Enroll and manage Android hosts

noahtalerman commented 2 months ago

Minimally viable support for BYOD devices, such that there is a realistic narrative for attesting that these devices meet some baseline security posture before they are used to access company resources.

Luke: We can trim this to a L (instead of XL) if we’re only doing enrollment baseline. Android is a flavor of Linux, we already support Linux enrollment.

Mike: I think the reason customers want it is just to maintain parity with whatever they are using today for Android. That's the parity thing, the mission critical checkbox. This could be Intune, so what does Intune do for Android?

Goal

User story
As a Client Platform Engineer,
I want to enroll and manage my Android hosts
so that I can enforce settings to ensure these hosts meet compliance needs.

Context

Product designer: @noahtalerman

Changes

Product

[ ] UI changes: TODO
[ ] CLI usage changes: TODO
[ ] REST API changes: TODO
[ ] Fleet's agent (fleetd) changes: TODO
[ ] Permissions changes: TODO
[ ] Outdated documentation changes: TODO
[ ] Changes to paid features or tiers: TODO

Engineering

[ ] Database schema migrations: TODO
[ ] Load testing: TODO

ℹ️ Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

QA

Risk assessment

Requires load testing: TODO
Risk level: Low / High TODO
Risk description: TODO

Manual testing steps

Step 1
Step 2
Step 3

Testing notes

Confirmation

[ ] Engineer (@____): Added comment to user story confirming successful completion of QA.
[ ] QA (@____): Added comment to user story confirming successful completion of QA.

bolaussen commented 3 weeks ago

Just want to give a +1 on this feature request! Ty!

dherder commented 2 weeks ago

@noahtalerman enrollments should support Work Profile or Profile Owner mode. See https://www.ibm.com/docs/en/maas360?topic=modes-work-profile-profile-owner-po-mode

noahtalerman commented 2 weeks ago

enrollments should support Work Profile or Profile Owner mode. See https://www.ibm.com/docs/en/maas360?topic=modes-work-profile-profile-owner-po-mode

Thanks @dherder! I'm curious, who did we get this info from? A customer? If so which one?

fleetdm / fleet