Copying an answer from: https://crib.social/notice/ArxaIjecr1xLRPiJTU
There are 3 main kinds of profiles:
1) User (including Owner)
2) Private Space
3) Work profile
Each have their own apps, app data, profile data including a home directory, their own disk encryption keys and their own VPN configuration.
Private Spaces and work profiles are similar to a user but nested inside of another user for actually usage them.
Private Space is more similar to a user and is a user-facing feature and can have a custom lock method or reuse the one from the user.
Work profiles are created and managed by a profile management app. They're meant for bring your own device enterprise deployments. They can be used by end users via one of several local management apps for work profiles.
At the moment, a work profile and Private Space can only be created in Owner, and there can only be up to 1 of each. We want to support having a Private Space in each user and potentially multiple per user with a special UI for using the other ones in the future.