Accessing Company Data on Personal Devices
In today’s digital age, it’s common for staff to use their personal devices for work. This guide will help you understand the two options you have for accessing company data on your personal devices: BYOD (Bring Your Own Device) enrolment and MAM (Mobile Application Management).
Option 1: BYOD Enrolment
BYOD enrolment allows you to register your personal device with the company’s IT department. Once registered, you can access company resources such as emails, files, and internal websites.
Pros and Cons
- Pros: Full access to company resources; automated policies help protect your device with security measures (PIN/Passcode and encryption enforcement).
- Cons: The company has some control over your device, which may raise privacy concerns.
Below is a list of items extracted from the Microsoft support article (https://learn.microsoft.com/en-us/mem/intune/user-help/what-info-can-your-company-see-when-you-enroll-your-device-in-intune) regarding items your employer can and cannot see.
Things your organization can never see
Your organization can't see:
- Calling and web browsing history
- Email and text messages
- Contacts
- Calendar
- Passwords
- Pictures, including what's in the photos app or camera roll
- Content of user created documents
Things your organization can always see
Your organization can always see:
- Device owner
- Device name
- Device serial number
- Device model, such as Google Pixel
- Device manufacturer, such as Microsoft
In addition to this, in the event of a lost or stolen device, your employer has the ability to remote wipe your device.
How to enrol your device in BYOD
When enabled, you will get prompted to secure your device by installing the 'Intune Company Portal app'. Please follow the on-screen instructions or watch the videos below to enrol your device.
Android
https://youtu.be/k0Q_sGLSx6o
IPhone/IPad
https://youtu.be/mJyv6YcHi7c
Option 2: Mobile Application Management (MAM)
MAM allows you to access company data through specific apps that are managed by the company, without enrolling your device. This means your device won’t be controlled by the company.
Pros and Cons
- Pros: Access to company data without giving up control of your device; less impact on your device’s performance.
- Cons: Limited to accessing company data through specific apps.
How to Use MAM
- Download the specified apps from your device’s app store.
- Log in to each app using your company credentials.
Approved Apps
Below is the current list of approved apps to access company data.
- Microsoft Edge
- Microsoft Excel
- Microsoft OneDrive
- Microsoft OneNote
- Microsoft Outlook
- Microsoft PowerPoint
- Microsoft SharePoint
- Microsoft Teams
- Microsoft To Do
- Microsoft Word