Unable to enroll the device and setup work profile

If the new email belongs to a different company/tenant, Android cannot enroll that second company into the existing Intune-managed work profile; either remove the current organization before enrolling the new one, or keep the current enrollment and ask the second company to provide app-only access.

Option 1: Switch the device to the new company

Warning: Unenrolling removes the current work profile, including its managed apps, email, and company data; personal data remains unaffected.

For a personally owned Android device enrolled through Company Portal:

1. Open Company Portal and sign in with the currently enrolled company account.
2. Select Devices, then select this device.
3. Open the menu and select Remove Device.
4. Select OK.
5. After the old work profile disappears, begin enrollment using the new company’s instructions.

These are Microsoft’s documented Android removal steps.^1^ Android work profiles separate managed work apps and data from the personal side of the device.^2^

If Company Portal cannot remove the device, it can also be removed from another browser:

1. Sign in to the Company Portal website with the currently enrolled account.
2. Go to Devices and select the phone.
3. Select Remove—it might be under More (…).
4. Confirm Remove.^3^

If the old account is no longer accessible, contact that company’s IT administrator and ask them to retire/remove the device from Intune. Simply uninstalling Company Portal does not necessarily remove the existing organizational management record.^4^

For a company-owned device enrolled through the Microsoft Intune app, users cannot remove the enrollment themselves; the organization’s administrator must handle it.^1^

Option 2: Keep the existing company enrollment

A managed Android work profile is provisioned and controlled by one enterprise tenant, so work accounts from different tenants cannot be managed together in that same profile.^5^

Ask the second company’s IT administrator whether they support either:

• Intune app protection without device enrollment (MAM), allowing protected access through apps such as Outlook without creating another work profile.
• Access from the phone’s personal profile, if their Conditional Access and security policies permit it.

Intune supports both app-only protection and Android Enterprise work profiles for personally owned devices, but the organization chooses which model is allowed.^6^

If both addresses belong to the same company tenant, this tenant boundary does not explain the failure. The Intune administrator should instead check the user’s Intune license, Android enrollment restrictions, and account-related app configuration policies.

References

1. Remove device from Company Portal for Android
2. Android Enterprise work profile management overview
3. Remove device on Intune Company Portal website
4. Can't add new working account for Teams App on Android - Microsoft Q&A
5. Two Outlook email accounts from different tenants on a fully managed Android device. - Microsoft Q&A
6. Mobile Application Management and Personally-Owned Work Profiles on Android Enterprise Devices in Intune