Check out Shelter. It will allow you to leverage the work profile feature for yourself.
this post was submitted on 26 Nov 2023
36 points (100.0% liked)
Android
27896 readers
314 users here now
DROID DOES
Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
Rules
1. All posts must be relevant to Android devices/operating system.
2. Posts cannot be illegal or NSFW material.
3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.
4. Non-whitelisted bots will be banned.
5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.
6. Memes are not allowed to be posts, but are allowed in the comments.
7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.
8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.
Community Resources:
We are Android girls*,
In our Lemmy.world.
The back is plastic,
It's fantastic.
*Well, not just girls: people of all gender identities are welcomed here.
Our Partner Communities:
founded 1 year ago
MODERATORS
Thanks! I installed this and it seems like it will do almost exactly what I want. I think I'd still prefer to have a calendar app where I can see both work and personal, but I can leave that as a project for another day.
You should be able to get an ics url from the calendar sharing settings and import it into your current calendar app without needing to add the account. You won't be able to change things from your personal account but you should be able to see events.
Very similar app also available called Island. Basically the same function, allows you to make a locally administered work profile instance, and then you can copy items over from the main instance and keep them up to date passively from the play store.
And to take it a step further, Insular is a fork of Island that is completely FLOSS
Full-time Workspace admin here. My company currently doesn't manage devices or use work profiles either. I can't see anything on a user's device, the most I can do is block the device from syncing or wipe the data owned by the work account (but not touch your personal apps or files). The admin documentation is actually public at support.google.com/a/.
If data is needed it's going to be on request from the security, compliance, or legal teams. Your particular use case is pretty low risk. By default the Gmail app caches the last 30 days of email, but those are stored within your work account on the cloud anyway. So I could get what they need regardless of your device. There would be more risk if you were downloading local copies of Google Docs or something.
To lower the risk further you could make a totally separate user on Android (with its own PIN, homescreen, apps, etc). The OS should partition that off and encrypt it so it can't even interact with your personal data. However you'd have to switch logins if you want to access personal stuff. I haven't tried the other sandboxing software mentioned here so I can't vouch for it, but that could be a lot more convenient.
Of course for zero risk of your phone being confiscated in a litigation sweep, it's best to just have a totally separate work device. That's what I do.
Thank you! I really appreciate getting concrete info on what can / can't be seen by IT admins.
I'm against adding work stuff to personal phones, but if you have to, you have to. So I try and set it up as a separate/logical phone within a phone.
For Pixels, I always install GrapheneOS regardless, "the private and secure mobile operating system with Android app compatibility. Developed as a non-profit open source project." https://grapheneos.org
Then for work, I'd use a separate profile with only the needed apps for separation and, increased security and privacy: https://grapheneos.org/features#improved-user-profiles
I don't know about your scenario but I recently started using Insular to manage separating my work apps on my phone and that's been great
I use the Outlook app for separating entities before I learned that work profiles were a thing and that my company has them turned on. Gives me different notifications I can control instead of all through Gmail, it's still sandboxed because O365 does the same containerization, and it also does calendar syncing.
My only complaints are it doesn't handle password changes very well (have to completely re add my profile when it's time), and it is Outlook focused so it misses some Gmail features. This also doesn't solve your Google Meet problem, but at least it's two out of the three.