What you can control on 

Android

 devices

You can activate a device on 

BlackBerry UEM

 with the "

User privacy

" activation type to provide secure access to work resources without managing the device. This option is often used for BYOD devices.

These activations can allow users to access your network over VPN using 

BlackBerry 2FA

, share files securely using 

BlackBerry Workspaces

, and install 

BlackBerry Dynamics

 apps such as 

BlackBerry Work

 and 

BlackBerry Access

 to access work email and your work intranet.

Android Enterprise

 devices can be managed but allow for personal use by creating a work profile on the device that separates work and personal data. This option maintains privacy for user's personal data in the personal profile but lets you manage work data using commands and IT policy rules. You can manage work apps on the device, including 

BlackBerry Dynamics

 apps.

You can wipe work data, but not personal data, from the device. Work and personal data are both protected using encryption and password authentication. This option is often used for corporate-owned, personally enabled (COPE) and BYOD devices.

Android Enterprise

 8.0 and later devices can be fully managed but allow for some personal use by creating a work profile on the device that separates work and personal data but allows your organization to maintain full control over the device and wipe all data from the device. Some IT policy rules can be applied separately to the work and personal profiles. You can manage work apps on the device, including 

BlackBerry Dynamics

 apps.

You can log SMS, MMS, and phone calls sent and received on the device. Work and personal data are both protected using encryption and password authentication. This option is often used for COPE devices.

Android Enterprise

 devices can be fully managed and have a work profile but no personal profile. This option lets you manage the entire device using commands and IT policy rules. You can manage work apps on the device, including 

BlackBerry Dynamics

 apps.

You can log SMS, MMS, and phone calls sent and received on the device. All data on the device is protected using encryption and a method of authentication such as a password. This option is often used for corporate-owned, business only (COBO) devices. 

You can manage 

Android

 9.x and earlier devices using commands and IT policy rules. A separate work space is not created on the device, and there is no added security for work data. To provide security for work data you can install 

BlackBerry Dynamics

 apps.

This activation type is deprecated for 

Android

 10 devices. For more information, visit https://support.blackberry.com/community to read article 48386.

You can use device groups and compliance profiles to manage what happens for devices activated with "

MDM controls

" activations that are updated to 

Android

 10. For more information, see the Administration content.