Forum Discussion

Level 1.5: Cupcake

2 years ago

Testing Apps on BYOD Work Profile

We are a game app development company and we use both company-owned and personally owned devices (BYOD) to test our apps. We have been managing BYOD as Android device administrator, but recently mig...

Level 1.5: Cupcake

2 years ago

Hi Moombas , thanks for the reply.

> we can deploy any app or apk to the devices without playstore used.
Does this refer to the EMM console?
https://support.google.com/work/android/answer/9146439
We use Intune and this feature allows us to install apps to devices, but there is a strict limit of up to 15 uploads per day. There is no explicit API and it does not seem to work for testing purposes.

Also, it does not seem to allow installation from unknown sources to the work profile in the BYOD configuration profile (from my research this seems to be a limitation of Android Enterprise).

Moombas

Level 4.1: Jelly Bean

2 years ago

We have the possibility to set this for enterprise devices via our MDM for work profiles (one setting for the work part, one for the private part):

So, i assume it's in general possible but doesn't know much about intune.

tmaeda

Level 1.5: Cupcake

2 years ago

Thanks for the info.

I previously contacted Intune and they responded that due to the Android Management API specification, there is no API to allow installation of apps from an unknown source in the BYOD work profile.
https://developers.google.com/android/management/reference/rest/v1/enterprises.policies?hl=ja#UntrustedAppsPolicy

Do other MDMs not use the Android Management API (is that possible...)?

Moombas

Level 4.1: Jelly Bean

2 years ago

I do not really know how they ensure that but the option is there and worked during my tests.

But you posted the relevant documentation from the API yourself (where default (if nothing else is provided) is disallow!), so it's there.

UntrustedAppsPolicy

The policy for untrusted apps (apps from unknown sources) enforced on the device. Replaces installUnknownSourcesAllowed (deprecated).

Enums

UNTRUSTED_APPS_POLICY_UNSPECIFIED	Unspecified. Defaults to DISALLOW_INSTALL.
DISALLOW_INSTALL	Default. Disallow untrusted app installs on entire device.
ALLOW_INSTALL_IN_PERSONAL_PROFILE_ONLY	For devices with work profiles, allow untrusted app installs in the device's personal profile only.
ALLOW_INSTALL_DEVICE_WIDE	Allow untrusted app installs on entire device.

Moombas
Level 4.1: Jelly Bean
2 years ago
And just to add: Otherwise you can set it manually on each device if not restricted by the MDM (Intune in your case).