Android’s built-in management features enable IT admins to fully manage devices used exclusively for work.

Android offers two modes depending on the ownership of the device being used within your organization. The Work Profile(also called the Profile Owner) creates a dedicated space on the device for only work applications and data. This is the ideal deployment for Bring Your Own Device (BYOD) programs. For devices that are being deployed to end users as corporate owned, Work Managed Device mode allows Workspace ONE UEM and IT admin to control the entire device and enforce an extended range of policy controls unavailable to work profiles, but restricts the device to only corporate use.

Work Profile Mode Functionality

Apps in the Work Profile are differentiated by a red briefcase icon, called badged apps, and are shown in a unified launcher with the user's personal apps. For example, your device shows both a personal icon for Google Chrome and a separate icon for Work Chrome denoted by the badge. From an end-user perspective, it looks like two different applications, but the app is only installed once with business data stored separately from personal data.

The AirWatch Agent is badged and exists only within the Work Profile data space. There is no control over personal apps and the AirWatch Agent does not have access to personal information.

There are a handful of system apps that are included with the Work Profile by default such as Work Chrome, Google Play, Google settings, Contacts, and Camera – which can be hidden using a restrictions profile

main home screen launcher

Certain settings show the separation between personal and work configurations. Users see separate configurations for the following settings:

  • Credentials – View corporate certificates for user authentication to managed devices.
  • Accounts – View the Managed Google Account tied to the Work Profile.
  • Applications – Lists all applications installed on the device.
  • Security – Shows device encryption status.
AFW_credentials accounts   security

Work Managed Device Mode Functionality

When devices are enrolled in Work Managed Device mode, a true corporate ownership mode is created. Workspace ONE UEM controls the entire device and there is no separation of work and personal data.

Important things to note for the Work Managed mode are:

  • The homescreen does not show badged apps like Work Profile mode.
  • Users have access to various pre-loaded apps upon activation of the device. Additional applications can only be approved and added through the Workspace ONE UEM console.

  • The AirWatch Agent is set as the device administrator in the security settings and cannot be disabled.
  • Unenrolling the device from with from Work Managed mode prompts device factory reset.