By admin console, I mean a blank profile with nothing but stock Graphene apps on it. No Gplay store, no F droid, nothing. Its main job is to control esim, profile creation, duress pass, wifi…etc.
Or just a normal daily Main, with secondary profiles OR private spaces?
What i currently have: main profile with main Google (unfortunately), all sensitive in separate profile.


This is not the same thing.
How so?
Most (maybe all?) of these items listed in the settings page for private spaces are differences from a work profile.
I definitely require my work profile apps to be able to run in the background at times, so a private space is not going to cut it, unfortunately.