3 ms·

What exactly does Google do for BYOD? I use my personal phone for work, but I've simply added my work GSuite account as one of the accounts on the phone, in add

What exactly does Google do for BYOD? I use my personal phone for work, but I've simply added my work GSuite account as one of the accounts on the phone, in addition to my personal one. I can access work email, use work's 2FA, but at no point in time (as far as I know) does work have the ability to, say, delete files from the device or from my personal backup accounts. Are Google employees allowing something far more intrusive, or am I underestimating my exposure when I have multiple Google accounts configured on my Android phone?

wil421 7y ago
It sounds your device isn’t managed by an MDM. Did you accept a new cert from work and a bunch of scary messages when adding the account? If you accept the MDM you will give root accesses to your company’s MDM system. Basically giving them as much access as Find My iPhone or whatever the android equivalent. Location tracking, remote wiping the phone, access to texts and calls...everything. Yes they could access your texts/calls/emails everything.
asdfasgasdgasdg 7y ago
If your employer wants, they can predicate the use of a work profile and your corporate assets on the installation of a device policy. This policy can give them extensive capabilities on your device, including wiping the device. If you installed a device policy, you may be underestimating your employer's capabilities. Otherwise, you're fine.
- izacus 7y ago
  Work profile can't wipe the whole device. Setting up the MDM profile as primary profile does allow that - but it's very clearly communicated.
  - asdfasgasdgasdg 7y ago
    But work profile can require the installation of a device policy, right? I know I have a device policy installed, and I can't think why I would have done that if setting up the work profile didn't require it. Although as it happens the policy I have on my device only allows wiping the work profile, as you say.
- TallGuyShort 7y ago
  Ah okay, thank you. Wasn't familiar with MDM policies and such. Haven't installed one. Would rather carry a second phone when I'm on call...

wil421 7y ago

It sounds your device isn’t managed by an MDM. Did you accept a new cert from work and a bunch of scary messages when adding the account? If you accept the MDM you will give root accesses to your company’s MDM system. Basically giving them as much access as Find My iPhone or whatever the android equivalent. Location tracking, remote wiping the phone, access to texts and calls...everything. Yes they could access your texts/calls/emails everything.

asdfasgasdgasdg 7y ago

If your employer wants, they can predicate the use of a work profile and your corporate assets on the installation of a device policy. This policy can give them extensive capabilities on your device, including wiping the device. If you installed a device policy, you may be underestimating your employer's capabilities. Otherwise, you're fine.

izacus 7y ago
Work profile can't wipe the whole device. Setting up the MDM profile as primary profile does allow that - but it's very clearly communicated.
- asdfasgasdgasdg 7y ago
  But work profile can require the installation of a device policy, right? I know I have a device policy installed, and I can't think why I would have done that if setting up the work profile didn't require it. Although as it happens the policy I have on my device only allows wiping the work profile, as you say.
TallGuyShort 7y ago
Ah okay, thank you. Wasn't familiar with MDM policies and such. Haven't installed one. Would rather carry a second phone when I'm on call...