Android profiles ensure proper use of devices and protection of sensitive data. Profiles serve many different purposes, from letting you enforce corporate rules and procedures to tailoring and preparing Android devices for how they are used.

Android Versus Android (Legacy) Profiles

When deploying profiles there are two Android profile types: Android and Android (Legacy). Select the Android profile option if you have completed the Android EMM Registration. If you have opted out of the EMM registration, then the Android (Legacy) profiles are available. When you select Android but have not walked through the Android EMM Registration, an error message displays prompting you to go to the settings page to complete EMM registration or proceed to Android (Legacy) profile deployment.

To walk through Android EMM Registration, see Registering Android with Workspace ONE UEM

Work Profile vs. Work Managed Device Mode

A Work Profile is a special type of administrator tailored primarily for a BYOD use case. When the user already has a personal device configured with their own Google account, Workspace ONE UEM enrollment creates a Work Profile, where it installs the Workspace ONE Intelligent Hub.Workspace ONE UEM only controls the Work Profile. Managed apps install inside the Work Profile and display an orange briefcase badge to differentiate them from personal apps.

Work Managed device applies to devices enrolled from an unprovisioned state (factory reset), recommended for corporate owned devices. Workspace ONE Intelligent Hub is installed during the setup process and set as the device owner, meaning Workspace ONE UEM will have full control of the entire device.

Android profiles will display the following tags: Work Profile and Work Managed Device.

Profile options with the Work Profile tag only apply to the Work Profile settings and apps, and do not affect the user's personal apps or settings. For example, certain restrictions disable access to the Camera or taking screen capture. These restrictions only affect the Android badged apps inside the Work Profile and will not impact personal apps. Profile options configured for Work Managed Device apply to the entire device. Each profile discussed in this section indicates which device type the profile affects.

Device Access

Some device profiles configure the settings for accessing an Android device. Use these profiles to ensure that access to a device is limited only to authorized users.

Some examples of device access profiles include:

  • Configure a Passcode profile to require a passcode for the whole device (Device Passcode) or only the Work Profile (Work Passcode). For more information, see Passcode Profile (Android).
  • Specify and control how, when and where your employees use their devices. For more information, see Restrictions Profile (Android).

Device Security

Ensure that your Android devices remain secure through device profiles. These profiles configure the native Android security features or configure corporate security settings on a device through Workspace ONE UEM.

Device Configuration

Configure the various settings of your Android devices with the configuration profiles. These profiles configure the device settings to meet your business needs.