Difference between app protection policy and profile configuration

Question

Hi all, I want to know why I should configure APP (App Protection Policy)? When? I try to argument... If we have a configuration profile where we have configurated the following settings:

Then... We need configure the APP too? Why? What can I get? Is not secured the work profile with configuration profile only? I don't understand, sorry. Regards,

Answer 1

@SergiEE, Thanks for posting in Q&A. In general, App Protection Policies (APP) and configuration profiles are both used to protect data in apps that access organization data. However, they serve different purposes. Configuration profiles are used to configure settings on a device, while APP is used to protect data within an app.

Configuration profiles can configure settings such as data sharing between work and personal profiles and screen capture. However, they do not provide the same level of protection as APP. APP provides additional security measures such as preventing data from being saved to the local storage of the device, restricting data movement to other apps that aren't protected by APP, and wiping company data when needed from apps without removing those apps from the device.

https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy#how-app-protection-policies-protect-app-data

In summary, while configuration profiles can configure device settings, APP is necessary to provide additional security measures to protect data within apps.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.