This guide details the procedure for deploying applications on Android Management API (AMA) Zero-Touch enrolled devices, ensuring controlled access to software assets while restricting unauthorised installations.
Overview of AMA Zero-Touch App Deployment
Using Android Management API (AMA) Zero-Touch, administrators can enforce strict Google Play Store operational modes and manage application accessibility across corporate devices. Deploying applications via the self-service My Catalogue interface ensures employees can access required business tools without opening the device to unapproved third-party software.
Configure Google Play Store Mode
- Log in to the Mobile Guardian Dashboard and navigate to Profiles.
- Select the target profile and click the Edit (Pencil) icon under Actions.
- Under the What tab, select Restrictions and open the Android options.
- Locate the Google Play Store Mode dropdown menu:
- Unspecified: Reverts to system default (Whitelist mode).
- Whitelist: Strictly restricts store access to apps explicitly designated in policy; all non-whitelisted apps are automatically removed.
- Blacklist: Keeps all Play Store apps accessible by default, restricting only software explicitly placed on the blocklist.
- Select Blacklist mode to establish open default access for managed deployment workflows, or select Whitelist mode for high-security environments.
Assign Approved Applications
- Remaining within the profile configuration screen, navigate to the Applications settings section.
- Select and add all required corporate applications to the profile's approved list.
- Define the deployment method (e.g., assigning target tags to populate the apps within My Catalogue).
Sync Policy & Deploy via Self-Service
- Click Save to commit the profile updates.
- Ensure the profile syncs to targeted endpoints to apply the updated Google Play Store restrictions and application manifests.
- On the managed endpoint, employees open the Mobile Guardian App and navigate to My Catalogue.
- Employees can tap and install any approved software from the catalogue, ensuring a secure and standardised app deployment process.