By admin console, I mean a blank profile with nothing but stock Graphene apps on it. No Gplay store, no F droid, nothing. Its main job is to control esim, profile creation, duress pass, wifi…etc.
Or just a normal daily Main, with secondary profiles OR private spaces?
What i currently have: main profile with main Google (unfortunately), all sensitive in separate profile.


This is native now in Graphene. No need for Shelter anymore: https://discuss.grapheneos.org/d/16670-private-space-on-android-15-grapheneos
This is not the same thing.
How so?
Most (maybe all?) of these items listed in the settings page for private spaces are differences from a work profile.
I definitely require my work profile apps to be able to run in the background at times, so a private space is not going to cut it, unfortunately.