I was hoping someone knows this, before I need to just try it and see what happens:
If I setup multiple users, let’s say a private one and one for work. Can the admin at work still wipe the entire device? Including my private user?
It would be fantastic to limit their impact on my phone. I’m fine with them keeping their stuff secure and be able to wipe their stuff from my phone. Just not my private part.
Can the admin at work still wipe the entire device? Including my private user?
knowledge on device enrollement is thin in the forum. Keywords are Android Device Policy and MDM. There was some feedback on it here:
Android device policy : this one is fun. It technically works. You can install it, launch it, interact with it. However, it doesn’t seem to be able to see my work profile. It is not invoked when connecting to my professionnal Google Workspace account through /e/OS’ account manager. It doesn’t seem to do anything at all. So… kinda not working ?
Not a problem, though. I expected my Workspace account to refuse to sync if Android Device Policy was not found/used, but apparently no. I use Shelter and the MicroG Google Account compatibility tool, and everything is fine. My pro email and calendar are synced in /e/OS native apps, duplicated in the work profile, and all is fine so far.
Unless the device doesn’t meet the criteria of being “managed”, the remote wipe (of user profile or device) doesn’t seem possible - Wipe corporate data from a device - Google Workspace Admin Help - though at best someone could comment who sees both, Admin interface and device.
(Murena works on MDM enrollement - but from the looks of it, that will be tethered to their platform)