Reference:
https://techzone.vmware.com/blog/how-enable-intelligent-hub-and-workspace-one-apps-without-full-management
MAM mode is an option for cases like BYOD. On one hand, this eases employee‘s privacy concerns. On the other hand, it provides the same security protection on app level so enterprise can safely deploy apps similar to MDM mode.
Things like over the air app configuration, password enforcement, device compromised protection and remote wipe are available on MAM mode as well.
It takes only two steps to get MAM mode enabled.
An MAM mode device is marked as registered in the console
It is also possible to get an existing MAM device step-up to MDM mode. For instance, when user click to install an app which is only available to MDM device, HUB agent will initiate an MDM step-up. Of course user can decline if he wants to stay in MAM mode.
Can we do step-down? Yes, user can get his MDM managed device un-enrolled and re-enrolled into MAM mode.
Here are two demo videos. One is MAM enrollment and the other one is MAM app data wiping.
You can see that both flows are very similar to that of MDM.
User uses the same Hub agent to get his device registered. Productivity apps are installed from application catalog manually. Automatic app push is only available on MDM mode.
Administrator can initiate an enterprise wipe to wipe out app data. The wiped app will be left behind on the device as app cannot be uninstalled without MDM control. The app is left behind without any data after a wipe.
Opmerkingen