 🔹 Access notifications other applications
• 🔹 Change network settings without user confirmation

Important: an application with administrator rights cannot delete itself or revoke rights - this must be done either by another application with similar rights, or by the user manually. This protects against situations where malware gains control and “locks” device.

Alternatives to administrator rights: when they can be avoided

Many tasks that previously required administrator rights are now solved in other ways. Here are the most common scenarios and their alternatives:

1. Remote locking/resetting the device

Instead of assigning an application as an administrator, you can use:

• 🔹 Built-in function Find My Device from Google (works through Google Account)
• 🔹 Samsung Find My Mobile (for devices Samsung)
• 🔹 Mi Cloud (for smartphones Xiaomi)

Settings → Security → Google Play Protect → Security scanner

adb shell dpm set-active-admin com.package.name