Additionally, the Intune-managed Outlook apps include a new multi-identity management feature that enables users to access both their personal and work email accounts in the same Outlook app while only applying the Intune app protection policies to the user's work account. More information is available in How to create and assign app protection policies. With Intune app protection policies, you can restrict actions such as cut, copy, paste, and 'save as' of corporate data between Intune-managed apps and apps that are not managed by Intune. Intune provides mobile application management (MAM) capabilities, as well as other conditional access and device management capabilities.

All users must be licensed to leverage the conditional access and Intune app protection policies discussed in this article. While the Enterprise Mobility + Security suite subscription includes licenses for both Microsoft Intune and Azure Active Directory, customers can purchase Microsoft Intune licenses and Azure Active Directory Premium licenses separately.

Remove outlook device policy android