Hi everyone,I'm a developer who helps enterprises build custom DPC (Device Policy Controller) Reference Documentation apps to manage Android devices based on their unique requirements.Recently, Play Protect has started blocking the installation of custom DPC apps, even when these apps are signed and used internally. The warning claims the app may pose a risk due to access to sensitive data - even though it's strictly for enterprise use. To make things more difficult:Google is no longer accepting registration of custom DPC apps with Android Enterprise, which limits official distribution and management options.Android Management APIs don’t support all use cases, and also have quote limit.I’ve applied twice to join the Android Enterprise portal to build a SaaS-based device management platform, but both requests were rejected without a clear reason. My questions for the community:Is there any official way to get a custom DPC app approved or whitelisted by Play Protect?Are there any alternative ways to manage Android devices at scale (outside of AMAPI or legacy EMM)?How can new developers or startups gain access to Android Enterprise features when onboarding is currently restricted?Any help, direction, or shared experience would be greatly appreciated. Thanks,Kulwinder

Level 2.0: Eclair

Solved

Play Protect Blocking Custom DPC Apps — How to Get Approval or Alternatives?

18 replies
602 views
Translate All • Beta, powered by Gemini

Hi everyone,

I'm a developer who helps enterprises build custom DPC (Device Policy Controller) Reference Documentation apps to manage Android devices based on their unique requirements.

Recently, Play Protect has started blocking the installation of custom DPC apps, even when these apps are signed and used internally. The warning claims the app may pose a risk due to access to sensitive data - even though it's strictly for enterprise use.

To make things more difficult:

Google is no longer accepting registration of custom DPC apps with Android Enterprise, which limits official distribution and management options.
Android Management APIs don’t support all use cases, and also have quote limit.
I’ve applied twice to join the Android Enterprise portal to build a SaaS-based device management platform, but both requests were rejected without a clear reason.

My questions for the community:

Is there any official way to get a custom DPC app approved or whitelisted by Play Protect?
Are there any alternative ways to manage Android devices at scale (outside of AMAPI or legacy EMM)?
How can new developers or startups gain access to Android Enterprise features when onboarding is currently restricted?

Any help, direction, or shared experience would be greatly appreciated.

Thanks,

Kulwinder

K

KulwinderAnswer

Level 2.0: Eclair

Hi Everyone,

After lot investigation I found the root cause. The app included certain sensitive permissions that are not allowed by Play Protect. Once I removed those restricted permissions, the app stopped getting flagged and worked as expected.

For more details, Google provides guidance on Play Protect warnings and how to avoid them here:

https://developers.google.com/android/play-protect/warning-dev-guidance

Hope this helps anyone running into the same challenge!

V

vicky_android

New Member

It is happening from Amdroid 15 correct?? Mine too.

Translate • Beta, powered by Gemini

K

KulwinderAuthor

Level 2.0: Eclair

Yes, At first it started with android 15, But Now in samsung device it's also blocking the app in android 14

Translate • Beta, powered by Gemini

S

sandipta

New Member

Same problem here

Translate • Beta, powered by Gemini

R

rahul14rz

New Member

I'm facing the same issue. The app is used internally, but Google Play Protect has started blocking it from Android 15. I have submitted an appeal regarding this here, but I haven’t received a response from support yet. I’d appreciate hearing the community’s thoughts or experiences regarding this.

Translate • Beta, powered by Gemini

xmahbub

New Member

I believe I am experiencing the same issue on some of my devices. I receive an error stating 'Cannot set up IT admin,' followed by a Google Play Protect pop-up. Any way to make the app trusted?

Translate • Beta, powered by Gemini

jasonbayton

Level: 4.1: Jelly bean

What's the content of the popup? It could be a simple request for scan. The cannot set up error is likely unrelated

Translate • Beta, powered by Gemini

S

steve_mdm

Level 1.6: Donut

I have just hit the same issue on an Android 12 device with our custom DPC. This is a configuration that has previously been working just fine.

"This app can install potentially harmful apps without your permission"

This is for fully managed devices only (Device Owner) in a strictly controlled environment.

Installing apps with minimal intervention is the main point.

Anybody got around this yet? Do we need to apply to Google for an exemption?

Translate • Beta, powered by Gemini

jasonbayton

Level: 4.1: Jelly bean

Is your DPC on Google Play @steve_mdm? If not, publishing it there may help.

Translate • Beta, powered by Gemini

S

steve_mdm

Level 1.6: Donut

@jasonbayton It is not on Play and the use case precludes it.

Basically the system including the DPC must be available on air gapped or intermittent networks so we must be able to download from a local source. This is also why we need the DPC to be able to install other apps from the same source. It's like an app store but only the content management part, not selling apps. Users will have mandatory apps and optional apps. All the apps will have license agreements in place and all third party developers will be aware of what is happening. All the users will also be fully aware. The Android devices will be fully managed and absolutely not for personal use.

Thinking about it, I suppose we could put it on Play as well but I'm not sure if it just being there but not downloaded from there would help.

Translate • Beta, powered by Gemini

K

KulwinderAuthorAnswer

Level 2.0: Eclair

Hi Everyone,

After lot investigation I found the root cause. The app included certain sensitive permissions that are not allowed by Play Protect. Once I removed those restricted permissions, the app stopped getting flagged and worked as expected.

For more details, Google provides guidance on Play Protect warnings and how to avoid them here:

https://developers.google.com/android/play-protect/warning-dev-guidance

Hope this helps anyone running into the same challenge!

Translate • Beta, powered by Gemini

amsurana

New Member

Thanks for this link, it helped me solve the issue as well.

I will elaborate on the exact issue I was facing.

In our DPC we removed all the service and permissions related to NOTIFICATION_LISTENER and SMS.

Google Protect then let our DPC app to be installed via QR code.

- Amit S
https://fieldx.io

Translate • Beta, powered by Gemini

A

AdarshRevankar

New Member

Hi Amit,

I'm facing issue where our Custom DCP application is blocked on Android 15 or above devices for QR code provisioning.

I have tried creating a new release build with very limited permissions. But still I'm facing the issue on the same package signature for QR code provisioning.

I'm not yet enrolled to Android Enterprise program. But I have appealed for the application via Appeal Form.

Is it possible to help or guide me what can be done ?

Thanks

Adarsh

(This post was edited to remove personal information, in compliance with our guidelines)

Translate • Beta, powered by Gemini

A

AdarshRevankar

New Member

I got into the smartphone monitoring application that I was developing. Working fine on android 14 or below devices. But on android 15 / 16 facing issue where 'App Blocked' error popup

I tried below methods :

Updated package name
Tried with PACKAGE checksum instead of SIGNATURE
Created a sample project with no-code just simple UI to enrol

Nothing seems to work. I believe it's not about the code in my scenario. It should have allowed new package names at least. There is something else which is making my app not work on Android 15/16 devices.

Suggestions will be appreciated !

Translate • Beta, powered by Gemini

Sign up

Login with SSO

Login to the community

Login with SSO