Environment 

• Knox Platform for Enterprise (KPE)
• Android Enterprise (AE) Profile Owner (PO) & Corporate Owned Personal Enabled (COPE)
• Samsung devices running Android 8 and higher

Overview

On Samsung devices running Android 8 and higher in AE PO and COPE mode, when the UEM policy "Cross-profile copy and paste" is left unconfigured, the copy and paste functionality is blocked across profiles in accordance with Knox design. The expected behavior is that the unconfigured policy defaults to Allow.

Cause

By current Knox framework design, when a work profile is created on a device in AE PO mode, the default behavior for cross-profile copy and paste functionality is set to Disallow.

Resolution

The Knox team is modifying the framework behavior to align with Android Enterprise design—with this new change, the copy and paste feature is allowed when a work profile is created. This change is scheduled to be released in a future firmware update.