Devices running Android 5.0 and later with the managed_users feature declared can be used in a corporate environment under the auspices of each company’s information technology (IT) department. This is possible with the introduction of multiple users, managed profiles, and enterprise mobility management (EMM) applications, as well as enhancements to default encryption, verified boot, and SELinux.

With these enhancements, either users or their IT departments may create managed profiles that separate corporate employer data from personal user information. Follow the documents within this section of the site to properly implement corporate device administration.

Summary

Follow this flow to employ device administration:

1. Gain an understanding of key concepts, such as multiple users and managed profiles.
2. Implement device administration via custom overlay files.
3. Test and validate your devices with EMM providers and applications.

Supporting documentation

Device Administration API

Building Apps for Work