Merge pull request #7503 from MicrosoftDocs/lenewsad-patch-1

Update what-info-can-your-company-see-when-you-enroll-your-device-in-…

Author: Angela Fleischmann

memdocs/intune/user-help/what-info-can-your-company-see-when-you-enroll-your-device-in-intune.md

@@ -2,12 +2,12 @@
 # required metadata
 
 title: What info can your company see when you enroll your device?
-description: Explains what IT can and can't see on your managed device.
+description: Describes the information on your enrolled device that's visible to your organization.  
 keywords:
 author: lenewsad
 ms.author: lanewsad
 manager: dougeby
-ms.date: 09/28/2021
+ms.date: 05/31/2022
 ms.topic: end-user-help
 ms.prod:
 ms.service: microsoft-intune
@@ -32,10 +32,16 @@ ms.collection:
 
 # What information can my organization see when I enroll my device?
 
-Your organization cannot see your personal information when you enroll a device with Microsoft Intune. When you enroll a device, you give your organization permission to view certain pieces of information on your device, such as device model and serial number. Your organization uses this information to help protect the corporate data on the device.  
+Your organization can't see your personal information when you enroll a device in Microsoft Intune. Enrolling your device makes certain information, such as device model and serial number, visible to IT administrators and support people with administrator access. This article describes everything your organization can and can't access on an enrolled device, and explains why certain data is made visible. 
 
+We use the following terms in this article: 
 
-**What your organization does not see:**
+* Support person: This is the person or department at your organization that you're supposed to contact if you're having problems with your device. They provide technical support for device setup, enrollment, and access.  
+* IT administrator: *IT admin* for short, this person or team of people configure the Microsoft Intune device management and enrollment settings for your organization. Some IT admins also provide technical support.    
+
+## Things your organization can never see
+
+Your organization can't see:  
 
 - Calling and web browsing history
 - Email and text messages
@@ -44,33 +50,69 @@ Your organization cannot see your personal information when you enroll a device
 - Passwords
 - Pictures, including what's in the photos app or camera roll
 - Files
-- Additionally, for corporate-owned Android devices with a work profile:
+- Additionally, on corporate-owned Android devices with a work profile:
   - Apps and data in your personal profile
   - Phone number 
 
-**What your organization can always see:**
+## Things your organization can always see  
+
+Your organization can always see:  
 
-- Device model, like Google Pixel
-- Device manufacturer, like Microsoft
-- Operating system and version, like iOS 12.0.1
-- App inventory and app names, like Microsoft Word. On personal devices, your organization can only see your managed app inventory. For corporate devices, your organization can see all of your app inventory. For corporate-owned Android devices with a work profile, your organization can only see the app inventory in your work profile.
 - Device owner
 - Device name
 - Device serial number
-- IMEI
+- Device model, such as *Google Pixel*
+- Device manufacturer, such as *Microsoft*
+- Operating system and version, such as *iOS 12.0.1*
+- Device IMEI
+- App inventory and app names, such as *Microsoft Word*   
+  - On personal devices, your organization can only see your managed app inventory, which includes work and school apps. 
+  - On corporate-owned devices, your organization can see all apps installed on the device. 
+  - On corporate-owned devices with a work profile, which is limited to Android devices, your organization can only see the apps installed in your work profile.
 
  > [!NOTE]
  > Organizations cannot see all app inventory on Android Enterprise fully managed devices, corporate-owned work profile devices, and dedicated devices.  
  
- > [!NOTE]
- > An app is considered **managed app** when installed in one of the following ways:
- > 1. A user installs it from Company Portal app after it is published as **available** by an Intune admin.
- > 2. The app is published as **required** by an Intune admin and is installed on the device.
+### What is a managed app? 
+An app is considered a **managed app** when it's installed in one of the following ways:  
+ * You install it from the Company Portal app after your organization makes it available to you. 
+ * Your organization requires you to have a certain app for work and school and automatically installs it on the device upon enrollment.  
+
+## Things your organization might see  
+
+Your organization can see and access certain aspects of your device when assisting with or troubleshooting device setup. This section describes the type of information  available.       
+
+### Phone number  
+If you're using a corporate-owned device (excluding corporate-owned devices with a work profile), your organization can see your full phone number. If you're using a personal device, they can see the last four digits of your phone number.  
+
+ > [!TIP]
+ > You can view the ownership type for your device on the Intune Company Portal > **Device Details** page.  
+
+### Device storage space   
+If you have trouble installing a required app, your support person may look at your storage size to find out if low space is the cause.   
+
+### Location 
+
+* Corporate-owned device: Your organization can view the location of a lost device. 
+* Personal device: Your organization can't view the location of a personal device.   
+
+Your organization can put a missing, corporate-owned iPhone or iPad into *managed lost mode*, which lets them request the location of the device. When someone requests access to the device location, the device locks and a message appears on the lock screen to explain what's happening. For more information about *supervision*, which is a type of configuration for corporate-owned Apple devices, see [Get started with a supervised iPhone, iPad, or iPod touch](https://go.microsoft.com/fwlink/?linkid=853816) in the Apple support docs. 
+
+### App inventory details
+
+Your organization can require you to install a mobile threat defense (MTD) app. If you're required to install an MTD app on your device:   
+
+* Corporate-owned device: Your organization can view details about all apps on the device. 
+* Personal-owned device: Your organization can only view the details of your managed apps.  
+
+For more information about mobile threat defense, see [Install mobile threat defense app](set-up-mobile-threat-defense.md).  
+
+### App permissions  
+*Applies to devices running Android 11 and earlier* 
+
+An IT admin can grant permission to apps in the work profile, both manually and by automation. The IT admin does this to reduce the number of prompts you receive. The permissions could be for things like the camera, microphone, and location. If your device is running Android 11, you'll receive a push notification when someone grants permission to an app.    
+
+###  Network information
+Some information about network connections for Android devices may be available to your organization. For example, if your organization requires devices to remain within a certain building, your device would identify the network where it's connected.  
 
-**What your organization might be able to see:**
 
-- Phone number: If you're using a corporate-owned device (excluding corporate-owned work profile), your full phone number is visible to your organization. If you're using a personal device, the last four digits of your phone number are visible. You can see the ownership type for each individual device on the Intune Company Portal > **Device Details** page.  
-- Device storage space: If you can't install a required app, your organization might look at your device's storage space to figure out if space is too low.  
-- Location: For corporate-owned devices, your organization can see the location of a lost device. For personal devices, your organization does not see the device location. Visit the [Apple iOS documentation](https://go.microsoft.com/fwlink/?linkid=853816) to learn more about supervised devices.  
-- App inventory details: If your organization uses Mobile Threat Defense, they will be able to view details about the apps that are on your iOS device. Find out more about [Mobile Threat Defense](set-up-mobile-threat-defense.md). Otherwise, for personal-owned devices, your organization can only see your managed app inventory. For corporate-owned devices, your organization can see all of your app inventory.
-- Network information: Some information about network connections for Android devices may be available to your organization support. For example, if your organization requires devices to remain within a certain building, your device would identify the network where it is connected.