V-283636
SV-283636r1190319_rule
CAT II
Zebra Android 14 must be configured to disable multiuser modes.
From: Zebra Technologies Android 14 COPE Security Technical Implementation Guide (V1R1)
Description
<VulnDiscussion>Multiuser mode allows multiple users to share a mobile device by providing a degree of separation between user data. To date, no mobile device with multiuser mode features meets DOD requirements for access control, data separation, and nonrepudiation for user accounts. In addition, the MDFPP does not include design requirements for multiuser account services. Disabling multiuser mode mitigates the risk of not meeting DOD multiuser account security policies.
SFR ID: FMT_SMF_EXT.1.1 #47a</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
Check Procedure
Review documentation on the managed Zebra Android 14 device and inspect the configuration on the Zebra Android device to disable multiuser modes.
This validation procedure is performed on both the EMM Administration Console and the managed Zebra Android 14 device.
On the EMM console:
COBO and COPE:
1. Open "User restrictions".
2. Open "Set user restrictions".
3. Verify "Disallow modify accounts" is toggled to "ON".
On the managed Zebra Android 14 device:
COBO and COPE:
1. Go to Settings >> Passwords & accounts >> Accounts for Owner.
2. Tap "Add account" (work profile).
3. Verify the action is not allowed.
If the EMM console device policy is not set to disable multiuser modes or on the managed Zebra Android 14 device, the device policy is not set to disable multiuser modes, this is a finding.
Fix Text
Configure the Zebra Android 14 device to disable multiuser modes.
On the EMM console:
COBO and COPE:
1. Open "User restrictions".
2. Open "Set user restrictions".
3. Toggle "Disallow modify accounts" to "ON".
CCI Reference
CCI-000366,CCI-002110- Created
- 2026-04-07 20:08:41
- Last Updated
- 2026-04-07 20:08:41