There are 3 different modes to use when using Android Enterprise.

AE Fully Managed Device (Work Managed): A fully managed device that is only used for work. This allows the administrator full control over the device. This does not allow a private use of the device. To enroll devices in this mode, devices have to be reset and enrolled with a QR Code (see AE Enrollment) or enrolled via Knox Enrollment or Zero Touch.

AE BYOD Container: The BYOD (bring your own device) Container allows users to access company data on their private phone in a separate container. In this mode, private apps are not able to see company data and apps and vice versa. To enroll devices in this mode, the AppTec app has to be downloaded and a QR Code can be scanned. Create a device in the console and select “AE Container (BYOD & Enahnced Work Profile)” as device type. Click on the QR Code on the newly generated device to get the QR Code and set the first switch to “Legacy & BYOD”.

AE Enhanced Work Profile: (requires Android 11 or higher) While the above mentioned BYOD Container brings company data on a private device, the Enhanced Work Profile does the same but for a company owned device. It creates the same container, but gives the administrator a bit more control over the device, so the user cannot simply remove the MDM from the device. Create a device in the console and select “AE Container (BYOD & Enahnced Work Profile)” as device type. Click on the QR Code on the newly generated device to get the QR Code and set the first switch to “Enhanced Work Profile”. This QR Code can be scanned after resetting the device and tapping 6 times on the screen as explained in Method 1 in AE Enrollment.