Google Community Team

If you’re just starting out with device management and are looking to maximize your investment, whilst also maximizing security and data protection, then read on. 


Android Enterprise offers a range of options to deploy and manage Android devices, depending on how they’ll be used and your specific needs. 


From locked down to free use, you’re able to address every device scenario across your enterprise. Let’s explore the options below. 


Fully managed devices: Tight security, maximum control


Imagine a company-owned device where IT has complete control. This is full device management. IT admins have comprehensive device and app management capabilities for company-owned devices, meaning they can set security policies, control apps, and even manage the user interface.

  • Benefits:  Ironclad security! IT admins control device policies and requirements, ensuring company data stays protected and remains compliant. 
  • Use cases: Ideal for industries with strict regulations like healthcare or finance. Think devices used in point-of-sale systems, healthcare data collection, or other scenarios demanding maximum security.
  • Considerations: Employees lose some personal device freedom and user privacy is not prioritized. Setting up and managing a large number of devices can be resource-intensive for IT. Devices are supplied by the company, which could be a large upfront cost and may require end-user training or support. 


You can explore all the features of full device management here.


Dedicated devices: Single-purpose powerhouses


This option transforms an Android device into a dedicated work machine.  Think digital signage, kiosks, or ruggedized devices for field use.


  • Benefits:  Apps and functionalities are locked down, preventing accidental misuse and keeping the device focused on its work purpose. It enhances security by preventing all device actions beyond those intended, and enables a device for shared users and experiences. 
  • Use cases:  Ideal for retail displays, self-service kiosks, logistics tracking devices, or any scenario requiring a dedicated work tool.
  • Considerations:  Limited functionality.  These devices can't be used for personal tasks and may require specialized hardware or software configurations.


You can explore the supported features on dedicated devices here.


Work profile: Balance security and user experience


A work profile is a secure work environment on a personal or personally enabled device. Work apps and data are completely contained and separated from personal information, offering a good balance between security and user convenience.


  • Benefits:  Work and personal data remains safe and separate, guaranteeing user privacy. Employees can use their familiar, preferred Android devices while IT admins maintain control over work data, keeping it secure. Businesses don’t have to spend money on new enterprise devices, but are still able to securely manage company apps, data and permissions. Plus, employees are empowered to toggle off work notifications at the end of the day, helping to prevent burnout and improve work-life balance. 
  • Use cases:  Suitable for both Bring Your Own Device (BYOD) or Company Owned Personally Enabled (COPE) policies. Ideal for hybrid work models - think business teams and executives who want to use personal devices to access work apps and tools to stay productive while in the office or on the go. 
  • Considerations:  Some security features may be dependent upon company security requirements. Reliant on employees following company policies for personal device usage.


You can explore the supported features for devices with a work profile here.


Management matchmaker


Android Enterprise offers control over work-related apps and data across various management options.

The best management option depends on your company’s specific needs, and how your fleet of devices will be used. It’s useful to take into account factors like data sensitivity, device usage scenarios, cost and convenience, and company culture. 


Android Enterprise also makes it simple to support different management modes across your fleet so don't hesitate to mix and match! 


Support for each management set depends on your EMM provider. Check with your EMM or the Android Enterprise Solutions Directory to learn more. 





If you found this useful, please leave a comment or kudos below. 


We’d love to hear what you’d look for in your management mode, and how this translates to your organization.

Level 1.5: Cupcake

This is pretty awesome 

Level 2.0: Eclair

Nice overview!


Is there a list available which shows all different configuration option between work profile and fully managed? And what data is visible for the ID admin?

Level 1.6: Donut

worth reading!