Android Enterprise General Discussions

Can you please support for this issue. We have not been able to call the following api: We have executed all the steps mentioned in documents, still getting 403 GET https://androiddeviceprovisioning.googleapis.com/v1/partners/*****/customers { "code" : 403, "errors" : [ { "domain" : "global", "message" : "You are not allowed to retrieve the list of requested permission delegations.", "reason" : "forbidden" } ], "message" : "You are not allowed to retrieve the list of requested permission delegations.", "status" : "PERMISSION_DENIED", "details" : [ { "@type" : "type.googleapis.com/google.android.device.provisioning.v1.CustomError", "code" : "AUTHORIZATION_FAIL", "message" : "AUTHORIZATION_FAIL" } ] } To get the device listing for a customer we have followed below pre-requisites: A Google account, that's a member of your zero-touch enrollment reseller account. Java 1.7 or greater.(21) enable Android Device Provisioning Partner API. create a service account. Set Role to Service Accounts &

Hi, i want to get in touch with android enterprise over a month now, but i don´t get a answer. I filled out this form (https://www.android.com/intl/de_de/enterprise/get-in-touch/) 4 times and did not get any response.  I want a Enterprise Solution for a very small company with 4 employees to install a work profile on their own devices. I appreciate any help to get startet. Thank you, Robert.

While implementing the Android Management API to configure a critical application as FORCE_INSTALLED, I encountered a significant issue. Under normal circumstances, this configuration prevents users from uninstalling or disabling the app, displaying an "Action not allowed" message when such actions are attempted via the device settings.However, When the user long-presses the app icon on the launcher, the "Disable" option becomes available, and selecting it successfully disables the application. This behavior undermines the intended enforcement of the FORCE_INSTALLED policy. Moreover, when trying to enable the application, the "Action not allowed" message is displayed.Steps to ReproduceConfigure an application in the policy with the following parameters:"applications": [ { "packageName": "com.example.app", "installType": "FORCE_INSTALLED", "allowDisable": false } ]Apply the policy to a managed device.Attempt to disable the application through the device settings; the act

We are working on an established Intune deployment and have discovered a Managed Google Play account that was set up by an employee who is no longer with the company. So I have some questions and general confusion around Managed Google Play vs Android Enterprise and what would be best for our Org.1. I can see that we need to move away from Android (device administrator) enrolments based on the documentation from Google/MS. If I disconnect the current Managed Play account, I am concerned that these devices would be impacted. I'm not sure if we can blow away this connection, set up a new account, or really try to get access to the current account.2. Is Managed Google Play the same as Android Enterprise? Or are those 2 completely different things?3. The devices in our Org will be either BYOD Androids and Android-based conference room gear (that the company owns), polycom phones, displays, speakers, etc. Do we/ should we use Android Enterprise to manage both of these types of devices?

Hello, Until earlier today, I was able to upload existing devices via .csv with a view to changing their configurations. This is because our resellers are unable to choose which configuration to use upon upload (we have two for different types of devices).Despite simply trying to change configurations for existing devices, I'm getting the error "You don't have permission to add devices for the customer". As I mentioned, this was working earlier today, all of a sudden I'm now unable to do this for devices that already exist in the portal. I'm using the .csv template provided with "modemtype", "modemid" and "profileid" filled out, which had been working. For now I'm having to do this manually for devices. Any help would be much appreciated.

 Hi, allI'm trying to modify our original enrollment token (Intune - Fully Managed Device QR Code) so that the device can enroll using mobile data OR any wifi network.I managed to add this to an existing QR codeandroid.app.extra.PROVISIONING_USE_MOBILE_DATA":true,Unfortunately, using such a QR code on a phone that does not have mobile data transmission means that the enrollment process no longer asks for the WIFI network and ends in failure.To sum up, I want to create an enrollment code that works as follows:1. Allow enrollment using mobile data.2. If mobile data does not work - ask for any WIFI.

Hi All, I want to implement VPN capability in my EMM Console, But I am unable to find the reference JSON in the google developer site, nor any comprehensive guides on the subject. I have one option that allows me to enable or disable the VPN, I want to build the complete VPN capabilities in the Console using Android EMM APIs. Can some one help?@Lizzie @jeremy  Thanks,Farkhaleeth 

After registering a device in the portal and linking it to an enterprise using the enterprise ID, I deleted the enterprise. However, the device status remains as “already linked,” preventing me from linking it to a new enterprise. @jasonbayton 

Hi,I created an Android application that has to run on a fully managed device.I have to make it the only application installed on a device and running on a Kiosk Mode.I tried provisioning the device using QR Code, to do it I do the following: Created an activity extending DeviceAdminReceiver.   import android.app.admin.DeviceAdminReceiver class AdminReceiver : DeviceAdminReceiver()    Added it into the manifest:    <receiver android:name=".kioskmode.AdminReceiver" android:exported="true" android:label="@string/app_name" android:permission="android.permission.BIND_DEVICE_ADMIN"> <meta-data android:name="android.app.device_admin" android:resource="@xml/device_admin" /> <intent-filter> <action android:name="android.app.action.DEVICE_ADMIN_ENABLED" /> </intent-filter>

Hi all, I inadvertently removed the owner account from the Zerotouch portal for one of our customers, when I was setting up his google account (the link was destroyed when we created it). There was only 1 owner set (we are only admins), so we are unable to do it from our side as there are no other owner accounts. Is there any way to add at least one owner to this account again? Or can you send me any contact to the support? Thank you for your help.

Hello - Is anyone else having issues with zero-touch deployments? My devices are saying Cant't finish setup, Zero-Touch enrollment isn't available. 

Once upon a time in a land far far away, developers and analysts used to spend hours manually debugging code, wading through endless spreadsheets, and squinting at blurry design mock-ups; until in walked AI: a knight in shiny algorithms, here to streamline our processes, drive our businesses forward, and - on occasion, make us question our trust in machines.   2024 has been a big year for AI and has touched all our lives in one way or another. Google CEO Sundar Pichai recently revealed that 25% of the code generated for new products at Google is generated by AI, so how has it impacted our businesses? Within the development arena AI has become the Swiss Army knife of tech, offering tools that write code, test software, and even predict the next time we’ll break production. A few highlights of the growth in AI we have seen this year: Code Generation: Platforms like GitHub Copilot are turning junior developers into wizards. “Type a comment, get a function” is the new motto. It’s lik

Does anyone know who to reach out to to get owner levels for managed google play? The person who managed it before is no longer with the company and we need to give access to other support personnel to add apps for our Emm. I am a "admin" but not the "owner" and because of that I can not add other individuals as admins to managed google play play.google.com/work

I would like to inquire about increasing the quota for the Android Management API.We are planning to develop technology using the Android Management API according to our customers' needs.However, since there are device quotas and query limits set per project, we need an increase.While it seems we can submit a quota increase request, I'm curious if there is a maximum limit for the increase.(Currently, we expect to need more than 30,000 devices, and this number may increase further in the future.)Additionally, I would like to know if quota increase requests can be rejected and what are some typical cases for rejection.

We are planning to use the Android Management API (AMAPI) to manage devices and work profiles within our organization. Our goal is to set up devices for educational purposes and for students, and we intend to develop our own management system using AMAPI without relying on external solutions (such as EMM solutions). We would like to know if this is feasible.Additionally, if it is possible, we are aware that there are device allocation limits (500 devices) and query limits per project. Given our estimated requirement of over 30,000 devices (with potential for further increase in the future), we would like to know if there might be any issues with requesting an increase in these limits when using a self-built management system.As we are currently in the project design phase, resolving this matter is critical for our decision to use the Android Management API. We look forward to your response.

Is it possible to bypass the PIN setup during Google Zero Touch provisioning for new devices to allow Intune to configure the Lock Screen instead? Currently, test users are prompted to create a PIN during setup, which interferes with Intune’s Lock Screen configuration.

Hello. Some months ago we were trialing Android Zero Touch with two different MDM providers: Intune and Workspace One. We have now chosen Intune, but our ZT portal is still linked to WSO. By default devices will get the Enterprise Default Profile, and that means WSO. When I go to try and link Intune with the ZT portal, after choosing my Google account it says "Already linked" and "You can make changes at any time in Linked accounts". However, there doesn't seem to be an option to unlink from WSO from within the ZT portal, and I cannot find any "Linked accounts" button. I also don't have access to WSO anymore, as ours was a trial account and the trial has expired. So I can't log in to that and unlink it. How do we unlink our ZT portal from WSO? Can anybody from Google do it on the back-end? Thank you

Hi Team, We have enrolled 100 devices using Zero touch. Could you please guide us which api we can use to fetch deviceid using IMEI or status or device enrolment using API. Regards,Balpreet

Hi all, I was taking the Android Enterprise Associate course and got to the section "Applying Learning to Customer Scenarios".  I continually get errors on the page about connecting to the LMS and also if I finally get to the last section to exit the module, the "Exit" button doesn't do anything.  I have tried this on 2 computers, 2 different browsers and on my mobile with all the same problem. Whats your thoughts?

Hello community,We have a couple of Android tablets that are used by two different Microsoft accounts.One of them is managed through the Intune company portal and the work profile.The other one we like to use the personal profile, do you know any way/app how we can remotely allow/block the apps the user can use. We want to block the user from installing other apps from the Play Store and block the use of some of the pre-installed apps.I hope my topic is in the right forum. If not, please feel free to correct me.Thanks in advance!

 When linking through my actually I am doingFirst, link customer account successfully through my EMM console.for linking account I have used zero touch iframe use dpcextra -  {"server":"","enterprise":"enterprises/enterprises_id"} after all doing this , when setting up the device the devcie ask for a qr code for enrollment.if I scan qr code enrollment start successfullyMy query wasIs zero enrollment not start automatically?if start automatically then what the thing that I am missing? When linking through zero touch customer portalTo add configuration ,I have select DPC Android Device Policy.Add DPC Extra -{"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.google.android.apps.work.clouddpc/.receivers.CloudDpcDeviceAdminReceiver","android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {"enterpriseEnrollmentToken": "TTTFDFFKKJKKJJFJFF"},"android.app.extra.PROVISIONING_WIFI_SSID": "XXXXXX","android.app.extra.PROVISIONING_WIFI_PASSWORD": "XXXXX","andr

Hi,     Having problems with new devices getting added to our ZeroTouch portal with the 'enterprise default configuration'.   They do not get provisioned with any profile, and ends up asking for QR code at setup time on device. Even though i have assigned a configuration as the standard configuration under the configuration "blade".   If i assign the same configuration directly / manually later to a device, it works just fine, but that kinda removes the automation out of this process.   So are we missing something or why it's not working?   ALSO, how can we get notified by email when new device are added to the portal ?     Thanks,   Francois      *[Title update - moved by admin to make new topic]

 I am reaching out to report an issue I have encountered while taking the Android Enterprise Associate course, specifically in the section titled "Applying Learning to Customer Scenarios." The issues I am experiencing are as follows:Frequent errors related to connecting to the LMS, making it difficult to progress smoothly through the module.Once I reach the last section, the "Exit" button is unresponsive, preventing me from completing the module.To troubleshoot, I have tried the following:Accessing the course on two different computers (Windows and macOS) and my mobile device.Using multiple browsers, including Safari, Chrome and FirefoxUnfortunately, the same issues persist across all devices and browsers. I would greatly appreciate your assistance in resolving this matter, as it is currently blocking my progress. Please let me know if you need any additional details or if there are any troubleshooting steps I should attempt on my end.Looking forward to yo

Can we do offline kiosk mode?

Hi,We have few customers reporting that they are not able to install applications in personal profile after work profile is setup. If they remove work profile they are able to install any application they want. Have we seen this behavior before? If the have work profile and try to install applications in personal profile they just get the error. `Can't install <appname>`.I validated that one of the device has enough storage(about 100gb). And the device logs is not showing anything obivous.