Cross-profile management

With Android crossprofile restriction policy, organizations can protect and control data sharing from the work profile to personal profile in the same device.

Crossprofile restrictions are applicable to devices with personal and work profile; example, BYOD, COPE.

Note: With MCM3.0, users can configure crossprofile restrictions by creating a custom policy and attaching it to a policy group through WebUI.

Sample code for crossprofile restriction policy

The following is the sample code for a custom policy with crossprofile restrictions
{
  "showWorkContactsInPersonalProfile": enum (ShowWorkContactsInPersonalProfile),
  "crossProfileCopyPaste": enum (CrossProfileCopyPaste),
  "crossProfileDataSharing": enum (CrossProfileDataSharing)
}

Customizable parameters

showWorkContactsInPersonalProfile
Configures if the contacts stored in the work profile can be shown in personal profile contact searches and incoming calls.
SHOW_WORK_CONTACTS_IN_PERSONAL_PROFILE_UNSPECIFIED Unspecified. Defaults to SHOW_WORK_CONTACTS_IN_PERSONAL_PROFILE_ALLOWED.
SHOW_WORK_CONTACTS_IN_PERSONAL_PROFILE_DISALLOWED Prevents work profile contacts from appearing in personal profile contact searches and incoming calls
SHOW_WORK_CONTACTS_IN_PERSONAL_PROFILE_ALLOWED Default. Allows work profile contacts to appear in personal profile contact searches and incoming calls
crossProfileCopyPaste

Configures if the text copied from one profile (personal or work) can be pasted in the other profile.

CROSS_PROFILE_COPY_PASTE_UNSPECIFIED Unspecified. Defaults to COPY_FROM_WORK_TO_PERSONAL_DISALLOWED
COPY_FROM_WORK_TO_PERSONAL_DISALLOWED Default. Prevents users from pasting into the personal profile text copied from the work profile. Text copied from the personal profile can be pasted into the work profile, and text copied from the work profile can be pasted into the work profile.
CROSS_PROFILE_COPY_PASTE_ALLOWED Text copied in either profile can be pasted in the other profile.
crossProfileDataSharing
Whether data from one profile (personal or work) can be shared with apps in the other profile. Specifically controls simple data sharing via intents. Management of other cross-profile communication channels, such as contact search, copy/paste, or connected work & personal apps, are configured separately.
Enums
CROSS_PROFILE_DATA_SHARING_UNSPECIFIED Unspecified. Defaults to DATA_SHARING_FROM_WORK_TO_PERSONAL_DISALLOWED.
CROSS_PROFILE_DATA_SHARING_DISALLOWED Prevents data from being shared from both the personal profile to the work profile and the work profile to the personal profile.
DATA_SHARING_FROM_WORK_TO_PERSONAL_DISALLOWED Default. Prevents users from sharing data from the work profile to apps in the personal profile. Personal data can be shared with work apps.
CROSS_PROFILE_DATA_SHARING_ALLOWED Data from either profile can be shared with the other profile.