Shared AFW device

[hollowmancr]

So we usually setup AFW devices for our staff for their own use. Now there is a scenario where we have 2 members of a team with rotating shifts that fill 1 role. We would need to configure the same phone for both users, but we don't want their Microsoft account/apps to get mixed together or exposed to the other. Is there any configuration to do so?

[Alex_Muc]

A mutli-user setup is not very simple and the options may differ greatly depending on the UEM manufacturer.
Work Managed is a basic requirement. You cannot use a Work Profile.

I am aware of two technical approaches that could cover such scenarios.
In both cases, the app from the UEM manufacturer locks the device and requires a user login to continue. If no user is logged in, a login screen for the user credentials is forced. The device is usually configured for a staging user.

"Native Android Check-In Check-Out"

With a native approach, a secondary user is set up on the device when logging in. The logged-in users therefore have a very native experience and the user data is very well separated from other users.
However, I have no experience of whether the user is deleted again when they log out. If so, users may be busy setting up the apps for every shift.

Multi-users are an optional feature for OEMs. Samsung, for example, has only implemented multiple users on tablets.

Technical information about Multi-Users:
https://developer.android.com/work/dpc/dedicated-devices/multiple-users

"Kiosk App"

Some UEM manufacturers have a kiosk application that can be used as an app launcher.
Ideally, the app then has multi-user functionality.
In this case, however, users do not have a native interface. It is also technically challenging for the manufacturer to ensure that all personal data is deleted when the user logs out. (Calls, messages, accounts, local files, etc.)

I saw on your profile that you use Intune. Maybe someone here has experience of what Microsoft's solution looks like here. 😀