Can't upvote this enough. Never give these remote administration rights to an employer on any personal device (phone typically, but any).