An organization has to manage all the devices in its organization, including the employees personal devices. The IT administrator cannot obtain complete control of such devices. In such cases, the devices can be enrolled as a Profile Owner. For these devices only the profile and apps pushed by MDM can be managed. For other devices it is recommended to enroll the device as Device Owner, where the device can be completely managed by the organization.
For devices enrolled as Profile Owner, the apps distributed by MDM will automatically be added to a logical container. This container ensures that there is no communication between the personal and corporate apps. This helps keep the corporate data safe from unauthorised access. In case of Device Owner, since the device as a whole is being managed by the organization, there is no need to containerize the device.
Android for Work configurations are supported for devices running Android 5.0 and above.
Follow the steps given below to add Play Store apps into the logical container or Work Profile
NOTE: If any configurations are applied to the apps, they will also get distributed along with the apps to the devices.