Work profile on corporate-owned devices (WPCO)
Information on how to set up a work profile on corporate devices that will also be used for personal activities.
With WPCO, administrators can set up a work profile on corporate devices to secure and separate work data from personal data. Organizations can retain the ownership of the devices and assign corporate policies to devices while maintaining employee privacy. Employees can securely use company-owned devices for personal activities without sacrificing privacy. Administrators can enforce selected policies that apply to the entire device (device wipe, block USB) and restrictions that apply to the personal profile (disallow certain apps), but personal apps, data, and usage are not accessible to organizations.
Supported WPCO policies
Work profile on corporate-owned devices (WPCO) supported policies are marked with the WPCO label in the MaaS360 Portal. Policies that are available for Profile Owner (PO) devices also apply to the work profile on corporate-owned devices (WPCO) devices. MaaS360 also supports a set of policies that administrators can apply to the personal profile on the work profile on corporate-owned devices (WPCO) devices.
Path | Policy | Description |
---|---|---|
|
Allow fingerprint on personal profile | If set to false, disables the fingerprint sensor on the lock screen. |
Allow IRIS Recognition on personal profile | If set to false, disables IRIS authentication on the lock screen. | |
Allow face recognition on personal profile | If set to false, disables face authentication on the lock screen. | |
Allow trust agents on personal profile | A trust agent is a service that notifies the system on whether the device is in a safe environment. For example: Google Smart Lock or Profiles Trust Provider. If set to false, the device ignores the trust agent state on secure keyguard screens. | |
|
Set maximum number of days a work profile can remain off | The maximum number of days the work profile can be turned off before personal apps are disabled on the device. Minimum possible value is 3 days. Enter 0 for no limitation. |
Allow screen capture on personal side | If set to false, disables the screen capture on personal device. | |
Allow camera on personal profile | If set to false, disables the use of the camera on the device. If set to true, allows the use of the camera on the personal profile, but the camera app must be allowed in the native app compliance settings. | |
Configure personal apps to be Blocked/Allowed | The list of apps that are blocked or allowed from the Google Play Store app on the personal
profile. Supports the following options:
|
|
Select wipe mode when user disables device management | Wipes all data or work profile data when the user disables device management. | |
Block personal apps when out of compliance | Blocks personal apps on devices that are out of compliance. |
Creating device enrollment configuration for work profile on corporate-owned devices (WPCO)
- MaaS360 for Android app version 7.30 or later
- Android OS version 11 or later
- New QR code or Zero-touch JSON file. Older configurations enroll devices in Device Owner (DO) mode.
- QR Code
- Zero-touch enrollment
- To enroll Android devices through Android zero-touch portal, see Configuring Zero-touch Enrollment.
- To enroll Samsung devices through Knox Mobile Enrollment portal, see Samsung Knox Mobile Enrollment (KME) program.
Tracking work profile on corporate-owned devices (WPCO) devices in the MaaS360 Portal

Advanced search
MaaS360 allows you to filter the work profile on corporate-owned devices (WPCO) devices and create a smart device group with the advanced search option.
- Go to .
- Use the following search criteria:
Hardware Inventory Container Type Equal To Work Profile on Company Owned - Click Search. The Search Results page is displayed.
- Click Create New Device Group. The Device Group Details window is displayed.
- Provide details about the new device group, including the name, description, and whether the group is public or private, and then click Save.
Supported work profile on corporate-owned devices (WPCO) actions
The device-level actions that are available for Profile Owner (PO) devices also apply to the work profile on corporate-owned devices (WPCO) devices. Maas360 also added granular options for the Wipe and Remove Work Profile actions that apply to the work profile on corporate-owned devices (WPCO) devices only. For more information on the work profile on corporate-owned devices (WPCO) actions, see Android device actions.