| Attribute | Description | Backed up | Restorable |
| id | Key of the entity. Inherited from deviceCompliancePolicy | Yes | No |
| createdDateTime | DateTime the object was created. Inherited from deviceCompliancePolicy | Yes | Yes |
| description | Admin-provided description of the device configuration. Inherited from deviceCompliancePolicy | Yes | Yes |
| lastModifiedDateTime | DateTime the object was last modified. Inherited from deviceCompliancePolicy | Yes | Yes |
| displayName | Admin-provided name of the device configuration. Inherited from deviceCompliancePolicy | Yes | Yes |
| version | Version of the device configuration. Inherited from deviceCompliancePolicy | Yes | Yes |
| passwordRequired | Require a password to unlock the device. | Yes | Yes |
| passwordMinimumLength | Minimum password length. | Yes | Yes |
| passwordRequiredType | Type of characters in password. | Yes | Yes |
| requiredPasswordComplexity | Indicates the required device password complexity on Android. | Yes | Yes |
| passwordMinutesOfInactivityBeforeLock | Minutes of inactivity before a password is required. | Yes | Yes |
| passwordExpirationDays | Number of days before the password expires. | Yes | Yes |
| passwordPreviousPasswordBlockCount | Number of previous passwords to block. | Yes | Yes |
| passwordSignInFailureCountBeforeFactoryReset | Number of sign-in failures allowed before factory reset. | Yes | Yes |
| workProfilePasswordExpirationInDays | Number of days before the work profile password expires. | Yes | Yes |
| workProfilePasswordMinimumLength | Minimum length of work profile password. | Yes | Yes |
| workProfileInactiveBeforeScreenLockInMinutes | Minutes of inactivity before the screen times out. | Yes | Yes |
| workProfilePreviousPasswordBlockCount | Number of previous work profile passwords to block. | Yes | Yes |
| workProfilePasswordRequiredType | Type of work profile password that is required. | Yes | Yes |
| workProfileRequiredPasswordComplexity | Required work profile password complexity. | Yes | Yes |
| workProfileRequirePassword | Whether password is required for work profile. | Yes | Yes |
| securityPreventInstallAppsFromUnknownSources | Require devices to disallow installation of apps from unknown sources. | Yes | Yes |
| securityDisableUsbDebugging | Disable USB debugging on Android devices. | Yes | Yes |
| securityRequireVerifyApps | Require that the Android Verify apps feature be turned on. | Yes | Yes |
| deviceThreatProtectionEnabled | Require devices to enable device threat protection. | Yes | Yes |
| deviceThreatProtectionRequiredSecurityLevel | Require Mobile Threat Protection minimum risk level to report noncompliance. | Yes | Yes |
| advancedThreatProtectionRequiredSecurityLevel | MDATP Require Mobile Threat Protection minimum risk level to report noncompliance. | Yes | Yes |
| securityBlockJailbrokenDevices | Devices must not be jailbroken or rooted. | Yes | Yes |
| osMinimumVersion | Minimum Android version. | Yes | Yes |
| osMaximumVersion | Maximum Android version. | Yes | Yes |
| minAndroidSecurityPatchLevel | Minimum Android security patch level. | Yes | Yes |
| storageRequireEncryption | Require encryption on Android devices. | Yes | Yes |
| securityRequireSafetyNetAttestationBasicIntegrity | Require the device to pass the Play Integrity basic integrity check. | Yes | Yes |
| securityRequireSafetyNetAttestationCertifiedDevice | Require the device to pass the Play Integrity device integrity check. | Yes | Yes |
| securityRequireGooglePlayServices | Require Google Play Services to be installed and enabled on the device. | Yes | Yes |
| securityRequireUpToDateSecurityProviders | Require the device to have up to date security providers. | Yes | Yes |
| securityRequireCompanyPortalAppIntegrity | Require the device to pass the Company Portal client app runtime integrity check. | Yes | Yes |
| securityRequiredAndroidSafetyNetEvaluationType | Require a specific SafetyNet evaluation type for compliance. | Yes | Yes |