Android Device Management Overview

Updated on 5/5/2026 • 3 Minutes to read

MobiHeal provides a comprehensive suite of tools to manage Android devices across your organization — from the moment a device is enrolled to the day it is decommissioned. Whether you are managing a fleet of corporate-owned fully managed devices, BYOD work profile devices, or dedicated kiosk terminals, every aspect of the Android device lifecycle is handled from a single centralized console.

What You Can Manage on Android

MobiHeal's Android management capabilities are organized into three core areas — Enrollment, Policy Management, and App Management. Together, these modules give IT administrators complete control over every Android device in the fleet.

Enrollment

Before a device can be managed, it must be enrolled into MobiHeal. Android supports multiple enrollment methods — QR Code for in-person provisioning, Zero-Touch for large-scale automatic deployment, and Email-based enrollment for remote workers and BYOD scenarios. Each method applies a pre-configured policy to the device at the moment of enrollment.

Learn about all Android enrollment methods →  /help-center/android-enrollment-overview

Policy Management

A policy is a collection of rules that governs how an Android device behaves — covering security settings, network controls, app restrictions, hardware controls, and kiosk configurations. Every managed Android device is assigned a policy, and that policy enforces your organization's standards automatically in the background. Policies can be created, updated, and pushed to devices at any time without physical access to the hardware.

 Learn about Android Policy Management →  /help-center/android-policy-overview

App Management

MobiHeal's App Management module lets you build a catalog of approved Android applications — from public Google Play apps and private enterprise APKs to web app shortcuts — and deploy them silently to your fleet. You can pre-configure app permissions and managed configurations before apps reach the user, and control exactly when and how updates are applied.

Learn about Android App Management →  /help-center/android-app-management-overview

How Android Device Management Works

Managing an Android device in MobiHeal follows a simple three-stage flow:

    • Enroll — The device is provisioned using a QR code, zero-touch, or email invitation. A policy is applied automatically at enrollment.
    • Enforce — The assigned policy continuously enforces security rules, network restrictions, app controls, and hardware settings on the device without any user action.
    • Manage — Administrators can update policies, push apps, distribute content, track location, send remote commands, and troubleshoot devices from the Managed Devices module at any time.

Android Management Modes

Android Management Modes

    • Device Owner (Fully Managed) — The organization has complete control over the entire device. Used for corporate-owned hardware where personal use is not permitted. All apps, settings, and behaviors are managed by MobiHeal.
    • Profile Owner (Work Profile / BYOD) — A separate managed work profile is created alongside the employee's personal profile. MobiHeal manages only the work side — the organization cannot see or control personal data, apps, or activity.
The management mode is selected at enrollment time and determines which policy features are available for that device.