The separation of private and business apps on Android devices with a work profile is done by assigning apps in the Cortado administration portal. Private apps can be downloaded by the user as usual from the Play Store of the private profile. Work apps that are to be used exclusively for business purposes, on the other hand, are assigned under Administration→ Apps (arrow in the image). These can be apps from the Google Play Store or your own (self-hosted) apps.
All apps assigned via the administration portal are automatically part of the work profile (left illus.). You can recognize the apps by the briefcase in the app icon (left illus.). In the work profile, business files cannot be moved into private apps (example in right illus.). Under Share, the user will only be offered apps that are part of the work profile. Thus, private and business data are kept apart from each other.
To ensure that no business data can flow into the private profile, keep the default setting (checkbox not activated) for the following policies:
- Allow installation of apps from unknown sources
- Allow searching work profile contacts in the personal contacts app
- Allow personal profile apps to open links from the work profile
- Allow personal profile calendar apps to access calendar from work profile
Note! We show you how to create and assign policies for Android devices in our help article Create policies for Android devices.