What you can control on

Android

devices

You can activate a device on

BlackBerry UEM

with the "

User privacy

" activation type to provide secure access to work resources without managing the device. This option is often used for BYOD devices.

These activations can allow users to access your network over VPN using

BlackBerry 2FA

, share files securely using

BlackBerry Workspaces

, and install

BlackBerry Dynamics

apps such as

BlackBerry Work

and

BlackBerry Access

to access work email and your work intranet.

Android Enterprise

devices can be managed but allow for personal use by creating a work profile on the device that separates work and personal data. This option maintains privacy for user's personal data in the personal profile but lets you manage work data using commands and IT policy rules. You can manage work apps on the device, including

BlackBerry Dynamics

apps.

You can wipe work data, but not personal data, from the device. Work and personal data are both protected using encryption and password authentication. This option is often used for corporate-owned, personally enabled (COPE) and BYOD devices.

Android Enterprise

devices can be fully managed but allow for some personal use by creating a work profile on the device that separates work and personal data but allows your organization to maintain full control over the device and wipe all data from the device. Some IT policy rules can be applied separately to the work and personal profiles. You can manage work apps on the device, including

BlackBerry Dynamics

apps.

You can log SMS, MMS, and phone calls sent and received on the device (if it runs

Android

10 or earlier). Work and personal data are both protected using encryption and password authentication. This option is often used for COPE devices.

Android Enterprise

devices can be fully managed and have a work profile but no personal profile. This option lets you manage the entire device using commands and IT policy rules. You can manage work apps on the device, including

BlackBerry Dynamics

apps.

You can log SMS, MMS, and phone calls sent and received on the device. All data on the device is protected using encryption and a method of authentication such as a password. This option is often used for corporate-owned, business only (COBO) devices.

You can manage

Android

9.x and earlier devices using commands and IT policy rules. A separate work space is not created on the device, and there is no added security for work data. To provide security for work data you can install

BlackBerry Dynamics

apps.

This activation type is deprecated for

Android

10 devices. For more information, visit https://support.blackberry.com/community to read article 48386.

You can use device groups and compliance profiles to manage what happens for devices activated with "

MDM controls

" activations that are updated to

Android

10. For more information, see the Administration content.