Enrolling an Android Device in Intune
Before you begin
-
Install the Intune Company Portal app from Google Play. The Company Portal app is used to enroll and manage your device, install work apps, and get IT support.
- Verify your Android device is running Android version 10.0 or above. For help determining the current Android version, review this article from Google.
What is an Android Work Profile
An Android Work Profile can be set up on an Android device to separate work apps and data from personal apps and data. With a Work Profile you can securely and privately use the same device for work and personal purposes—your organization manages your work apps and data while your personal apps, data, and usage remain private.
What data is visible to my organization?
Your organization can NOT see your personal information when you enroll a device in Microsoft Intune. When you add a Work Profile to your personal device, some details about your device are visible to your organization:
Note: Apps and data in your personal profile aren't visible to your organization.
Enroll an Android device
Make sure you're signed in to the primary user account on your Android device. Work profile enrollment isn't supported on secondary user accounts.
- Open the Intune Company Portal app and sign in with your work or school account.
- On the Company Access Setup screen, review the tasks required to enroll your device. Then tap BEGIN.

- On the privacy information screen, review the list of items that your organization can and can't see on your device. Then tap CONTINUE.

- Review the Google terms for creating a work profile. Accept the terms to continue. The appearance of this screen varies based on OS version.

- If you are using a Samsung device, you will be prompted to review the Samsung Knox privacy policy. Select Agree to continue. This screen only appears if you're using a Samsung device.

- Wait a few minutes while your work profile is set up. Then select Next.

- On the Company Access Setup screen, confirm that you created the profile. Then tap CONTINUE to proceed to the next enrollment task.

- Wait while the app registers your device. When prompted to, sign in with your work account.
- On the Company Access Setup screen, confirm that the work profile is active. Then tap CONTINUE to proceed to the next enrollment task.

- In the Company Portal app, review the list of settings your organization requires. Update the settings on your device if necessary. Tap RESOLVE to open the setting on your device. After you're done updating settings, tap CONFIRM DEVICE SETTINGS.

- When setup and enrollment are complete, you're sent back to the setup list, where you should see a green checkmark next to each enrollment task. Tap DONE.

- Optionally, when prompted to view suggested work apps in Google Play Store, tap OPEN. If you're not ready to install apps, you can do it later by going to the Play Store app in your work profile.

You can also access available apps from the Company Portal menu > Get Apps.

How to use Company Portal
Once your device has fully enrolled, go to the app drawer and you should now see a 'Work' tab:

In your work profile you will have separate apps and a separate Play Store, where you can download apps approved for use with your Liberty Resources account. Work apps are designated by the briefcase icon in the bottom right corner of the app icon.

Microsoft Edge will be installed automatically, as it is required to login to some apps, but other apps can be found in the store and installed if desired.
You are also able to disable any work notifications outside of work hours by swiping down on your phone and look for the briefcase icon. Click it to turn the work profile off:

Removing Company Portal
If you no longer want to access your work apps on your personal device, you can remove the work profile at any time and add it back at a later date if you change your mind.
- Open Device Settings
- On the personal Android device, open the Settings app.
- Navigate to Accounts / Users & Accounts
- This step varies with each Android device. Look for:
-
Accounts or Users & Accounts
- On some devices, this may be labeled Passwords & Accounts or Passwords, Passkeys & Accounts
- Locate the Work Profile Account
- Find the Work account associated with your organization (typically shows your work email).
- Remove the Work Profile Account
- Tap the work account (e.g., your Liberty Resources email address).
- Select Remove Account.
- Confirm when prompted.
- Your device may need to be rebooted for the
Note: Removing this account will delete all work apps, data, and the Work Profile itself, but personal apps and data remain untouched.
Additional information
- If you had Microsoft 365 apps (i.e., Outlook, Teams, etc.) installed prior to registering your phone in Intune you will no longer be able to access Liberty accounts through these apps. You can either uninstall these apps from your personal profile or if you use them with other accounts ensure you remove your Liberty account details.
- Attempting to access Liberty accounts via apps in your personal profile will result in the pop up asking you to download Company Portal. Only the applications in the work profile are allowed to access Liberty accounts.
- Also, if you had your email set up in your native mail client you should now remove the account from there and access your email through the Outlook mobile app in the work profile. This app is available for installation in the play store under the work profile and includes the KnowBe4 Phish Alert Button, where suspicious emails can be reported to IT for review.