What is a work profile?
Enabling a work profile allows organizations to manage the business data and applications they care about, but leave everything else on a device under the user’s control. Administrators control work profiles, which are kept separate from personal accounts, apps, and data. By default, work profile notifications and app icons have a red briefcase so they’re easy to distinguish from personal apps. Work profiles allow an IT department to securely manage a work environment without restricting users from using their device for personal apps and data.
To set up a work profile you must have your Enterprise Mobility Management (EMM) providers device policy controller application installed on your device. Your EMM provider will supply you with the latest application. The device policy controller sets up the work profile on Android 5.0+ devices.If I set up a work profile on my device, what will my organization be able to control?
- Enforce settings and per-application restrictions for devices
- Create, access, and delete work data in the work profile
- Silently install and remove applications and certificates
- Request a list of applications accessing data in the work profile
- Remotely wipe work profile data
- Restrict what can be shared across personal and work profiles
- Block screen capture in your work profile
- View statistics regarding your managed account
- Manage corporate access to mail server and internal data
- Change your account password
- Monitor network activity and location information
For example, before you can complete setting up a work profile, an administrator may specify that a device has a password with at least 4 characters and that the latest device policy is used. Later, there may be various policies to protect a device, such as the ability to wipe an account from a device after 30 days without synchronization.
Some device details are shared with administrators, but only data in the work profile is managed by your organization. Data and apps in your personal space are kept separate and remain private.
Domain administrators can view the following details about your device:
- Model, serial number, and ID
- Phone Number
- Operating system
- Build Number
- Kernel Version
- Baseband Version
- MAC Address
On your device, go to Settings > Accounts. If you have a work profile it's listed in the Work section.
On Android 5.0+ devices, you can delete your work profile in Settings > Accounts > Remove work profile. Touch Delete to confirm the removal of all apps and data within the work profile.
After the work profile is deleted, all local data on the device within that profile is deleted. Only the device policy controller application and the Android device owner can delete the work profile and data. However, only the owner of the device can delete the personal data and perform a factory data reset.
If a device is owned by your company or organization and configured with a device owner, the device owner can also perform a factory reset.