{"id":2728,"date":"2021-07-12T10:56:57","date_gmt":"2021-07-12T10:56:57","guid":{"rendered":"https:\/\/cortadoblog1.wpengine.com\/corporate-owned-personally-enabled-android-11-with-setup-guide\/"},"modified":"2024-05-14T14:19:39","modified_gmt":"2024-05-14T14:19:39","slug":"corporate-owned-personally-enabled-android-11-with-setup-guide","status":"publish","type":"post","link":"https:\/\/blog.cortado.com\/en\/corporate-owned-personally-enabled-android-11-with-setup-guide\/","title":{"rendered":"Explainer: Android 11+ COPE Devices with Setup Guide"},"content":{"rendered":"\n

We take a look at the corporate owned, personally enabled deployment scenario (COPE) and how it changes with Android 11 +.<\/p>\n\n\n\n

\"Explainer:<\/figure>\n\n\n\n
<\/div>\n\n\n\n
\"Similar<\/figure>
\n

What Is COPE \u2013 Corporate Owned Personally Enabled?<\/h2>\n\n\n\n

COPE (corporate owned, personally enabled) typically describes company-owned smartphones and tablets which are configured for both business and personal use.<\/p>\n\n\n\n

Several synonyms for COPE only apply to specific Android versions: \u201cfully managed device with a work profile\u201d for Android 8 \u2013 10, or \u201cenhanced work profile\u201d \/ \u201cwork profile on a company owned device\u201d for Android 11 +.<\/p>\n\n\n\n

Similar to the BYOD deployment scenario, employees commonly have a separate work profile<\/a> where they access corporate apps and data.<\/p>\n\n\n\n

This secure and intuitive separation of business and personal use is enabled by a MDM solution<\/a> and the Android operating system. COPE therefore gives organizations and companies an easy way of protecting their mobile data in today\u2019s dynamic, digitalized workplace.<\/p>\n\n\n\n

The clear difference between BYOD and COPE is obviously device ownership. A COPE device is enrolled as a company device. This means you can configure settings that apply to the work profile and the device as a whole.

The user has access to the standard Google Play Store with a private Google account outside the work profile and can download and use apps privately, however the organization can wipe all data on the device at any time.<\/p>\n<\/div><\/div>\n\n\n\n

<\/div>\n\n\n\n

Major Changes to COPE Introduced to Android 11<\/h2>\n\n\n\n

With the release of Android 11 in 2020, user privacy was given much more focus. Google is expected to introduce more end user privacy protections in Android 12.<\/p>\n\n\n\n

The previous COPE deployment method, which is called \u201cfully managed device with a work profile\u201d, was deprecated in 2020. It is still available for devices running Android 8-10. A new enrollment method, called \u201cwork profile on a company-owned device\u201d (WPCOD), is available for Android 11 + devices.<\/p>\n\n\n\n

WPCOD guarantees greater privacy in the personal profile. Admins no longer have complete visibility over a user\u2019s private data and apps. More transparency is also built in. To name just one example, the user is notified when an admin enables location services.<\/p>\n\n\n\n

If complete visibility over both profiles is important for your use case, you need to upgrade to a fully managed device (COBO) setup for devices running Android 11 +.<\/p>\n\n\n\n

<\/div>\n\n\n\n

Advantages and Features<\/h2>\n\n\n\n

Here are some of the key features you can expect with COPE (Android 11 +)<\/p>\n\n\n\n

    \n
  • You can install mandatory apps in the work profile without user interaction.
    <\/li>\n\n\n\n
  • You can set different settings for inside and outside the work profile. E.g., you can disable the screen capture function within the work profile but allow it on the private profile.
    <\/li>\n\n\n\n
  • All company data, apps and company contact details are kept separate in the work profile.
    Personal apps on the device are not visible to the admin. The user may download apps from the standard Google Play Store on their separate profile. Admins can however blacklist specific apps.
    <\/li>\n\n\n\n
  • You can wipe the entire device.<\/li>\n<\/ul>\n\n\n\n

    In combination with Android zero-touch, you can give pre-configured COPE devices to workers for an out of the box feeling. End users only need to supply their credentials during the initial setup.<\/p>\n\n\n\n

    <\/div>\n\n\n\n

    How to Set Up COPE \u2013 Video Guide<\/h2>\n\n\n\n

    The steps required to enroll a COPE device vary according your MDM vendor. Here is the example setup process with Cortado MDM.<\/p>\n\n\n\n

    \n