Additional Managed Google Play app reporting for Android Enterprise
Managed Google Play app types
There are three types of apps that are available with Managed Google Play: * Managed Google Play store app – Public apps that are generally available in the Play Store. Manage these apps in Intune by browsing for the apps you want to manage, approving them, and then synchronizing them into Intune. * Managed Google Play private app – These are LOB apps published to Managed Google Play by Intune admins. These apps are private and are available only to your Intune tenant. This is how LOB apps are managed and deployed with Managed Google Play and Android Enterprise. * Managed Google Play web link – Web links with IT admin-defined icons that are deployable to Android Enterprise devices. These appear on devices in the device’s app list just like regular apps.
Managed Google Play store apps
There are two ways to browse and approve Managed Google Play store apps withIntune: 1. Directly in the Intune console – browse and approve store apps in a view hosted within Intune. This opens directly in the Intune console and does not require you to reauthenticate with a different account. 2. In Managed Google Play console – you can optionally open the Managed Google Play console directly and approve apps there. See Sync a Managed Google Play app with Intune for more information. This requires a separate login using the account you used to connect your Intune tenant to Managed Google Play.
Add a Managed Google Play store app directly in the Intune console
1. Sign in to the Microsoft Endpoint Manager admin center. 2. Select Apps > All apps > Add. 3. In the Select app type pane, under the available Store app types, select Managed Google Play app. 4. Click Select. The Managed Google Play app store is displayed. 5. Select an app to view the app details. 6. On the page that displays the app, click Approve. A window for the app opens asking you to give permissions for the app to perform various operations. 7. Select Approve to accept the app permissions and continue. 8. Select Keep approved when app requests new permissions in the Approval Settings tab and then click Done.ImportantIf you do not choose this option, you will need to manually approve any newpermissions if the app developer publishes an update. This will causeinstallations and updates of the app to stop until permissions are approved.For this reason, it is recommended to select the option to automaticallyapprove new permissions. 9. Click Select to select the app. 10. Click Sync at the top of the blade to sync the app with the Managed Google Play service. 11. Click Refresh to update the app list and display the newly added app.
Add a Managed Google Play store app in the Managed Google Play console
(Alternative)If you prefer to synchronize a Managed Google Play app with Intune rather thanadding it directly using Intune, use the following steps.ImportantThe information provided below is an alternative method to adding a ManagedGoogle Play app using Intune as described above. 1. Go to the Managed Google Play store. Sign in with the same account you used to configure the connection between Intune and Android Enterprise. 2. Search the store and select the app you want to assign by using Intune. 3. On the page that displays the app, click Approve. In the following example, the Microsoft Excel app has been chosen.A window for the app opens asking you to give permissions for the app toperform various operations. 4. Select Approve to accept the app permissions and continue. 5. Select an option for handling new app permission requests, and then select Save.The app is approved, and it is displayed in your IT admin console. Next, youcan Sync a Managed Google Play app with Intune.
Managed Google Play private (LOB) apps
There are two ways to add LOB apps to Managed Google Play: 1. Directly in the Intune console – This allows you to add LOB apps by submitting just the app APK and a title, directly within Intune. This method does not require you to have a Google developer account and does not require you to pay the fee to register with Google as a developer. This method is simpler and has a significantly reduced number of steps, and makes LOB apps available for management in as little as ten minutes. 2. In the Google Play Developer Console – If you have a Google developer account or want to configure advanced distribution features that are only available in the Google Play Developer Console (like adding additional app screenshots), you can use the Google Play Developer Console.
Managed Google Play web links
Managed Google Play web links are installable and manageable just like otherAndroid apps. When installed on a device, they will appear in the user’s applist alongside the other apps they have installed. When selected, they willlaunch in the device’s browser.NoteWeb links pushed down from Managed Google Play will not open in the corporatecontext of Microsoft Edge if you have configured your Intune applicationprotection policy setting Receive data from other apps to be Policy managedapps. When a web link is pushed down through Managed Google Play, itâs notrecognized as a MAM-managed app, which is why Microsoft Edge will open in thepersonal context or InPrivate mode if the user is not signed in with apersonal account. For related information, see Android app protection policysettings in Microsoft Intune.Web links will open with Microsoft Edge or any other browser app you choose todeploy. Be sure to deploy at least one browser app to devices in order for weblinks to be able to open properly. However, all of the Display optionsavailable for web links (full screen, standalone, and minimal UI) will onlywork with the Chrome browser.To create a Managed Google Play web link: 1. Sign in to the Microsoft Endpoint Manager admin center. 2. Select Apps > All apps > Add. 3. In the Select app type pane, under the available Store app types, select Managed Google Play app. 4. Click Select. The Managed Google Play app store is displayed within Intune. 5. Select Web apps (next to the Globe icon) in the Google Play window. 6. Click the button at the lower right to add a new app. 7. Add an app Title, the web app URL, select how the app should be displayed, and select an app icon. 8. Click Create. 9. Close the Managed Google Play pane if you are done adding apps. 10. Click Sync on the App app pane to sync with the Managed Google Play service.NoteWeb apps may take several minutes to become available to sync. If the app doesnot appear the first time you perform a sync, wait a couple minutes andinitiate a new sync.
Sync a Managed Google Play app with Intune
If you have approved an app from the store and don’t see it in the Appsworkload, force an immediate sync as follows: 1. Sign in to the Microsoft Endpoint Manager admin center. 2. Select Tenant administration > Connectors and tokens > Managed Google Play. 3. In the Managed Google Play pane, choose Sync. The page updates the time and status of the last sync. 4. In the Microsoft Endpoint Manager admin center select Apps > All apps. The newly available Managed Google Play app is displayed.
Assign a Managed Google Play app to Android Enterprise personally-owned and
corporate-owned work profile devicesWhen the app is displayed in the App licenses node of the Apps workload pane,you can assign it just as you would assign any other app by assigning the appto groups of users.After you assign the app, it is installed (or available for install) on thedevices of the users that you’ve targeted. The user of the device is not askedto approve the installation. For more information about Android Enterprisepersonally-owned work profile devices, see Set up enrollment of AndroidEnterprise personally-owned work profile devices.NoteOnly apps that have been assigned will show up in the Managed Google Playstore for an end user. As such, this is a key step for the admin to take whensetting up apps with Managed Google Play.
Assign a Managed Google Play app to Android Enterprise fully managed
devicesAndroid Enterprise fully managed devices are corporate-owned devicesassociated with a single user and used exclusively for work and not personaluse. Users on fully managed devices can get their available company apps fromthe managed Google Play app on their device.By default, an Android Enterprise fully managed device will not allowemployees to install any apps that are not approved by the organization. Also,employees will not be able to remove any installed apps against policy. If youwish to allow users to access the full Google Play store to install appsrather than only having access to the approved apps in Managed Google Playstore, you can set the Allow access to all apps in Google Play store to Allow.With this setting, the user can access all the apps in the Google Play storeusing their corporate account, however purchases may limited. You can removethe limited purchases restriction by allowing users to add new accounts to thedevice. Doing so will enable end users to have the ability to purchase appsfrom the Google Play store using personal accounts, as well as conduct in-apppurchases. For more information, see Android Enterprise device settings toallow or restrict features using Intune.NoteThe Microsoft Intune app, the Microsoft Authenticator app, and the CompanyPortal app will be installed as required apps onto all fully managed devicesduring onboarding. Having these apps automatically installed providesConditional Access support, and Microsoft Intune app users can see and resolvecompliance issues.
Additional Managed Google Play app reporting for Android Enterprise
personally-owned work profile devicesFor Managed Google Play apps deployed to Android Enterprise personally-ownedwork profile devices, you can view the status and version number of the appinstalled on a device using Intune.
Delete Managed Google Play apps
When necessary, you can delete managed Google Play apps from Microsoft Intune.To delete a managed Google Play app, open Microsoft Intune in the Azure portaland select Apps > All apps. From the app list, select the ellipses (…) tothe right of the managed Google Play app, then select Delete from thedisplayed list. When you delete a managed Google Play app from the app list,the managed Google Play app is automatically unapproved.NoteIf an app is unapproved or deleted from the managed Google Play store, it willnot be removed from the Intune client apps list. This allows you to stilltarget an uninstall policy to users even if the app is unapproved.To turn off Android Enterprise enrollment and management, see Disconnect yourAndroid Enterprise administrative account.
Google Play Store app optimization
An app’s success in either app store depends upon knowing the differences ineach market’s algorithms.The first crucial thing for the optimization of your app for the Google PlayStore is to provide the app’s metadata. Setting this helps your app’svisibility and helps your app get discovered on Google Play.The main ranking factors for Google Play and the App Store are: 1. App icon: Focus on creating something eye-catching and well-suited to other industry standards within your app’s genre. 2. App name/title: Your app’s title is one of the strongest ranking factors in either app store, so it’s best to include the most relevant keywords as your ASO starting point. 3. Visuals and video: Screenshots and videos placed in both stores should represent the app’s main features. Best practices dictate that your screenshots must tell a story. 4. Short and long description: Write what your mobile app is about to help both search engines and users understand your app’s functionality and purpose.There is also a Long Description that matters. If you’re thinking aboutcreating both an iOS and Android app, read about the Differences between AppStore Optimization on Google Play vs. App Store.