The privacy settings page lets you define how device and user information are handled in the Workspace ONE UEM console. This is particularly useful in bring your own device (BYOD) deployments.

This optional setting can be configured by navigating to Groups & Settings > All Settings > Devices & Users > General > Privacy.

There is a link at the top of this setting page that leads to VMware's Privacy Policy at

Determine your Organizational group hierarchy

Before you review and modify settings, understand the two types of inheritance/override options for the organization group hierarchy available at the top and bottom of the settings page and determine your choices. For more information about these settings, see Override Versus Inherit Setting for Organization Groups.

  • Current Setting – Select whether to Inherit or Override the displayed settings. Inherit means use the settings of the current organization group's parent OG, while Override enables the settings for editing so you can modify the current OG's settings directly.
  • Child Permission – Select the available behavior of child organization groups that exist below the currently selected organization group. Inherit only means child OGs are only allowed to inherit these settings. Override only means they override the settings, and Inherit or Override means you can choose to inherit or override settings in child OGs that exist below the currently selected OG.

What can you do with the Workspace ONE UEM Privacy settings page?

The Privacy settings page allows you to configure the following.

Data Types

For each ownership type (Corporate - Dedicated, Corporate - Shared, Employee Owned, and Unassigned), with regard to data types, select whether to Collect and Display (in the Console), Collect and Do Not Display, or Do Not Collect for the listed data type.

These data types include the following.

  • Location
  • Telecom
  • Applications
  • Profiles
  • Network


For the remote commands you want administrators to be able to perform, select whether to Allow, Allow With User Permission, or Prevent. The info badge beside the command () contains notes about applicable platforms, which you can review by hovering your cursor over to view the tooltip popup.

User Information

For User Information, select whether to Display or Do Not Display in the UEM console information for the data types presented. If a field is set to Do Not Display, then it displays as "Private" wherever it appears in the UEM console. This means you are not be able to search for fields you set to Do Not Display.

Do Not Disturb

Do Not Disturb ModeEnable or Disable this mode.

Do Not Disturb (DND) provides a clean and automated way to halt profile, content, and application changes on enrolled devices for a set window of time directly from the UEM console. Integral MDM commands such as device wipe, enterprise wipe, and clear passcode still function when DND is enabled and the device is in DND mode.

DND mode is particularly useful for devices that are used or displayed in front of customers or guests. Admin messages, app updates and content changes may confuse end-users or disrupt demos and walkthroughs, so the ability to pause any changes allows uninterrupted usage. Once the Do Not Disturb period ends, all queued updates and commands are pushed down to the device automatically.

User Friendly Privacy Notice

Enable this option to display a user-friendly privacy notice to your end-users after they enroll a device.

Select to Enable or Disable the User Friendly Privacy Notice on the device.

When Enabled, you may choose Yes (display a privacy notice) or No (do not display a privacy notice) for each ownership level: Employee Owned, Corporate - Dedicated, Corporate - Shared, and Unknown. You must create a privacy notice before you assign ownership types to receive the notice.