Lockdown policy fields for Android enterprise devices in Work Profile mode

Whether a lockdown policy field applies to an Android enterprise device depends on the Android enterprise mode that the device is registered in. The modes - Work Managed Device mode, Managed Device with Work Profile (COPE) mode on Android devices versions 8-10, and Work Profile on Company Owned Devices Android versions 11 through the latest version as supported by MobileIron - are described in "Modes for Android enterprise devices" in the MobileIron Core Device Management Guide for Android and Android enterprise Devices.

Lockdown options in this section apply to Android enterprise devices in Work Profile mode.

Table 1. Lockdown policy fields: Android enterprise in Work Profile mode

Item

Description

Default Policy Setting

Allow copy and paste

Allows copy and paste from apps inside the Android enterprise profile to apps outside the profile.

Selected

Allow caller ID across profiles

Allows caller ID to be visible to phone app in all profiles.

NOTE:

When the caller ID is permitted across profiles, work contacts can be viewed by the personal apps for incoming calls. This applies to Android 6.0 through the most recently released versions as supported by MobileIron.

Selected

Allow work calendar sharing with personal profile

Select to allow calendar sharing of work calendar information with the personal profile. This is so apps can display work events alongside personal events in device user's personal profile (for example calendar apps like Google calendar.) If the work event is tapped within the personal profile, a view of the event displays. Tapped again, it opens the event in the work calendar. Applicable to Managed devices with work profiles.

Not selected

Allow contact search across profiles

Allows personal space Contacts app sharing across the profile.

NOTE:

This is supported on Android 7.0 devices through the most recently released version as supported by MobileIron.

Selected

Allow contact sharing on Bluetooth devices.

Allows the caller ID to be visible on another Bluetooth device such as your car’s Bluetooth screen.

NOTE:

This is supported on Android 6.0 devices through the most recently released version as supported by MobileIron.

Selected

Allow unknown sources in personal profile

Allow installation of apps from untrusted sources in the personal profile. The work profile never allows installation of apps from unknown sources.

Not selected

Android 8:

Allow Auto-Fill

Allows password autofill.

Selected

Android 8: Allow work app notifications in personal profile

When device user is in personal profile, notifications from Mobile@Work apps will display.

Selected

Android 8: Allow Bluetooth Sharing

Allows Bluetooth sharing with other devices.

Selected

Android 9: Allow Printing

Allows the printing of documents from Mobile@Work apps.

Selected

Android 9: Allow Share into Profile

Allows sharing from outside the Work Profile to inside the Work Profile

Selected