Android profiles ensure proper use of devices and protection of sensitive data. Profiles serve many different purposes, from letting you enforce corporate rules and procedures to tailoring and preparing Android capable devices for how they are used.
Android Versus Android (Legacy) Profiles
When you go to deploy profiles for Android, you will see two platform types on the profiles page: Android and Android (Legacy). Select the Android profile option if you have completed the Android EMM Registration. If you have opted out of the EMM registration, then the Android (Legacy) profiles are available. When you select Android but have not walked through the Android EMM Registration, an error message displays prompting you to go to the settings page to complete EMM registration or proceed to Android (Legacy) profile deployment.
To walk through Android EMM Registration, see Android EMM Registration Overview.
Work Profile vs. Work Managed Device Mode
A Work Profile is a special type of administrator. The user already has a personal device with their own account, and Workspace ONE UEM manages the Work Profile. Workspace ONE UEM enrollment will add a Work Profile and install the AirWatch Agent inside the Work Profile as the profile owner for that user.
The Work Managed device applies to devices that start in the unprovisioned state, and enrollment installs the AirWatch Agent the Work Managed device. The AirWatch Agent will have full control of the entire device. Some profiles will display the following tags: Work Profile and Work Managed Device.
Profiles configured for the Work Profile only apply to the Android badged apps and not affect the users personal apps or settings unless you configure profiles at the device level. For example, certain restrictions disable access to YouTube, Google Play. Restrictions only affect the Android badged apps and not the regular Play Store versions. Alternatively, profiles configured for Work Managed Device mode type apply to the entire device. Each profile discussed in this section indicates which device type the profile affects.
Some device profiles configure the settings for accessing an Android device. Use these profiles to ensure that access to a device is limited only to authorized users.
Some examples of device access profiles include:
- Secure a device with a Passcode profile. For more information, see Passcode Profile (Android for Work).
- Specify and control how, when and where your employees use their devices. For more information, see Restrictions Profile (Android for Work).
Ensure that your Android devices remain secure through device profiles. These profiles configure the native Android security features or configure corporate security settings on a device through Workspace ONE UEM.
- Access internal resources such as email, files, and content. For more information, see Configure VPN (Android for Work).
Take administrative actions when a user installs or uninstalls certain applications. For more information, see Application Control (Android for Work).
Configure the various settings of your Android devices with the configuration profiles. These profiles configure the device settings to meet your business needs.