Set up enrollment of Android Enterprise work profile devices

Intune helps you deploy apps and settings to Android Enterprise work profile devices to make sure work and personal information are separate. For specific details about Android Enterprise, see Android Enterprise requirements.

To set up Android Enterprise work profile management, follow these steps:

  1. Connect your Intune tenant account to your Android Enterprise account.
  2. Specify Android Enterprise work profile enrollment settings. Android Enterprise work profiles are supported on only certain Android devices. Any device that supports Android Enterprise work profiles also supports Android device administrator management. Intune lets you specify how devices that support Android Enterprise work profiles should be managed from within Enrollment Restrictions.
    • Block: All Android devices, including devices that support Android Enterprise work profiles, will be enrolled as Android device administrator devices, unless Android device administrator enrollment is also blocked.
    • Allow (set by default): All devices that support Android Enterprise work profiles are enrolled as Android Enterprise work profile devices. Any Android device that does not support Android Enterprise work profiles is enrolled as an Android device administrator device, unless Android device administrator enrollment is blocked.

Note

The default set to Allow is true for new tenants as of July 2019. All previous tenants will experience no change to their Enrollment Restrictions, and will see whatever policies they have set in Enrollment Restrictions. For previous tenants that never had Enrollment Restrictions changes, Block will still be the default for Android Enterprise work profiles.

  1. Tell your users how to enroll their devices.

If you want to enroll devices using Android Enterprise work profiles, but those devices were already enrolled with Android device administrator, those devices must first unenroll and then re-enroll.

Note

As an administrator, you can accomplish this remotely using the Retire function. This function can be found in the actions menu after selecting the device from the All Devices blade.

If you're enrolling Android Enterprise work profile devices by using a Device Enrollment Manager account, there is a limit of 10 devices that can be enrolled per account.

For more information, see Data Intune sends to Google.

Next steps for Android Enterprise work profiles

See also

Configuring and troubleshooting Android Enterprise devices in Microsoft Intune