They allow your workplace to remotely administer your work account without giving them full control over your whole device.