Android Enterprise
A set of APIs and other tools provided by Google for developers to buildmanagement solutions for Android devices.
bring your own device (BYOD)
A personally owned device that an employee also uses for work. Work profiles,which separate work apps from personal apps, are the recommended deploymentmethod for BYOD devices. For more information, see Work profile foremployee-owned devices.
company-owned device
Formerly known as corp-liable device
A device owned and fully managed by an employee's organization. Company-owneddevices can be set up exclusively for work use (fullymanaged), or to allow both work and personal use(work profile for mixed-use company-owned devices).For more information, see Company-owned devices for knowledgeworkers.
corporate-owned, personally enabled (COPE)
Deprecated. See work profile for mixed-use company-owned devices.
corp-liable device
Deprecated. See company-owned device.
corporate-owned, single use (COSU)
Deprecated. See dedicated device.
dedicated device
Formerly known as corporate-owned, single use (COSU)
A subset of company-owned devices that are locked down to a limited set of appsto serve a dedicated purpose, such as a check-in kiosk or digital signage. Formore information, seeCompany-owned devices for dedicated use.
device account
A term used in the Google Play EMM API developer documentation for the accounton a dedicated device. Deviceaccountsare not associated with individual users.
device admin
A mode of operation that supports legacy deployments of pre 5.0 Androiddevices, and allows the EMM's DPC limited control of a device. Partner supportfor device admin is no longer provided. For more details, see Device admindeprecation.
device owner (DO)
Compare to profile owner
The DPC installed on fully managed and dedicated devices is referred to as thedevice owner.
device policy controller (DPC)
An app that controls local device policies and system applications on devices.
device provisioning
The process of setting up management on a device.
enterprise mobility management (EMM)
An enterprise mobility management solution provider. EMMs provide a combinationof MDM and MAM features for organizations to manage their mobile devices.
EMM console
An application created by an EMM for IT admins to manage mobile devices andapps. EMM partners are responsible for maintaining and deploying an EMM console.For more information, see Integrate Android into your EMMsolution.
EMM partner
An EMM that has followed the steps to release an Android EMMsolution and has passed product review.
EMM token
A token used to bind an EMM's solution to an organization's existing managedGoogle domain. For details, see managed Google domain enrollment.
enterprise service account (ESA)
An account used to manage Play EMM API resources. For details, see Serviceaccounts.
fully managed device
A device that is entirely managed by the user's organization, intended forcompany-owned devices that are used exclusively for work purposes. For moreinformation, see Company-owned devices for knowledgeworkers.
fully managed device with a work profile
A fully managed device that is also provisionedwith a work profile, intended for company-owned devices thatare used for both work and personal purposes.This management mode was deprecated in Android 11 and replaced withwork profile for mixed-use company-owned devices.
Google Accounts enterprise
Compare to managed Google Play Accounts enterprise
A type of enterprise binding that is linked to an existing managed Googledomain. With this type of enterprise binding, end users access managed GooglePlay with their existing managed Google Accounts. Formore information, seeOrganization onboarding.
Google Admin console
Google-provided console that an IT admin uses to generate an EMM token and tomanage user accounts associated with the domain.
Google Payments
In Android, the system used to process payments for apps. IT admins use GooglePayments to purchase appsin bulk, and users use Google Payments to purchase apps using in-app billing.
Google Workspace account
Formerly known as Google Apps account
An account in a regular, organization-managed Google Workspace domain that isclaimed and managed in the Google Admin console.
identity provisioning
The process of setting up users' managed accounts on devices and synchronizinguser information across databases.
mobile application management (MAM)
A set of features for managing mobile apps in an enterprise environment.
managed configurations
Enables IT admins to remotely configure apps in situations where the appdeveloper provides a managed configuration schema.
managed Google Account
A Google Account that's managed by a managed Google domain.
managed Google domain
A domain managed by an Android Enterprise solution. This is different from aGoogle Workspace domain, which is a regular, organization-managed Google domainthat's claimed and managed in the Google Admin console.
managed Google domain sign-up
The initial process an organization goes through to claim a managedGoogle domain, which you then bind to your Android Enterprise solution. Fordetails, see Managed Google domain sign-up.
managed Google Play
Formerly known as Google Play for Work
Content marketplace for Android apps. Admins use managed Google Play to manageapps. For more about managed Google Play, see the managed Google Play HelpCenter.
managed Google Play Account
Formerly known as Android for Work Account
An account that gives a user access to managed Google Play and apps approvedfor them by their IT admin.
managed Google Play Accounts enterprise
Compare to Google Accounts enterprise
A type of enterprise binding that isn't linked to an existing managed Googledomain. With this type of enterprise binding, end users access managed GooglePlay with managed Google Play Accounts, which are provisioned for them by theirorganization's EMM provider. For more information, see Organizationonboarding.
managed profile
See work profile
The term managed profile is used only in Android Open Source Projectdocumentation and code, where it refers to the generic functionality of amanaged corporate profile associated with the primary user account on anAndroid device.
mobile device management (MDM)
A set of features for managing device policies within an organization.
OAuth 2.0
Open standard for authorization. You can use OAuth 2.0 with a serviceaccount to call Google APIs onbehalf of an application instead of using credentials that belong to an enduser.
personal profile
On devices with a work profile, the area of the device outside the work profile.
personal space
Deprecated. See personal profile.
private app
App visible only to selected users of a managed Google domain. For details, seePublic, private, and self-hostedapps.
product
In the context of the Google Play EMM API, usually refers to a supported app inthe Google Play store or managed Google Play store.
profile owner (PO)
Compare to device owner
For devices with work profiles, the DPC installed in the work profile isreferred to as the profile owner.
secondary user
On some Android devices, you can set up a secondary user account that has itsown profiles. Adding a secondary user is not the same as adding another profileto a device's primary user.
Security Assertion Markup Language (SAML)
An identity-management protocol used in some identity provisioningscenarios.
solution set
A set of management features organized by use case. For more information, seerelease a solution.
work-managed device
Deprecated. See fully manageddevice.
work profile
A self-contained profile on an Android device that isolates work apps and datafrom personal apps and data. For more details about work profiles, see What isa work profile? in theHelp Center.
work profile for mixed-use company-owned devices
A work profile that also allows the organization to set device-wide policies andrestrictions that apply to the device's personal profile. As with a work profilefor BYOD devices, the organization has no visibility into the personal profile,protecting end-user privacy.
zero-touch enrollment
A method of assigning provisioning details for fully managed and dedicateddevices. For more information, see Android zero-touchenrollment.
