Rich management controls for securing and managing work profiles including hierarchical group management with Active Directory integration, support for customizable administrative roles with granular capabilities, an intuitive enterprise enrollment process for employees that offers a self-service console, and centralized control of assignable profiles for email, SCEP, Wi-Fi, VPN and proxy servers.