SuperOps MDM allows you to remotely install and uninstall applications on your managed Android devices, ensuring they are equipped with the necessary software. You can deploy public apps, private apps, and web apps, either by creating reusable software bundles or by adding them directly to an Android device policy.
A public app is any app available on the Google Play Store.
A private app is a custom app that's not publicly listed, and is restricted to your organization.
A web app is a website locked into Chrome, so it behaves like a single-purpose app rather than a browser.
Prerequisites
Before app management actions can take place:
Android Enterprise integration must be successfully configured.
Devices must be enrolled under SuperOps MDM.
Devices must have Wi-Fi connectivity for app installation or uninstallation.
Under "App Restrictions", "Install Apps" and "Uninstall Apps" must be toggled ON ( Details mentioned below )
Note: For BYOD devices, apps can be installed and managed only within the Work Profile.
App Restrictions
Before starting device management, it’s recommended to configure the appropriate app restrictions applicable to the devices. This applies for both BYOD and fully managed devices.
Key Controls
Install Apps:
Allows app installations. If turned off, both SuperOps MDM and users cannot install apps (including managed apps).Uninstall Apps:
Allows app removals. If turned off, both SuperOps MDM and users cannot uninstall apps.Picture-in-Picture:
Restricts apps from displaying floating windows.Play Store Mode:
Controls which apps are visible in the Play Store.Allow All Apps: Users can access all Play Store apps.
Managed Apps: Only admin-approved apps remain; all others are removed.
(Managed Apps are defined in the App Management configuration section explained in the later sections of this article.)
Install Untrusted Apps:
Defines whether apps from unknown sources can be installed.Disallowed: Users cannot install from unknown sources.
Allowed: Users can install from unknown sources.
Personal Profile Only: Users can install apps only in their personal space (BYOD only).
Google Play Protect Verification:
Ensures app verification before installation.Developer Settings Configuration:
Enables or disables access to developer options.
App restrictions define how applications are installed, uninstalled, and managed on devices. You can control Play Store access, installations from unknown sources, and more.
Understanding App Installation Restrictions
The Play Store Mode, Install Apps, and Uninstall Apps settings work together to provide precise control over application management. The table below explains how these settings interact:
How It Works
Play Store Mode: Controls which apps are visible in the Play Store.
Install Apps: Determines if apps can be installed (including managed apps).
Uninstall Apps: Determines if apps can be removed by the user or MDM.
Play Store Mode | Install Apps | Uninstall Apps | User Permissions |
Allow All Apps | Enabled | Enabled | Users can view, install, and uninstall any app from the Play Store. |
Managed Apps | Enabled | Enabled | Install/uninstall is controlled entirely by SuperOps policy. The Install/Uninstall Apps settings have no effect. Users cannot install or uninstall apps themselves. |
Any Mode | Disabled | Enabled | Users cannot install any apps (including managed ones). They can only uninstall apps as permitted. |
Any Mode | Enabled | Disabled | Users can install apps (based on Play Store Mode) but cannot uninstall them. |
Any Mode | Disabled | Disabled | Users and the MDM cannot install or uninstall any apps. |
Note: When you switch the Play Store Mode from “Allow All Apps” to “Managed Apps Only,” all non-managed apps will be automatically uninstalled from the device.
Managing App installations and uninstallations
SuperOps works with Google play store to help you manage Apps on your Android devices. Apps can be deployed to Android devices through SuperOps Policy Sets (Settings → Android Policies → App Management). Before deploying apps, you can group all the applications you intend to manage under Software for easier organization and deployment.
Creating an Android Software Bundle
Software bundles allow you to group applications together for easy deployment across multiple policies.
Navigate to Settings -> Software Bundle. Click "Create Software Bundle" and choose "Android"
On the 'New software bundle' page, click Add from Play Store to begin selecting applications. A window will open, allowing you to browse and select public, private or web apps.
Public apps: You can choose public Apps from google play store and the selected Apps will be displayed.
Private Apps : To add a private app, click Add from Play Store, then select Private Apps from the left sidebar.
Click Add, then select Private Apps to open the Private app form.
Enter a Title (maximum 30 characters).
Click Upload App and select your app file (.apk or .aab)
The package name must be unique. You cannot reuse a package name already used on the public Play Store or by another app in your private apps list. If the package name is already in use, you'll see an error as soon as the upload finishes.
Click Create. Google will validate the app file, including a check on the package name as well as a security and versioning review. While validation is in progress, the app will show as "Not available yet." This typically takes around 10 minutes.
Note : Google does not publish full details on its validation checks for private apps. If you run into a validation error that isn't explained in SuperOps, refer to Google's documentation on managing private apps.
Once available, select the app and click Add.
Make sure the first person to upload a private app is the right person for this role, ideally your MDM administrator. Changing the admin later is possible, but requires extra steps in Google Play Console, so it's worth getting this right from the start.
Updating a private app
Go to your Private Apps list, open the app you want to update, select Edit, and upload the new version.
Web Apps : To add a web app, click Add from Play Store, then select Web Apps from the left sidebar.
Click Add, then select Web Apps to open the New web app form.
Enter a Title. This is the name shown in the device UI.
Enter the URL you want Chrome to open.
Choose a Display mode:
Full screen, the web app uses the entire screen, with no browser chrome visible
Standalone, shows the phone's navigation and status bars
Minimal UI, shows navigation and status bars, plus the URL bar and refresh button
Optionally, upload an icon (must be a maskable 512px square PNG or JPEG).
Click Create. The app will show as "Not available yet" while Google validates the URL. This typically takes 5 to 10 minutes.
Once available, select the app and click Add.
Note : A web app requires Google Chrome to be installed on the target device. It will not work with any other browser.
Click Add to include the selected applications in your bundle. Next, provide a descriptive name for the bundle, such as 'Android Enterprise Apps'.
Click Save to finalize the creation of your software bundle.
Applying Software to an Android Device Policy
Once you have created a software bundle, you can apply it to a policy to deploy the apps to all associated devices. You can also add individual apps directly within the policy.
Navigate to Policy Management from the left-hand settings menu and select Android Device Policies.
Within the policy settings, go to the App Management section and ensure the feature is toggled on.
To add the bundle you created, click Add Bundle. Select the 'Android Enterprise Apps' bundle from the list and click Add.
To add individual applications without using a bundle, click Add from Play Store. Select the apps you wish to add, such as 'Shopify' and 'Google Ads'. You can also add private apps or web-apps from this section.
Click Add to include these individual apps in the policy. The App Management section will now list both the software bundle and the individual apps.
Finally, click Save to apply these changes. The apps will be installed on all Android devices assigned to this policy the next time they connect to Wi-Fi.
Understanding App Deployment Logic
The system intelligently handles app installation and uninstallation to keep your devices compliant:
New devices: During enrollment, all apps defined in the assigned policy are installed automatically once the device is connected to Wi-Fi.
Existing devices: When you add a new app to a policy, the installation command is pushed to all devices under that policy. The app will be installed the next time the device is online.
App already exists: If an app is already installed on a device, the installation request will be skipped to avoid duplication.
Uninstallation: To uninstall an app, simply remove it from the policy. The uninstall command will be pushed immediately to all assigned devices, and the app will be removed.