Work profile on Android devices

Learn about the Android work profile and how to set it up for your devices.

The purpose of a work profile is to create a secure container for your device users' work data and separate private applications from work applications. Using a work profile, administrators can remotely manage the work container and deploy applications silently to any Android device.

This solution is particularly important for companies that support using personal devices for work. It enables employees to bring their own devices (BYOD) and use them to securely access sensitive company data and applications. For example, it helps ensure that work contacts are not accidentally shared through personal messaging apps.

When a work profile is created on the device, the Miradore client operates as the profile owner of the work data and has only limited control outside of the work profile. This means that the Miradore client is not the device administrator and cannot, for example, install configuration profiles on the personal part of the device or wipe it. It can, however, lock the device, install Wi-Fi networks, collect device location data and enforce passcode policies like it normally would. The work profile can be removed from the device at any time by the LogMeIn Resolve MDM site administrator or the device user.

Set up a work profile on an Android device

Before you begin: The following requirements must be met to set up a work profile on a managed Android device:

Managed Google Play Enterprise must be configured for your LogMeIn Resolve MDM site.
The device must run Android 7 or above.
The device must have an active internet connection.
The device cannot be fully managed.

Tip: Certain older Android devices do not support managed profiles. If you run into errors and are not sure whether your device supports managed profiles, download Test DPC from Google Play and try creating a managed profile using the app.

Enroll an Android device in LogMeIn Resolve MDM with a work profile

You can create a work profile on your employees' devices while enrolling them in LogMeIn Resolve MDM. There are several steps that must be followed in LogMeIn Resolve MDM and on the device to be enrolled.

In LogMeIn Resolve MDM, navigate to Enrollment > Enroll device and select Android.
Select Work profile.
Enter the email address of the device owner in the Email field.
Optionally, select Send enrollment by Email or Send enrollment by SMS or both to send an email, text message, or both to the employee with the enrollment steps.
If you selected Send enrollment by SMS, choose the country code from the drop-down menu, then enter the rest of the phone number in the text box.
Select Next.
Result: The enrollment wizard displays the next steps in the enrollment process.
Follow the instructions given in Enrollment instructions for Android users to complete the enrollment process on the device.

Results: The work profile is created on the device and the Work container is available. The Miradore client is available both as a private and work application.

In LogMeIn Resolve MDM, the device's page is available from Management > Devices. The device is automatically tagged as Profile owner for easy identification.

What to do next: The private Miradore client application can be uninstalled from the device. This does not remove the work profile or the work version of the Miradore client application.

You can monitor the progress of the enrollment process either on the Management > Action log page or on the individual devices' Device page available under Management > Devices.

Enable work profile on legacy enrolled Android devices

You can enable a work profile on devices that are currently managed in device administrator mode.

Note: A work profile cannot be enabled on devices that are enrolled as fully managed or fully managed with work profile.

In LogMeIn Resolve MDM, navigate to Management > Devices.
Select the devices on which you want to enable the work profile by their checkboxes.
On the top of the page, select Managed Google Play > Create account/work profile.
Select Create in the Create account/work profile wizard, then select Close to exit the wizard.

Results: A work profile is created on the device.

Troubleshooting

Work profile option grayed out during enrollment

The Work profile option is grayed out in the enrollment wizard if managed Google Play Enterprise is not configured for the LogMeIn Resolve MDM site. To remedy this, configure managed Google Play Enterprise, then start the enrollment again.

Work profile creation fails with Unknown error during authentication

An Unknown error during authentication message pops up on the device if the Miradore client application was installed either from Google Play or through an APK file and enrollment credentials were entered, but managed Google Play Enterprise is not configured for the LogMeIn Resolve MDM site. To solve this issue, remove the Miradore client application from the device, configure managed Google Play Enterprise, then retry enrollment as described in Set up a work profile on an Android device.

Article last updated: 7 August, 2025