What's new for enterprise in Android 15
Stay organized with collections
Save and categorize content based on your preferences.
This page provides an overview of the enterprise APIs, features, and behavior
changes introduced in Android 15 (API level 35).
Enhanced employee and device protection
Android 15 enhances employee and device protection with features like theft
protection, phishing controls, and private space for personal profiles.
Android theft protection
- Protect sensitive business data from theft.
- Enhance your privacy and prevent unauthorized access to users' personal
data.
Private space for personal profile
- Private space is a new feature in Android 15 that lets users create a
separate area within their personal profile under an additional layer of
authentication, to shield specific personal apps while working in public
spaces.
- On managed devices:
NIAP compliance maintenance
Android 15 migrates existing backup service audit logging events from logcat to
security log with the formal definition of
SecurityLog.TAG_BACKUP_SERVICE_TOGGLED.
Stronger management of company-owned devices
Android 15 strengthens company-owned device management by simplifying eSIM
management, adding controls for Circle to Search on Android Work Profile, and
adding more customization options for corporate-owned devices.
Simplify eSIM management on managed devices
- Android 15 adds platform APIs to allow an IT Admin to remotely provision
eSIM profiles onto managed devices. This also includes new controls over the
eSIM profiles.
- We introduce the concept of a "Managed SIM"/"Managed Subscription",
supporting the following features:
- IT admins can download and delete the eSIM profiles programmatically.
- On company-owned devices, the IT admin can activate the eSIM silently
after download. Also, users can't delete the admin-downloaded managed
eSIM. IT admins can set
DISALLOW_CONFIG_MOBILE_NETWORKS user
restriction to disallow users from deleting the managed eSIM.
- Bring your own device (BYOD) users can choose to delete the SIM at any
time.
Controls for Circle to Search on Android Work Profile
- Admins can choose to block the Circle to Search feature on fully managed
devices or within an Android Work Profile.
- Users can search more seamlessly at work.
Additional customization for corporate-owned devices
- Extend battery life with customizable screen brightness and timeout
controls, which are included in Android 15 for corporate-owned, personally
enabled (COPE) devices. This feature already existed for fully managed
devices.
- Enforce the defaults for the personal profile on company-owned, personally
enabled (COPE) devices.
- IT admins can enforce the OEM-default dialer, messages, and browser apps
prior to set up, and prevent the end user from changing them using
DISALLOW_CONFIG_DEFAULT_APPS.
- Setting the defaults after setup must be combined with app allowlist
controls.
- IT admins can only make an app the default if it's already in the user's
personal profile.
Content and code samples on this page are subject to the licenses described in the Content License. Java and OpenJDK are trademarks or registered trademarks of Oracle and/or its affiliates.
Last updated 2025-08-26 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-26 UTC."],[],[],null,["This page provides an overview of the enterprise APIs, features, and behavior\nchanges introduced in Android 15 (API level 35).\n\nEnhanced employee and device protection\n\nAndroid 15 enhances employee and device protection with features like theft\nprotection, phishing controls, and private space for personal profiles.\n\nAndroid theft protection\n\n- Protect sensitive business data from theft.\n- Enhance your privacy and prevent unauthorized access to users' personal data.\n\nPrivate space for personal profile\n\n- [Private space](/about/versions/15/features#private-space) is a new feature in Android 15 that lets users create a separate area within their personal profile under an additional layer of authentication, to shield specific personal apps while working in public spaces.\n- On managed devices:\n - Administrators are able to block users from having a private space and remove an existing private space on the personal profile of a corporate owned device. See [`UserManager.DISALLOW_ADD_PRIVATE_PROFILE`](/reference/android/os/UserManager#DISALLOW_ADD_PRIVATE_PROFILE).\n - Existing personal app allowlists and blocklists also apply to the private space on devices managed by the [`Android Management API`](https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#PersonalApplicationPolicy). This feature will be available to [`custom DPCs`](/work/dpc/build-dpc) in the future.\n - Private space is not available on fully managed devices.\n - A new [`UserManager.USER_TYPE_PROFILE_PRIVATE`](/reference/android/os/UserManager#USER_TYPE_PROFILE_PRIVATE) is now available.\n\nNIAP compliance maintenance\n\nAndroid 15 migrates existing backup service audit logging events from logcat to\nsecurity log with the formal definition of\n[`SecurityLog.TAG_BACKUP_SERVICE_TOGGLED`](/reference/android/app/admin/SecurityLog#TAG_BACKUP_SERVICE_TOGGLED).\n\nStronger management of company-owned devices\n\nAndroid 15 strengthens company-owned device management by simplifying eSIM\nmanagement, adding controls for Circle to Search on Android Work Profile, and\nadding more customization options for corporate-owned devices.\n\nSimplify eSIM management on managed devices\n\n- Android 15 adds platform APIs to allow an IT Admin to remotely provision eSIM profiles onto managed devices. This also includes new controls over the eSIM profiles.\n- We introduce the concept of a \"Managed SIM\"/\"Managed Subscription\", supporting the following features:\n - IT admins can download and delete the eSIM profiles programmatically.\n - On company-owned devices, the IT admin can activate the eSIM silently after download. Also, users can't delete the admin-downloaded managed eSIM. IT admins can set [`DISALLOW_CONFIG_MOBILE_NETWORKS`](/reference/android/os/UserManager#DISALLOW_CONFIG_MOBILE_NETWORKS) user restriction to disallow users from deleting the managed eSIM.\n - Bring your own device (BYOD) users can choose to delete the SIM at any time.\n\nControls for Circle to Search on Android Work Profile\n\n- Admins can choose to block the Circle to Search feature on fully managed devices or within an Android Work Profile.\n- Users can search more seamlessly at work.\n\nAdditional customization for corporate-owned devices\n\n- Extend battery life with customizable screen brightness and timeout controls, which are included in Android 15 for corporate-owned, personally enabled (COPE) devices. This feature already existed for fully managed devices.\n- Enforce the defaults for the personal profile on company-owned, personally enabled (COPE) devices.\n - IT admins can enforce the OEM-default dialer, messages, and browser apps prior to set up, and prevent the end user from changing them using [`DISALLOW_CONFIG_DEFAULT_APPS`](/reference/android/os/UserManager#DISALLOW_CONFIG_DEFAULT_APPS).\n - Setting the defaults after setup must be combined with app allowlist controls.\n - IT admins can only make an app the default if it's already in the user's personal profile."]]
