Public and private Android enterprise app deployment

MobileIron Core provides administrators with the following options for deploying apps to Android enterprise device users.

  • Public apps: These apps are developed outside of your organization and are available to Android enterprise device users from the public Google Play store. They are hosted by Google, but administrators can manage public apps using Core.

  • Private apps:These apps are available only to your organization. Private apps are hosted by Google and available from the Google Play Apps Catalog. They are hosted by Google, but administrators can manage private apps using Core.

    These apps are available to only users of your domain and can be available in a non-English language that is supported by MobileIron. The following private apps are described below.

    • Private in-house apps: These apps are developed in-house, available only to your organization and can be available in a non-English language that is supported by MobileIron. Private in-house apps are more secure because they are hosted by Core (not Google), but are available from the Google Play Apps Catalog. The apps generate an APK definition file you upload to the Google Play Developer Console to use for installing the apps. These apps not available through Apps@Work; see Distributing your enterprise apps in the Google Play App catalog or in Apps@Work for details.
NOTE: When the API connection in Core's Access Control List is enabled, device attempts to download private self-hosted apps from an IP address range that is not listed in that Access Control List will be rejected. This is expected behavior. In order for devices to download private self-hosted apps, devices must have an IP address that is on Core's Access Control List.

To deploy apps see:

Related topics 

App Management Action Workflows

Deploying public Android enterprise apps

A public app is available in the public Google Play store. You can add public apps to the App Catalog using the app wizard that helps you through all the options and configurations. You can also add public apps using the Google Play iFrame. See Adding an Android enterprise public app using the app wizard in the Core Admin Portal.

 

Adding an Android enterprise public app using the app wizard in the Core Admin Portal

Before you begin 

Enable Android enterprise in MobileIron Core. See "Enabling Android enterprise" in the MobileIron Core Device Management Guide for Android and Android enterprise Devices.

When adding the app, the app wizard guides you through all options and configurations of public and private apps on Android enterprise. In-house and self-hosted apps are applicable to Android enterprise, but are not configured using the app wizard.

NOTE: Once Android enterprise is installed, the Quick Import option for Google Play is disabled.

Procedure 

  1. In the Admin Portal, go to Services > Google.
  2. Use the browse button to navigate to the JSON file you downloaded as part of the Android enterprise enrollment and then click Connect.

  3. A confirmation displays stating that you have been enrolled in Google Services.

  4. Go to Apps > App Catalog.
  5. Click Add+.

  6. Click Google Play. The Google Play store opens below displaying only Android enterprise apps.

  7. The pop-out sidebar displays three options:

    • Search Play store – search for a specific app in the Google Play store. Only public apps and enterprise domain / package name apps can be searched upon. Once a private app has been uploaded, you can search for the private app.
    • Private apps – allows you to import private Android apps into Google Play for Android device users to download and use.

    • Web app – allows you to create a web app.

      NOTE: This flow is generated by Google Play and may change in the future as Google adds new features.
  8. In the Search for app field or clicking on the sidebar and selecting Search Play store, enter the app name and click Search. Google Play Store displays app icons in the search results.

  9. Click on an app’s icon to select it.

  10. You will need to approve the app to be part of the Android enterprise app collection for device users’ consumption. Click the Approve button. The app’s Approval Settings and Notifications dialog box opens.

  11. Every app requires permissions to access specific aspects of an Android phone, for example, contacts. As an administrator, you will need to review these permissions because you will be accepting or revoking them on behalf of your organization. Select one of the options:

    • Keep approved when app requests new permissions – permissions can change due to app updates. If this option is selected, it means the device user may not know about the access permission changes.

    • Revoke app approval when this app requests new permissions – If this option is selected, when a new update has changed its access permissions, the device user will be notified of the access permissions when the app is updated. The device user must accept the new permissions otherwise the app will be disabled for that user.

  12. Click the Notifications tab.

  13. Enter the email addresses of people to be notified if an app has been updated.

  14. After you Save, a confirmation email is sent to the listed person(s). The button in the confirmation email needs to be clicked to activate the email subscription. People successfully subscribed will be listed in the Notification tab of the app.

    NOTE: If you selected the “Keep approved when app requests new permissions” option and no email is entered into the Notification tab, all updates are silent.

  15. Click Save.

  16. The app information displays with a check mark next to "Approved". If you want to review the access permissions or notifications, click the Approval Preferences button.

  17. Click Select.

  18. Click Next. Now that you have set the access permissions to the app, you can finish configuring the app. Configurations are determined by the app developer and are key-value pairs unique to each app. Fill out the configurations sections as needed. If needed, refer to the app’s documentation.

  19. Use the following guidelines to complete the page.

    Item

    Description

    Application Name

    Displays the app name defined by the app developer. This is the name that displays to device users. This field is not editable.

    Description

    The app description as retrieved from Google Play displays. You can edit the description. Users will see this description in Apps@Work on their devices.

    Category

    Select one or more categories to display this app in a category tab in Apps@Work or add a new category.

    a. Click Add New Category to define new categories.
    b. Enter a category Name (up to 64 characters).
    c. Enter a Description (up to 255 characters).
    d. In the Category Icon section, click the Replace Icon button.
    e. Browse and select an icon that will represent this Category.
    f. Click Save.
  20. Click Next.

  21. Use the following guidelines to complete the page.

    Section

    Item

    Description

    Apps@Work Catalog

    Feature this App in the Apps@Work catalog

    If check box is selected, this app appears in the Featured Apps tab in Apps@Work.

     

    Featured Banner

    Selecting the check box will display this app as part of the top banner on the Apps@Work Home page on end users' devices. The latest five apps will be picked to be part of Apps@Work Home page.

    Per App VPN Settings

    Per App VPN by Label Only

    Select this check box to require the Per App VPN configuration to be assigned to a label that matches the device. If there is no associated label between the VPN configuration and the device, Per App VPN will not be installed on the device.

    Clear this check box to assign the per App VPN based on the selections in the Per App VPN field, ignoring labels.

    NOTE: Per app VPN is not supported for MAM-only Android devices.

     

    License Required

    The Selected VPNs column lists the VPN configuration that may be installed on the device, in priority order:

    • If Per App VPN by Label Only is selected, then the VPN configuration must be assigned to a label matching the device in order to be installed. The first VPN in the list that is also assigned to a label associated with the device has the highest priority.
    • If Per App VPN by Label Only is not selected, then the VPN configurations listed are in priority order and do not need to be assigned to a label matching the device.

     

    To populate the Selected VPNs column, select the VPN configuration you created for per app VPN in the All VPNs column, and click the right arrow. You can select multiple per app VPN settings.

    To reorder the per app VPN configurations in the Selected VPNs column, drag the configuration names to the correct positions in the list.

    See “Managing VPN settings” in the MobileIron Core Device Management Guide for information on creating a per app VPN.

    NOTE: Per app VPN is not supported for MAM-only Android devices.

    Android Enterprise (All Modes)

    Install this app for Android enterprise

    You must be a Global Space administrator to use this setting. Select to enable public and private apps available to device users for download to Android devices. You can change the “Install this app for Android enterprise” setting for each app in the app’s details page at any time.

     

    Silent install for work managed devices

    (Applicable only to in-house apps) When you select this feature, the Android enterprise app is silently installed on devices with a work profile. This is selected by default.

     

    Auto Update this App

    You must be a Global Space administrator to use this setting.

    Select this check box to automatically update this app on devices when a new version is available on Google Play. If this check box is de-selected, users will not receive automatic app updates. Note that when an app in a Work Profile is updated, the same app is updated in the personal profile.

     

    Silent install for Mandatory Apps

    This feature only applies to devices that support silent installation.

    • Clearing the check box means the device user will need to manually install the app.
    • Selecting the check box will install the app silently. The app is installed when the device checks in with Core. User action is not required.

    For more information, see Silent install and uninstall of mandatory apps.

    NOTE: Silent install is not supported for MAM-only Android devices.

     

    Block Widget on Home Screen

    Applicable only to apps installed in the Managed profile.

     

    Block Uninstall

    Select this feature to prevents the device user from uninstalling the app.

     

    Quarantine app when device is quarantined

    Required for Work profile mode, Work managed device mode, and Managed device with Work profile mode.

    Selected by default, this enables configured compliance actions to hide the app if a policy violation results in a quarantined device. This is a required selection for Work profile mode, Work managed device mode and Managed device with Work profile mode.

    A second step is required to enable this feature: configure a corresponding compliance action and security policy with that compliance action selected. Once the device is no longer quarantined, the app can be used again. If this option is deselected, the app is available for usage, even when the device is quarantined.

    Note The Following:  

    • If you change the setting after the app is added, the changed setting will be applied to the app.

    Delegated Permissions

    Configure third-party app runtime permissions

    Select this check box to grant delegation permissions

    to third parties. Applicable for in-house apps and public / private apps on managed devices with Work profile and Work managed device mode on Android 8.0 through the most recently released version as supported by MobileIron.

     

    Hide and suspend third-party apps

    Select this check box to delegate third-parties to have permission to

    hide and suspend the selected app. Applicable for in-house apps and public / private apps on managed

    devices with Work profile and Work managed device mode on Android 8.0 through the most recently

    released version as supported by MobileIron.

     

    Manage certificates

    Select this check box to delegate permission for managing certificates. Applicable for in-house apps and public / private apps on managed devices with Work profile and Work managed device mode on Android 8.0 through the most recently released version as supported by MobileIron.

  22. The Configurations Choices section relates to configuring the app you are adding. You will need to refer to the app's documentation for how to proceed with these configurations. For example, MobileIron Core supports the Knox Service Plugin app. In order to enter the configurations for this app, you will need to access the Knox Developer documentation for Knox Service Plugin at https://docs.samsungknox.com/dev/knox-service-plugin/index.htm?Highlight=KSP. A login may be required to access app documentation.

  23. Click Finish.
  24. In the App Catalog, select the newly-added app.

  25. Click Actions > Apply to Label. Select the appropriate labels to make the app available to device users.

    You can edit the app’s settings at any time. Select the app in the App Catalog, and click Edit.

All apps that are available to be installed for Android enterprise have the “suitcase” badge on their icon. These apps can also be installed on non-Android enterprise devices. For more information about labels for Android enterprise, see Distributing alternate Release Tracks for Android enterprise apps.

Note The Following:  

  • You can edit the app’s settings at any time. Select the app in the App Catalog, and click Edit.
  • The metadata and reviews for an app selected for installation from Google Play may not be displayed depending on the configuration of the customers firewall.

Related topics 

Deploying private Android enterprise apps

The high-level steps to deploy a private Android enterprise app are:

Publishing your private app on Google Play to your organization only

Before you begin 

These steps are performed on Google’s websites.

  1. You must be registered as a Google developer.
  2. The account used to register for Android enterprise accounts must be registered as the developer.
  3. Follow Google’s instructions to publish the app on Google Play.
  4. To make it available privately to your domain users, for “Pricing & Distribution” choices, under “Managed Google Play”, select the choice to publish to only approved organizations.

Adding your Android enterprise private app using the app wizard in the Core Admin Portal

This procedure is how you add a private Android enterprise app to the MobileIron Core App Catalog. In-house apps are supported with Android enterprise but you cannot configure them using the app wizard.

If you are adding a new version of an existing app, see Adding new versions of an existing Android enterprise app.

Procedure 

  1. In the MobileIron Core Admin Portal, go to Apps > App Catalog .
  2. Click Add+.

  3. Click Google Play. The app icons for the private apps you published to Google Play display.

    NOTE: If you need to update the email address associated with the app, click Update.
    Select the desired app and then click Next.
  4. The Choose page displays the private app's title and APK file name.
  5. Click Select and then click Next.

  6. The Describe page displays. Use the following guidelines to complete the page.

    Item

    Description

    Package Name

    You must provide the app’s package name. MobileIron Core can upload an Android Google Play Store app that has the same package name as a public app, such as com.mobileiron.phoneatwork, that is already loaded on Core. This feature is always on and does not require any configuration in the user interface.

    Application Name

    Displays the app name defined by the app developer. This is the name that displays to device users. This field is not editable.

    Min OS Version

    The minimum OS version as retrieved from Google Play displays.

    Devices that don’t have the minimum OS version installed will not be able to install the app.

    Description

    The app description as retrieved from Google Play displays. You can edit the description. Users will see this description in Apps@Work on their devices.

    Category

    Select one or more categories to display this app in a category tab in Apps@Work or add a new category.

    a. Click Add New Category to define new categories.
    b. Enter a category Name (up to 64 characters).
    c. Enter a Description (up to 255 characters).
    d. In the Category Icon section, click the Replace Icon button.
    e. Browse and select an icon that will represent this Category.
    f. Click Save.
  7. Click Next.

  8. The App Store page displays. Use the following guidelines to complete the page.

    Section

    Item

    Description

    Apps@Work Catalog

    Feature this App in the Apps@Work catalog

    If check box is selected, this app appears in the Featured Apps tab in Apps@Work.

     

    Featured Banner

    Selecting the check box will display this app as part of the top banner on the Apps@Work Home page on end users' devices. The latest five apps will be picked to be part of Apps@Work Home page.

    Icon and Screenshots

    App Icon
    NOTE: Icon and Screenshots appear when editing an app entry.
    • The icon retrieved from Google Play displays.
    • To replace the icon, click Replace Icon button. Select the icon to represent this app. The file must be no larger than 1024 x 1024 pixels and in JPG, PNG, or GIF format. We recommend PNG for best resizing results. Icon height and width must be equal.

     

    Screenshots
    NOTE: Icon and Screenshots appear when editing an app entry.
    • The screenshots retrieved from Google Play are displayed.
    • Click Upload to select and upload optional screenshot files in PNG, GIF, or JPG formats. The supported dimensions are 480x800 pixels and 480x854 pixels. We recommend PNG for best resizing.
    • To delete a screenshot, click Remove under the screenshot.

    Android Enterprise (All Modes)

    Install this app for Android enterprise

    Selecting enables public and private apps available to device users for download to Android devices. You can change the “Install this app for Android enterprise” setting for each app in the app’s details page at any time.
  9. Click Next. The App Configuration page displays.

  10. Use the following guidelines to complete the page. 

    Section

    Item

    Description

    Per App VPN Settings

    Per App VPN by Label Only

    Select this check box to require the Per App VPN configuration to be assigned to a label that matches the device. If there is no associated label between the VPN configuration and the device, Per App VPN will not be installed on the device.

    Clear this check box to assign the per App VPN based on the selections in the Per App VPN field, ignoring labels.

    NOTE: Per app VPN is not supported for MAM-only Android devices.

     

    License Required

    The Selected VPNs column lists the VPN configuration that may be installed on the device, in priority order:

    • If Per App VPN by Label Only is selected, then the VPN configuration must be assigned to a label matching the device in order to be installed. The first VPN in the list that is also assigned to a label associated with the device has the highest priority.
    • If Per App VPN by Label Only is not selected, then the VPN configurations listed are in priority order and do not need to be assigned to a label matching the device.

    To populate the Selected VPNs column, select the VPN configuration you created for per app VPN in the All VPNs column, and click the right arrow. You can select multiple per app VPN settings.

    To reorder the per app VPN configurations in the Selected VPNs column, drag the configuration names to the correct positions in the list.

    See “Managing VPN settings” in the MobileIron Core Device Management Guide for information on creating a per app VPN.

    NOTE: Per app VPN is not supported for MAM-only Android devices.

    Android Enterprise (All Modes)

    Install this app for Android enterprise

    You must be a Global Space administrator to use this setting. Selecting enables public and private apps available to device users for download to Android devices. You can change the “Install this app for Android enterprise” setting for each app in the app’s details page at any time.

     

    Silent install for work managed devices

    This feature only applies to devices that support silent installation.

    • Clearing the check box means the device user will need to manually install the app.
    • Selecting the check box will install the app silently. The app is installed when the device checks in with Core. User action is not required.

    For more information, see Silent install and uninstall of mandatory apps.

    NOTE: Silent install is not supported for MAM-only Android devices.

     

    Block Widget on Home Screen

    If selected, the app cannot place widgets on the home screen on work profile devices. For example, calendar apps are not permitted to place calendar widgets on the home screen.

     

    Block Uninstall

    Select this feature to prevent the device user from uninstalling the app.

     

    Quarantine app when device is quarantined

    (Required for Work profile mode, Work managed device mode, and Managed device with Work profile mode.)

    Selected by default, this enables configured compliance actions to hide the app if a policy violation results in a quarantined device. This is a required selection for Work Profile mode, Work Managed device mode and Managed device with Work profile mode.

    A second step is required to enable this feature: configure a corresponding compliance action and security policy with that compliance action selected. Once the device is no longer quarantined, the app can be used again. If this option is deselected, the app is available for usage, even when the device is quarantined.

    Note The Following:  

    • If you change the setting after the app is added, the changed setting will be applied to the app.

    Delegated Permissions

    Configure third-party app runtime permissions

    Select this check box to grant delegation permissions to third parties. Applicable for in-house apps and public / private apps on managed devices with Work profile and Work managed device mode on Android 8.0 through the most recently released version as supported by MobileIron.

     

    Hide and suspend third-party apps

    Select this check box to delegate third-parties to have permission to hide and suspend the selected app. Applicable for in-house apps and public / private apps on managed devices with Work profile and Work managed device mode on Android 8.0 through the most recently released version as supported by MobileIron.

     

    Manage certificates

    Select this check box to delegate permission for managing certificates. Applicable for in-house apps and public / private apps on managed devices with Work profile and Work managed device mode on Android 8.0 through the most recently released version as supported by MobileIron.
  11. Click Finish.
  12. Select the app in the App Catalog. 
  13. Click Actions > Apply to Label, and select the appropriate labels to make this app available to device users. 
    NOTE: You can edit the app’s settings at any time. Select the app in the App Catalog, and click Edit.

Manually provide an app's package name

You can manually provide the package name of an Android app along with the app details.

  1. In the MobileIron Core Admin Portal, go to Apps > App Catalog . 
  2.  Click Add+.
  3.  Click Google Play. The app icons for the private apps you published to Google Play display.
  4. Scroll down to the bottom of the page and select the check box for Skip this step and manually provide Bundle ID and all app details.
  5. Click Next. The App Configuration page displays.
  6. Complete the remaining steps of the app wizard (see step 6 at Deploying private Android enterprise apps
  7. Click Finish.
  8. Select the app in the App Catalog.

  9. Click Actions > Apply to Label, and select the appropriate labels to make this app available to device users.

    NOTE: You can edit the app’s settings at any time. Select the app in the App Catalog, and click Edit.

Related topics 

Deploying a self-hosted app

Self-hosted apps allow administrators to publish in-house app entries in the Google Play Apps Catalog without uploading binaries to Google. For security reasons, self-hosted apps are hosted by Core and not Google, however they are still available in the Google Play Apps Catalog. Self-hosted apps require the definition of APK location to be uploaded to Google Play. Revisions are required to be published to Google Play, which points only to the latest version on Core.

Silent install of the APK is supported only on work-managed devices. You can manually install self-hosted apps from Google Play. You can use this feature to block or allow users to show in-house app widgets on the home screen inside the Work Profile. By enabling the "Block Widget on Home Screen" and "Block Uninstall" options, you can also block or allow users from uninstalling the app. This feature applies to managed devices only.

NOTE: These apps are not available for Android enterprise devices users to install from Apps@Work.

Procedure 

If you are adding a new version of an existing app, see Adding new versions of an existing Android enterprise app.

  1. In the Admin Portal, select Apps > App Catalog.

  2. Upload a new APK that becomes an in-house app.

    If you are adding a new self-hosting app:

    1. Click Add+ > In-House > Browse.
    2. Locate and select the app, then click Next.

    3. Skip to the next step.

    If you want to redefine an existing app:

    1. Select the app and click Edit.
    2. Continue with the next step.
  3. Scroll down to the ANDROID ENTERPRISE (ALL MODES) section.
  4. Select the Install this app for Android enterprise check box.
  5. Click the Download APK Definition file link. The APK definition file downloads automatically.
  6. Open a new browser window and log into the Google Play Developer Console site.

  7. Follow Google's steps on publishing.

    • Under Distribution > Managed Google Play, make sure you have the Provately target this app to a list of organizations check box selected. Click Choose Organizations.
    • When uploading the APK file, be sure to select the "I am uploading a configuration for an APK hosted outside of Google Play" check box.
    • Go to Services > API > Licensing & in-app billing section and copy the the license key.

  8. Return to the Core App Catalog broswer window and paste the key in the App License box provided.

    NOTE: Every version of that app uses the same License Key.
  9. Select one or more of the following check boxes:
    • Silent install for work managed devices
    • Block Widget on Home Screen
    • Block Uninstall
  10. Click Save.
  11. Select the app in the App Catalog.
  12. Click Actions > Apply to Label.
  13. Select the appropriate labels to make this app available to device users.

Adding new versions of an existing Android enterprise app

When uploading a newer version of an app, an extra page opens to allow you to select whether to keep the app's old version information or to adopt the information from the app's new version. This feature is applicable to Android enterprise in-house / private / self-hosted apps.

Procedure 

  1. In the App Catalog, click the Add+ button.

    The Add App Wizard opens.

  2. Click In-House.
  3. Click Browse and navigate to the in-house Android or Android enterprise app you want to upload.

  4. Click Next.

    The An earlier version of this App exists page opens.

  5. Select an option:

    • Another version of this App was previously uploaded. Reuse its description, icon and screenshot. If the Description, Icon or Screenshot fields of the new app are empty, then the system will populate those fields with information from the previous app version (default).
    • Upload a new description, icon or screen shot. Information related to the Description, Icon or Screenshot fields of the new App will be utilized. If those fields are empty, nothing will be copied from the previous app version.

  6. Click Next and finish configuring the new version of your app (see Adding your Android enterprise private app using the app wizard in the Core Admin Portal.)

    Once finished, the new version displays in the App Catalog.

Distributing your enterprise apps in the Google Play App catalog or in Apps@Work

By default, Android enterprise apps are distributed from a managed Google Play. However, you can opt to distribute the apps from Apps@Work.

Use these steps to set up your distribution choice for your enterprise apps:

  1. Make sure your device is set up for Android enterprise. See “Enabling Android enterprise for your enterprise” in the MobileIron Core Device Management Guide for Android and Android enterprise Devices.
  2. On the Admin Portal, in Services > Google, in Enterprise Apps Distribution, choose either Google Play or Apps@Work.
  3. If you change the setting, click Apply.

  4. If you selected Google Play, in Google Play App Catalog section:

    Select Yes to use a layout based on the characteristics of apps in this instance of MobileIron Core. The apps are presented in Google Play using the categories and featured apps as you defined for each app in the App Catalog. Apps added recently to the App Catalog are presented in a “What’s New” list.

    Select No (the default) to use a basic layout in Google Play. In this layout, the apps are presented in alphabetical order in a single list.

    Note The Following:  

    • If more than one Core instance is publishing with Google Play, you will be sending redundant (possibly conflicting) layouts to Google. This does NOT affect the distribution of apps, only the layout visible in Google Play.
    • The Google Play layout definition is based on the Android enterprise apps available on the Core that you marked as primary on help.mobileiron.com when setting up your Android enterprise enrollment. If you have multiple Cores that use the same enterprise account, the devices registered to users in each Core receive the same layout. This layout can be consistent only if one Core is set to publish the layout. If multiple Cores are marked as the primary Core, then they will attempt to publish the layout and cause the layout to become unstable.
NOTE:  Updates to the Google Play App catalog may take several minutes to take effect.

Related topics 

Distributing alternate Release Tracks for Android enterprise apps

For Android enterprise 10.4.0.0 through the latest version as supported by MobileIron, this feature works for private and public Android apps, and Android enterprise apps. Any public app that the app developer allowed Android enterprise access to their tracks will work. You can deploy numerous versions of private apps to allow rapid and flexible deployment of different builds of the same app to different groups.

In Core versions below 10.4.0.0, there were three static options (Alpha, Beta, Production) that you can select from in the list of releases (Track ID) defined by the developer who uploaded the application to Google Play. Upon upgrade to Core 10.4.0.0, Core supports as many tracks as the app devloper published and assigned to the enterprise. This list is dynamically retrieved from Google Play and displays in the release column of the Add to Label dialog box. Core uses the Track IDs to specify which track, but for administrators, Core displays the track aliases. As the list can include new and different Track aliases, during the upgrade to 10.4.0.0, Core will try to match existing Track IDs, but if there is no Track ID match, Core will assign the track to Production.

If a device is assigned to multiple Track IDs, all Track IDs will be sent to the device and Google will choose the highest available track to use. Since the tracks are set by label, it's possible for a device to belong to multiple labels getting multiple Track IDs for the same app.

Before you begin 

  • Select Android enterprise apps to be used in the Admin Portal.
  • Identify one or more private apps administrators want to deploy to users within their organization.
  • Set up separate labels to include alpha users and beta users.
  • Verify that your in-house app developers have whitelisted the alpha and beta apps for distribution to your enterprise using the Google enterprise ID for Core as the target organization.

Procedure 

  1. In the Admin Portal, go to Apps > App Catalog.
  2. Select one of the Android enterprise-enabled apps you want to add to an alpha or beta label.
  3. Click Actions > Apply to label.
  4. Select one or more labels.
  5. Go to the Release column and click inside the cell to enable the drop down option.

  6. Select Alpha, Beta, Production (default) or an alternate option as per Google's dynamically-updated list.

    NOTE: Core only displays the track aliases for the tracks that are possible for the app for that enterprise. It does not have to be Alpha or Beta.

  7. Click Apply.

NOTE: At the next sync the specified track is downloaded to the designated devices. If multiple labels are applied to a device introduce conflicts, label priority applies the highest version in the following order: Alpha, Beta, then Production.

Related topics