# Company-owned devices for work and personal use

<div id="bkmrk-setting-up-a-company">Setting up a company-owned device with a **work profile** enables the device for both work and personal use. On company-owned devices with work profiles:</div><div id="bkmrk-"></div>- Most app, data, and other management policies apply to the work profile only.
- The employee's personal profile remains private. However, enterprises can enforce certain device-wide policies and personal usage policies.
- Enterprises can use *Block scope* to enforce compliance actions on an entire device or only its work profile.
- Device disenrolling and device commands apply to an entire device.

<div id="bkmrk-to-set-up-a-company-">To set up a company-owned device with a work profile, use one of the following provisioning methods (ensure that the [enrollment token](https://enterprise.cerberusapp.com/docs/books/user-manual/page/enrollment-tokens "Enrollment tokens") has **Personal usage** set to **Allowed**):</div><div id="bkmrk--0"></div>#### QR code method

<table id="bkmrk-android-version-work" style="width: 161px;"><colgroup><col width="“25%”"></col><col width="“25%”"></col><col width="25%"></col><col width="25%"></col></colgroup><tbody><tr><td style="width: 161px;"><center>Android version</center></td></tr><tr><td style="width: 161px;"><center><small>8.0+</small></center></td></tr></tbody></table>

<div id="bkmrk-on-a-new-or-factory-">On a new or factory-reset device, the user (typically an IT admin) taps the screen six times in the same spot. This triggers the device to prompt the user to scan a QR code.</div>