More than one Admin User

DeletedUser284

Is it possible to have more than one admin user on a single device?
Background: to install company SW a work profile needs to be created which only works with Google services. Only an admin can create a work profile. But i do not want to enable Google services on my first admin user.

Overlay1404

DeletedUser284

Why can't you just create the "work" profile. Then install Google services on the work profile?

ErnestThornhill

DeletedUser284 No. The owner profile is special and is used to store sensitive system-wide operating system data. This is why the owner profile needs to be logged in after a reboot before other user profiles can be used.

https://grapheneos.org/faq#encryption

Carlos-Anso

DeletedUser284
As far as I know work profiles can only be added to the owner user. Android 14 did introduce code to make it possible to have other users set as admin but Im not aware of any project that has tested it and I am not sure that it would be possible to run a work profile nested within an admin secondary user.

Its likely that you only need the Play apps installed within the work profile that Microsoft Portal will create rather than in the owner user itself.

Here is a thread where someone describes how they got it working.
https://discuss.grapheneos.org/d/1841-ms-intune-company-portal-with-work-profile-not-working/

[deleted]

its not possible.

DeletedUser284

Overlay1404 because the work profile is not a user. It is created within a user. And this user must be Admin.

DeletedUser284

ErnestThornhill you are mixing up work profile and user account.

DeletedUser284

DeletedUser284 When a work profike is created then you have some apps appearing twice in the apps list.

ErnestThornhill

DeletedUser284 I'm not. I was specifying why you cannot have more than one Owner profile on a device.

DeletedUser284

DeletedUser284 that's how Microsoft Company Portal works. The same user sees in additiin to its normak apps also company apps.
MS Company portal needs Google Service and an Admin user to work.
I do not want to install Google services in my main User which is the only admin.

nunyo

Have you tried Shelter?

ErnestThornhill

nunyo Scroll up. They stated why they can't use something like that.

nunyo

ErnestThornhill why can't he can install Google Services in the Work profile Shelter creates? That profile is essentially fire walled from the "personal" profile, no?

nunyo

To clarify, install Shelter in the owner account. What's the risk to the "personal" profile, here?

EDIT: the way I understand it, Shelter creates a sandbox in the owner account. You can install Google Services in the Shelter "Work" profile that remains sandboxed unlike a normal google work profile. If this isn't how it works, I'm screwed lol.