Getty Images/iStockphoto
Android work profiles are a way to separate work and personal data on personal Android devices running recent versions of the OS — ideally Android 10 and above.
IT departments will need to enroll these devices into a mobile device management (MDM) platform to enact this data separation.
For years, Google has expanded the options for Android administrators and users to control their devices. Services have changed and adapted over time to meet new business needs, with Android for Work evolving into Android Enterprise, the Android Device Administrator evolving into Device Owner and Android corporate-owned, personally enabled Android controls turning into Android work profile. With the Android 13 management API, Google is giving IT administrators and users more options for privacy and management.
Android work profiles are based on the concept of containers that originate when a user enrolls into an organization’s MDM. They are isolated spaces within a device where specified data and apps are stored. Administrators can think of it as two secured lockers right next to each other: one has corporate-only apps and data, and the other has personal apps and data. Although they are in the same phone these two parts of the phone can’t share information or communicate with one another. When the MDM creates a work profile, it creates a new container on the device. This container is encrypted and cannot share data unless configured.
The user’s corporate email, calendar and contacts are automatically added to the work profile. IT can also push down other apps and data to the work profile. For example, an airline might push down its mobile app to the work profile of its customer service agents.
With work profile, Google allows dual apps on a device, such as two Outlook apps or two Google Play Stores. Users will have visual cues on their devices to tell them which app is the business version and which is a personal version by a small briefcase icon on the corporate version of the app. When users try to access work app or data, they’ll enter a sandbox on the Android device. IT admins can also configure security policies such as prompts to enter their corporate credentials or pin code for these work apps. This helps to keep work data secure beyond simple concerns about data leakage from the business side to the personal side.
Because the work profile is encrypted and secure, IT can be confident that corporate data is safe even if the device is lost or stolen.
As with any new release of a mobile OS, Android 13 brings several new features that will be staples of the OS’ management for years to come.
With Android 13, users can open an app in either personal or business profile. This way, users can separate their business and personal life by viewing different content in whichever apps they prefer. Google gives the example of opening a YouTube link in a work browser instead of the personal YouTube app to ensure it does not conflict with the user’s personal YouTube feed and recommendations.
Google is also mirroring a feature already on the iOS platform, allowing users to grant different profiles access to selected files and photos or all files and photos. Users can also switch between work and personal photo galleries when sharing pictures via text messages or apps.
Devices running Android 13 can use near-field communication (NFC) for work apps to allow the use of digital badges. This will enable companies to turn users’ Android phones into ID badges that allow them to enter buildings, potentially saving costs on procuring, shipping and replacing physical badges for employees.
Google has introduced on-device smart dictation for work profile apps, allowing the separation of work and personal-based language.
If an organization uses Chromebooks, IT can take advantage of a new integration between ChromeOS’ Phone Hub and Android 13 that allows employees to access work profile notifications, messages and pictures securely. These interactions are protected by end-to-end encryption, and IT admins can manage these interactions via policies.
Google has introduced a new “central hub” that allows employees to view and manage device security settings and policies that are provisioned to their devices from the MDM or other management agent.
Android 13 offers IT admins more control over device Wi-Fi connectivity for features such as Wi-Fi Direct and Wi-Fi tethering. In addition, it provides security logs for activities related to Wi-Fi, Bluetooth and passwords that meet National Information Assurance Partnership requirements.
For faster security patching and updates, Google has moved Bluetooth and ultra wideband to mainline so that IT can update these components through Google System Updates.
Passcode security and complexity are important components of a secure mobile device environment, and to meet this demand Android offered passcode security requirements for a long time. However, Google recently introduced changes to the passcode policy from passcode quality to passcode complexity.
The new passcode requirements in Android 12 and later increase security and privacy on the device by adding new levels of passcode complexity. Password complexity increases the difficulty of hackers guessing or cracking a password by adding more conditions, such as length and character types. When setting the password complexity requirements within a given MDM, it’s important to select an appropriate level. MDM administrators can choose from four levels of password complexity: None, Low, Medium and High.
IT administrators must keep in mind that Google changed the device passcode and password policy to a higher security setting. The device passcode policy will automatically change to the higher security policy on enrolled devices. This might result in some end users needing to update the passcode on their devices and will be prompted to do so by the MDM agent.
How long should you support Android phones in the enterprise?
Does Apple offer work profiles for iPhones?
Part of: Work profile management in Android
When users bring personal Android devices to the workplace, IT should consider using work profiles on these devices. Learn about the latest work profile features on Android 13.
When organizations enable BYOD for Android users, they should look to Android Enterprise to create work profiles on those personal devices via an MDM.
When users leave an organization or lose a device, it’s time to remove their Android work profile. Learn three methods to get rid of a work profile on a BYOD device.
If a user deletes an Android work profile or switches devices, they will need to go through the process to restore it. Learn the simple steps to reenroll an Android work profile here.
NAPALM is a flexible Python library that can integrate with Ansible modules, support multivendor environments, and ease network …
An enterprise 5G deployment requires extensive planning. Prepare for advances in wireless technology using this 5G guide that …
AI deployment at the edge has the potential to unleash powerful real-time analysis and processing. Use cases include industrial …
Generative AI has the potential to dramatically reshape how companies manage their VoIP communications. A more intelligent …
The video conferencing vendor released a virtual assistant to let users summarize meetings and draft messages, and new meeting …
The increased use of cloud communications means the tools must be accessible for everyone. Organizations should vet how their UC …
A successful vishing attack against a Retool employee led to account takeovers of 27 cloud customers, but the company is pointing…
Caesars said it took steps after the breach to “ensure that the stolen data is deleted by the unauthorized actor,” suggesting it …
Google discussed its vision for applying generative AI to cybersecurity at its Google Cloud Next conference in August, with …
All Rights Reserved, Copyright 2003 – 2023, TechTarget
Privacy Policy
Cookie Preferences
Do Not Sell or Share My Personal Information
