What is a work profile?

A work profile separates work apps and data on an Android device from personal apps and data. By default, work profile notifications and icons for apps installed in a work profile are marked with a work badge (briefcase icon) so you can distinguish them from personal apps.

Work profiles allow an IT department to securely manage a work environment without restricting users from using their device for personal apps and data. If your organization supports it, your IT department should provide instructions on how to add a work profile to your Android 5.0 Lollipop or later device.

If I set up a work profile on my device, what will my organization be able to control?

When you setup your work profile on a personally owned device, the device policy controller app will present the terms of use and detail the data on your device that is captured and recorded. You must review and accept the user license agreement to set up your work profile.

With work profiles, administrators have the ability to carry out some or all of the following actions:
  • Enforce settings and per-application restrictions for devices
  • Create, access, and delete work data in the work profile
  • Silently install and remove apps and certificates
  • Request a list of apps accessing data in the work profile
  • Remotely wipe work profile data
  • Restrict what can be shared across personal and work profiles
  • Block screen capture in your work profile
  • View statistics regarding your managed account
  • Manage corporate access to mail server and internal data
  • Change your account password
  • Monitor network activity and location information
Sample work profile policies:

For example, before you can complete setting up a work profile, an administrator may specify that a device has a password with at least 4 characters and that the latest device policy is used. Later, there may be various policies to protect a device, such as the ability to wipe an account from a device after 30 days without synchronization.

What data about my device is visible to my organization?

When you set up a work profile on your personal device, some device details are shared with administrators, but only data in the work profile is managed by your organization. Data and apps in your personal space are kept separate and remain private.

Domain administrators can view the following details about your device:

  • Model, serial number, and ID
  • Phone Number
  • Carrier
  • Operating system
  • Build Number
  • Kernel Version
  • Baseband Version
  • MAC Address
  • Language

Refer to your domain administrator’s privacy policy for more information.

How can I find out if I have a work profile?

On your device, go to Settings > Accounts. If you have a work profile it's listed in the Work section.

Can I have a work profile on a fully managed device?

If you use an Android 8.0+ fully managed device, your administrator can choose to create a separate work profile on the device. In this case, your IT department is the owner of both the device and the work profile. This means that they can manage business data and apps in the work profile, and access data and apps outside the work profile (personal profile).

A work profile on your fully managed device allows your IT department to enforce different policies on the personal profile and the work profile. For example, the personal profile could have fewer policy restrictions and allow you some level of personal usage like adding personal accounts, whereas the work profile containing company approved apps and data could be more restricted, and require a long password and limited data sharing.

Refer to your domain administrator’s privacy policy for information on how your organization manages data on work-only devices.

How can I remove a work profile?

To delete your work profile go to Settings > Accounts > Remove work profile. Touch Delete to confirm the removal of all apps and data within the work profile.

On a fully managed Android 8.0+ devices with a work profile, you can only delete the work profile if your administrator allows it.

On personal devices, you can delete your work profile at any time. Ensure that the policy app ("Device Policy") is uninstalled and not present on the main profile after this is complete.

After the work profile is deleted, all local data on the device within that profile is deleted.

A factory reset removes all data (both personal and work) from a device. However, only the owner of the device can perform a factory reset.

Was this helpful?
How can we improve it?