> ## Documentation Index
> Fetch the complete documentation index at: https://help.dingtalk.io/llms.txt
> Use this file to discover all available pages before exploring further.

# In-App File Control

> Restrict forwarding downloading and copy-paste of in-app files and scope the policy to specific employees departments or roles from the admin console.

Organizations can manage operations related to in-app files, including controlling actions such as forwarding, downloading, and copy-paste.

***

## II. User Guide

### 1. Admin Console Navigation

In the left navigation pane, go to **Security & permission > Security > Data Protection > In-App File Control**

<Frame>
  <img src="https://alidocs.oss-cn-zhangjiakou.aliyuncs.com/res/2M9qP5jDGXzw4O01/img/71154b34-1715-4833-a2c2-3cea8c5c3f71.png" alt="In-App File Control navigation path" />
</Frame>

### 2. Administrator — No Rules Configured

In-App File Control includes multiple capabilities, covering both mobile and desktop clients and involving various file operations.

Taking "Download files to the mobile terminal" as an example:

When not configured, the feature is disabled.

When disabled, the behavior is consistent with the default DingTalk experience.

<Frame>
  <img src="https://alidocs.oss-cn-zhangjiakou.aliyuncs.com/res/2M9qP5jDGXzw4O01/img/ca6c9d7c-ea98-4729-862e-515eb573a290.png" alt="Feature disabled when no rules are configured" />
</Frame>

### 3. Administrator — Configuration Example

<Steps>
  <Step title="Preview the card configuration">
    Click the info icon to preview the effect of the card configuration.

    <Frame>
      <img src="https://alidocs.oss-cn-zhangjiakou.aliyuncs.com/res/2M9qP5jDGXzw4O01/img/57da27e5-76f0-44bf-8169-82be2ef67f51.png" alt="Preview the card configuration" />
    </Frame>
  </Step>

  <Step title="Enable the feature">
    Toggle the switch and click **Confirm** in the dialog to enable the feature.

    <Frame>
      <img src="https://alidocs.oss-cn-zhangjiakou.aliyuncs.com/res/2M9qP5jDGXzw4O01/img/9594a727-5866-4891-ba5a-86565ccfb8c4.png" alt="Enable the feature" />
    </Frame>
  </Step>

  <Step title="Configure the applicable scope">
    The feature applies to all employees by default.

    Click **Edit** to configure the applicable scope — specify which employees the policy applies to or excludes.

    For example, to apply the policy only to the Engineering Department, select **Specific Employees**, then use the contact picker to select the department.

    The contact picker also supports selection by role, giving administrators flexibility to configure as needed.

    <div style={{display: 'flex', gap: '12px', justifyContent: 'center', flexWrap: 'wrap', margin: '16px 0'}}>
      <img src="https://alidocs.oss-cn-zhangjiakou.aliyuncs.com/res/2M9qP5jDGXzw4O01/img/8e872b19-98f4-49fb-beb3-b377b485701b.png" alt="Configure applicable scope 1" style={{width: '32%', minWidth: '180px', borderRadius: '8px', boxShadow: '0 2px 12px rgba(0,0,0,0.08)', margin: 0}} />

      <img src="https://alidocs.oss-cn-zhangjiakou.aliyuncs.com/res/2M9qP5jDGXzw4O01/img/34bae4e5-73cd-473c-95a2-f87ec61daceb.png" alt="Configure applicable scope 2" style={{width: '32%', minWidth: '180px', borderRadius: '8px', boxShadow: '0 2px 12px rgba(0,0,0,0.08)', margin: 0}} />

      <img src="https://alidocs.oss-cn-zhangjiakou.aliyuncs.com/res/2M9qP5jDGXzw4O01/img/c02dd511-cd79-4c21-a114-a84101c14d01.png" alt="Configure applicable scope 3" style={{width: '32%', minWidth: '180px', borderRadius: '8px', boxShadow: '0 2px 12px rgba(0,0,0,0.08)', margin: 0}} />
    </div>
  </Step>
</Steps>

### 4. Employee — Under Policy Enforcement

When an employee attempts to download a file, a security prompt will appear.

<Frame>
  <img src="https://alidocs.oss-cn-zhangjiakou.aliyuncs.com/res/2M9qP5jDGXzw4O01/img/f8580aab-b7a1-4630-90cc-386a07af5fc1.jpeg" alt="Employee security prompt" />
</Frame>

***

## III. Q\&A

| **Prerequisites**      | Version 8.3.15 and above                        |
| ---------------------- | ----------------------------------------------- |
| **Supported Scope**    | All four platforms (Windows, Mac, Android, iOS) |
| **Enforcement Method** | Takes effect immediately                        |