User Profile
ian
Level 1.6: Donut
Joined 3 years ago
User Widgets
Contributions
Re: Is there any way to disable Google Play Protect (GPP) from an EMM or to otherwise whitelist apps from scanning?
Hi Lizzie, thanks for replying. I'd like to echo Matt's comments. Whenever Android rolls out a new operating system update, it is a scramble to comprehend its implications for both us and our customers. The introduction of features outside the regular yearly OS release schedule are an even bigger scramble, as we're tasked with managing all our tablets deployed in the field that will receive these updates. I would love to go to our Android Enterprise settings to manage new features that come out of the new Android OS, but it feels like we’re stuck with no way to modify new Android features or settings. While I acknowledge Google's responsibility to safeguard end-users, these very features can sometimes have adverse effects on companies utilizing managed devices, leaving businesses unable to programmatically enable or disable certain functionalities. Consider two examples: 1. Special permissions granting: Tasks such as granting accessibility or enabling "appear-on-top" functionality necessitate manual intervention on the device to approve permissions. Guiding an end-user through this process on a tablet can be cumbersome, prone to errors, and frustrating. Oftentimes, conversations with customers reveal their realization that an app requires special permissions, which we are unable to grant automatically. This dilemma usually results in either the company deciding against deploying the application or doing so at a sluggish pace, involving hands-on devices to manually grant those permissions. Neither of these options offers an optimal user experience. 2. Google Play Protect (GPP): Pop-ups displaying "Unsafe App Blocked" for mission-critical applications, even if bypassing the block is permitted, sometimes raise concerns among our end-users. The current workaround involves manually disabling GPP on each device, a less-than-ideal solution due to the number of manual steps (eight) required for every single tablet. Moreover, this approach is reactive, triggered only after the GPP pop-up occurs. Consequently, we find ourselves in a position where we must either proactively inform our customers about the significant impact of the latest Android version on their environment, lag behind in supporting the newest Android versions, or devise engineering workarounds to address the features introduced by Google.23KViews3likes0CommentsRe: Is there any way to disable Google Play Protect (GPP) from an EMM or to otherwise whitelist apps from scanning?
You might be able to file an appeal with Google to perhaps prevent your applications from being removed, however I don't think that they will tell you exactly why your app was being removed on GPP. You will likely need to make sure you're following best practices on your application. You can file an appeal here: https://support.google.com/googleplay/android-developer/contact/protectappeals?sjid=3396504988404039213-NC23KViews0likes0CommentsRe: Is there any way to disable Google Play Protect (GPP) from an EMM or to otherwise whitelist apps from scanning?
This would be an acceptable fix. If we have DO permissions on the device, it seems that whatever has DO permissions should own what is on the device - including the applications. The owner should be able to see the applications on the device and flag them saying "yes, that's mine - don't touch it."25KViews5likes0CommentsRe: Is there any way to disable Google Play Protect (GPP) from an EMM or to otherwise whitelist apps from scanning?
We also need a programatic way of disabling this. This pop-up is invasive, and blocks applications that we have knowingly put on managed devices. While this might be a good thing for individual users - Google taking action on behalf of fully managed devices is a problem, and we need to be able to disable this programmatically to keep those applications on the device.25KViews7likes0Comments