Internal private applications can be silently installed on managed Android devices through Managed Google Play, eliminating the need for end users to manually search for, download, or install applications from the Play Store.
Prerequisites
Before deploying an internal application, ensure the following requirements are met:
- The Android device is enrolled in the organization's MDM solution.
- The application is published as a Private App in Managed Google Play.
- The application has been approved for use within the organization.
- The application is assigned to the required devices, users, or groups through the MDM console.
- The installation mode is configured as Automatic or Force Install.
Installation Process
Step 1: Publish the Internal Application
Upload the APK to Managed Google Play as a private application. Once approved, the application becomes available exclusively within the organization's managed application catalog.
Step 2: Approve and Assign the Application
From the MDM console:
- Select the private application.
- Assign it to the desired devices, users, or groups.
- Configure the installation behavior to Automatic Installation or Force Install.
Step 3: Apply Policies
Save and deploy the updated application policy. Managed devices receive the new configuration during the next policy synchronization cycle.
Step 4: Silent Installation on Devices
The managed device downloads and installs the application in the background without requiring any user interaction or Play Store prompts.
Device Behavior
Fully Managed (Company-Owned) Devices
The application is installed silently across the entire device.
Devices with a Work Profile (BYOD)
The application is installed only within the managed work profile and is not accessible from the personal profile.
Expected User Experience
In most cases, users do not receive installation prompts. Once the device synchronizes with the management server, the application appears automatically. Depending on the application, users may still need to complete in-app configuration or grant runtime permissions.
