Microsoft Intune - App Protection Policies (MAM)

Intune app protection policies (APP / MAM) protect organisational data inside apps at the application layer, with or without device enrollment. They make BYOD safe by isolating corporate data inside managed apps and enabling selective wipe of org data without touching personal content.

When to use

Protecting Microsoft 365 and Intune-SDK-enabled app data on mobile devices, especially unmanaged / personal devices (MAM without enrollment, MAM-WE). Use this skill when full device enrollment is undesirable or impractical.

Do not use this skill for full device management (intune-device-mgmt) or disk encryption (bitlocker-design).

Pick the protection model