The Google Play EMM API includes a
Devices resource that represents each entity that’s managed by an EMM and associated with a specific user. At your customer sites, devices are managed using your EMM console and your
device policy controller (DPC). Organizations provide apps to users through
managed Google Play.
Devices and management types
If your DPC manages an entire device, the device has a
managementType value of
managedDevice. If your DPC manages only the work profile, the device has a
managedProfile , which represents only the managed profile on the physical device. These devices are called “managed devices.”
Devices with an
unmanagedProfile management type are called “unmanaged devices,” including:
- Legacy devices that run Android versions earlier than 5.0 or don’t support work profiles.
- Devices that aren’t controlled by a DPC and don’t have
managedProfileas their management type. For example, a G Suite administrator at an organization could allow users to add their corporate email accounts to their personal Android devices without setting up a work profile.
What you can do with the unmanagedProfile management type
unmanagedProfile management type, users of legacy devices can get apps through their organizations’ managed Google Play store, and:
- Access private apps that are made available to them using per-user and per-app ACLs.
- Draw down licences from bulk-licensed applications purchased by their business.
- Access managed Google Play to install apps recommended and curated by an administrator.
In addition, administrators can see which work apps are installed on the device.
You can use the
unmanagedProfile management type on devices that run Android versions earlier than 5.0 or devices that don’t support work profiles. If a device supports work profiles, use the
managedProfile management types.
User consent and managed Google Play
A user has to agree to the Terms of Service (ToS) presented when they attempt to access managed Google Play for the first time. After a user agrees to the ToS:
unmanagedProfilerecord is created in managed Google Play for each unmanaged device a user has.
- You can see the devices on the Google Play EMM API.
- The user can install apps in the same way as users whose devices are managed directly by your DPC.
Summary of resources, methods, and management types
|Resource and method          ||Description||
||Retrieves whether a device's access to Google services is enabled or disabled.||✔ (Google- managed users only)||✔ (Google- managed users only)|
||Retrieves a list of
||Sets whether a device's access to Google services is enabled or disabled. Requires setting up mobile device management for Android devices in the Google Admin console.||✔ (Google- managed users only)||✔ (Google- managed users only)|
||Removes the entitlement and the
app from the device.
|✔||✔||✔ (the app isn't removed from the device)|
||When invoked with the optional install parameter, attempts to install the app on the device along with assigning the entitlement to the user.||✔||✔||✔|
||Retrieves the details of an app installation on a device.||✔||✔||✔ (limited to apps installed by the work account)|
||Retrieves the details of all apps installed on a device.||✔||✔||✔ (limited to apps installed by the work account)|
||Requests to remove an app from a device.||✔||✔||✔|
||Requests to install the latest app version on a device.||✔||✔||✔|