Relution Signet Customer Hub

Work profile / BYOD

The enrollment type Work Profile is the right choice for the Bring Your Own Device (BYOD) approach. Users can provide their private devices to have a Work Profile installed on them by the organization. No resetting of the devices is necessary for the commissioning of a work profile. The mail app or other apps of the organization can then be made available within a work profile. Private and organization-related data are strictly separated on the devices. In addition, administrators have no insight into installed apps and no access rights to functions or settings on private devices. When a work profile is deleted, all organization-related data is removed from the devices, whereas all private data is retained.

Create enrollment in Relution

  • Under Devices → Enrollments, Add is clicked
  • Android Enterprise is selected as the platform and, under Type, the Work profile icon (the name appears as a tooltip; Managed device is preselected by default)
  • Ownership in this case would be BYOD (Bring Your Own Device)
  • A device name is assigned and the enrollment is saved

Ownership is a mandatory field and is applied to the device during enrollment. It has no effect on how the work profile is set up. Together with the settings under Settings → Device Management → Enrollment, however, it determines which device actions are allowed (Wipe device, Lock device, Locate device, Reset lock passcode) and whether the ownership can still be changed after enrollment. With BYOD, wiping, locating and resetting the passcode are disabled by default, and the ownership cannot be changed afterwards. Locking the device is allowed by default.

Necessary information to perform the enrollment.

In the enrollment created, a QR code is displayed under Enrollment information to enroll Android devices. This can also be called up via the QR Code column in the Enrollments overview.

Complete enrollment

The newly created QR code is scanned with the camera app. The steps shown are then followed to complete the enrollment process.

Container work profile on the private devices

After successful enrollment, two separate areas personal and work are available on the user interface of the Android devices, which can be switched between at any time.

Actions

  • Install apps from the Google Play Store
  • Remove apps
  • Clear app data (Android 9 and later)
  • Send file to device
  • Remove eSIM
  • Add eSIM
  • Shutdown device
  • Locate device (disabled by default for ownership BYOD)
  • Lock device completely
  • Update device information
  • Request device info (Android 13 and later)
  • Send message
  • Reset lock passcode (disabled by default for ownership BYOD)
  • Select Play Store app from the Relution Store

Policy configuration

The available configurations include the following:

All configurations are described in the Overview → article.

Unavailable configurations