A single user might be entitled to a mix of open or managed access to native apps. The adaptive management approach allows for end users to use open access applications without requiring management. When users request a native app that requires management, adaptive management provides the additional security and control needed to manage that native app.
When applications are managed, users must enable Workspace Services to install and use the managed applications. When you upload an application in the Workspace ONE UEM console, the access state displays as either open or managed based on configuration for that application. For example, if the Send App Configuration option is selected, an application is set to require management.
Applications that require management display a star icon when viewed in an unmanaged state in the catalog. Users must select to enable Workspace services through the adaptive management process to use the application. When users attempt to download an application that displays a star icon, they are prompted with a message that asks users to enable the Workspace Services. Users can click a privacy notice link to see the privacy impact for their personal information if they choose to continue with the adaptive management process. The privacy notice automatically pulls settings from the Workspace ONE UEM environment they are about to enroll into. After reviewing the privacy setting information, users can either proceed to enable Workspace Services or back out and continue to use the Workspace ONE application unmanaged on their device. When users enable Workspace Services, the star icon is removed from all the managed applications.
Removing Access on Managed Devices
Users can disable the Workspace ONE app on their managed device through the Remove Account option. Removing the account executes an enterprise wipe of the device, removing corporate access and returning the user to the login screen. Administrators can perform an enterprise wipe from the Workspace ONE UEM console to disable Workspace ONE services.
Executing a Remove Account action on managed devices revokes access granted through the Workspace ONE application and unenrolls the device from Workspace ONE UEM. Applications that required management are removed from the device and access to Workspace ONE UEM productivity applications such as Boxer, Browser, and Content Locker, is revoked.