This section describes the most common enterprise deployment scenarios for Android devices.
Employee-owned devices (BYOD)
BYOD devices can be set up with a work profile—a feature built into Android 5.1+ that allows work apps and data to be stored in a separate, self-contained space within a device. An employee can continue to use their device as normal; all their personal apps and data remain on the device's primary profile.
The employee's organization has full management control over a device's work profile, but has no visibility or access to a device's personal profile. This distinct separation gives enterprises control over corporate data and security without compromising employee privacy.
Company-owned devices for knowledge workers
Organizations can exercise full management control over the Android 6.0+ devices they own and issue to employees.
Fully managed deployments are for company-owned devices that are used exclusively for work purposes. Organizations can enforce the full range of management policies on the entire device.
Company-owned devices for dedicated use
Dedicated devices are a subset of company-owned devices that serve a specific purpose. Android comes with a broad set of management features that allow organizations to configure devices for everything from employee-facing factory and industrial environments, to customer-facing signage and kiosk purposes.
Dedicated devices are typically locked to a single app or set of apps. Android 6.0+ offers granular control over a device's lock screen, status bar, keyboard, and other key features, to prevent users from enabling other apps or performing other actions on dedicated devices.