Prerequisites for restoring an Android work profile

To restore a deleted work profile, organizations need to haveAndroid Enterprise-integrated MDM tools, or a similar tool with these capabilities, from vendors such as VMware, IBM, Microsoft and Samsung, to name a few. These tools provide the necessary infrastructure and capabilities to properly manage policies on Android devices in general. In this case, they can help restore a deleted work profile.

How to restore a deleted Android work profile

Restoring a work profile, in most cases, is a task the end user completes. To help guide users through the process of restoring a deleted work profile, it is important to provide screenshots and documentation wherever possible. This makes it easier for end users to understand how they should complete the task and may reduce help desk tickets related to this process.

This exampleuses Microsoft Intune, though different versions of MDM may vary but will follow similar concepts:

1. Search for the proper MDM agent app in the Google Play Store. Then, download the app to the Android device.
2. To restore a work profile on a device that was self-unenrolled, select the three-dot menu at the top right, and selectReset Work Profile. Then, click theRestart button.
3. Sign into the MDM agent, and tapBegin(Figure 1).
4. Review the privacy statement, and tapContinue.
5. Review and accept Google's terms and services.
6. Wait while the profile is set up, and follow the remaining prompts to complete the setup.

Note: If auser sets up the Android work profile as a new user, they only need to download the MDM agent, open it and then clickBegin.

Once the process is complete, end users can confirm that their applications and security settings have been restored by opening the app drawer and verifying that their work apps are available and can also navigate to Settings > Passwords and Accounts. Then, validate that the MDM shows the option to selectWork profile settings (Figure 2).

Note: This selection varies depending on the user's version of Android, the Android model, and OEM and MDM platform in use.

This ensures that users can safely return to working on their devices without any issues. Additionally, IT teams should keep track of which devices have been restored to identify any potential problems in the future.With custom reports from an organization's MDM system, IT admins can configure rules to monitor enrollment and pending device status. This example uses VMware's reporting platform (Figure 3).

How to temporarily turn off an Android work profile

If users delete their work profile to avoid having work data on their Android smartphone, IT administrators should inform the user that it's possible to turn off the work profile entirely without deleting it (Figure 4).

For example, they may be going on vacation or taking time off for the holidays and need a way to turn off work notifications and applications. Android makes the process to temporarily disable a work profile simple.

Any BYOD Android user with the device enrolled in a work profile can turn off the work profile by dropping down the notification bar twice to open the application tiles, scrolling to theWork Apps tile and toggling it toOff. Once they want the work functions back on the device, they can navigate to the same menu and flip it back toOn.