Device administrator

Phibster

Hi,

I have searched and can't find an explicit answer to this question.

I don't yet have a device but my use case is as follows:

Main profile for all personal apps etc (may segment this further in the future)

Secondary profile for use with work email. This requires the work IT to install a device administrator.

My questions are:

1) in graphene does this device administrator apply to only the work profile. (if they decide to lock or wipe it)?
2) can I have apps in profile 2 send notifications to profile 1?

Thank you in advance.

Dumdum

Phibster can I have apps in profile 2 send notifications to profile 1?

In profile 2, go to Settings > System > multiple users > toggle Send notifications to current user

boldsuck

Phibster 1) in graphene does this device administrator apply to only the work profile.

There is no such thing on GrapheneOS by default. Device-admin-apps.png

I would also never download software from the company to my private cell phone or laptop. Especially nothing with remote access.

(if they decide to lock or wipe it)

There are company cell phones and laptops for that. I always keep my private life and work separate.

Phibster

boldsuck

Thank you. I too have had this philosophy but thought graphene might have been able to restrict them to their own container. I currently have 3 phones and it is an absolute pain.

boldsuck

Phibster In general, what you have in mind is possible.

Owner profile for all personal apps. (I have all app stores in the owner profile, which then update the apps for all other profiles.)
Secondary profile with a device administrator app.

/u/anarsec has explained the user profiles well in his guide

Phibster

boldsuck thank you. I've ordered a device and will have a look around. I've always wanted to run graphene so worst case I end up with a more secure personal phone.