Android Enterprise offers several management modes mapped to device ownership and usage. Note that Google has shifted away from the old acronyms toward plainer names; I'll give both:
- BYOD → Work Profile (Profile Owner). For personal devices used for work. An OS-level work profile separates work apps and data from personal ones; the organization fully manages the work container but has no visibility or access to the personal profile.
- COBO → Fully Managed (Device Owner). "Corporate-Owned, Business-Only." For company-owned devices used exclusively for work, where the organization can enforce Android's full range of management policies, including device-level policies unavailable to work profiles.
- COPE → Fully Managed with Work Profile (Corporate-Owned, Personally-Enabled). Company-owned devices that also allow personal use. Importantly, the model changed: before Android 11, COPE was a work profile layered on a fully managed device giving admins near-complete control over both profiles; from Android 11, Google rebuilt COPE so the personal side is treated more like BYOD for privacy, with only specific device-wide policies retained. Full COPE generally requires Android 11+ and provisioning from a factory-reset state.
