Configure Application Policy Profile (Android Enterprise)
The Application Policy profile in Android Enterprise enables administrators to configure policies for the App Store, Play For Work, and System Applications on enrolled devices. By creating and deploying this profile, administrators gain granular control over app installations, updates, permissions, and restrictions, ensuring a secure and efficient device management process.
To create an Application Policy profile and deploy it to the device(s), follow these steps:
1. Navigate to SureMDM Web Console > Profiles > Android > Add > Application Policy > Configure.
2. Enter a Profile Name and click Add.
3. In the Select Application Source prompt, select an option from the following and click Add > Save.
SureMDM App Store
In the Enterprise App Store prompt, enter or select the following:
| Settings | Description |
|---|---|
| App Name | Select the application name from the drop-down menu. |
| App Version | The version of the application. |
| Install Silently | Select this option to install the application without human intervention. |
| Disallow Uninstallation | Prevents users from uninstalling the application. Supported only on Work Profile and Fully Managed Device enrollment modes with SureMDM Agent version 27.32.07 or later. |
| Launch App Upon Installation | Select this option to automatically launch the application once installation is complete. |
| Add Shortcut To Home Screen | Creates shortcut for the application on the device home screen. Note : If there is insufficient space, the shortcut will not be created. This feature is supported only on Samsung KNOX devices with SureMDM Agent version 27.37.00 or later. |
or
Play For Work
Admins should select the Enable Play Store option to use the Play For Work applications.
To add applications from Play For Work, follow these steps:
1. Select the approved apps from the Play Store.
or
Upload an apk file under the Private Apps section.
2. On the Managed Configuration prompt, enter the configuration name and select the required configuration.
3. Configure the following settings and click Next.
| Settings | Description |
|---|---|
| App ID | The Application ID will be auto-populated when the application name is selected. |
| Application Track ID | Installs the application corresponding to the selected Track ID on the device. If multiple versions are available, the latest version for the selected Track ID will be installed. Click the Refresh button to update the Track ID list; older Track IDs may be removed. |
| Pinning App | Select this option to lock down the device with a single or specified application. |
| Install Silently | Select this option to install the application without human intervention. |
| Disallow Uninstallation | Prevents the user from uninstalling the application. |
| Network Type Constraint | Select a Network Type for the installation: Any Network – Installation can proceed on any available network. Unmetered Network – Installation is allowed only on unmetered networks, such as Wi-Fi. |
| Charging State Constraint | Define whether the device must be charging during installation: Charging Not Required – Installation can occur regardless of charging status. Charging Required – Device must be plugged in to proceed with installation. |
| Device Idle State Constraint | Specify the idle condition for installation: Device Idle Not Required – Installation can occur while the device is in use. Device Idle Required – Device must be idle for the installation to proceed. |
| Install Priority | Set the installation priority. A lower number indicates higher priority for the installation. |
| Minimum Version Code | Specify the minimum required app version. If a lower version is installed, the app will auto-update based on the defined auto-install constraints, bypassing the standard auto-update schedule. |
| Allow in Kiosk Mode | Select this option to allow only specific apps. |
| App Update Mode | Select one of the options from the following to set the update mode: Default Mode High Priority Mode Postpone Mode |
4. Grant/Deny the app's permissions, and click Finish.
Admins will have the option to upload their organizations' apps in this section. This package should not be available in the Play Store.
or
Configure System Apps
In the System Application Policy prompt, enter or select the following:
| Settings | Description |
|---|---|
| App Name | Choose an application name from the drop-down menu. |
| App ID | The application ID will be auto-populated when the application name is selected. |
| Permission | Select All to allow all the permissions. |
| Status | Specify the status (Default/ Grant / Deny) |
| Pinning App | Select this option to lockdown the device with a single or specified application. |
| Allow in Kiosk Mode | Select this option to allow only specific apps. |
The newly created profile will be listed in the Profiles section .
4. Go back to the Home tab and select the Android device(s) or group(s).
5. Click Apply to launch the Apply Job/Profile To Device prompt.
6. In the Apply Job/Profile To Device prompt, select the created profile and click Apply.
or
Jobs Shortcut
- In the Job Shortcut prompt, select the Job and click Add.
This feature is supported on SureMDM agent versions 27.10.00 and above.
The newly created profile will be listed in the Profiles section .
- Go back to the Home tab and select the Android device(s) or group(s).
- Click Apply to launch the Apply Job/Profile To Device prompt.
- In the Apply Job/Profile To Device prompt, select the created profile and click Apply.