SuperOps MDM allows you to remotely install and uninstall applications on your managed Android devices, ensuring they are equipped with the necessary software. You can deploy apps from the Google Play Store by creating reusable software bundles or by adding them directly to an Android device policy.
Prerequisites
Before app management actions can take place:
Android Enterprise integration must be successfully configured.
Devices must be enrolled under SuperOps MDM.
Devices must have Wi-Fi connectivity for app installation or uninstallation.
Under "App Restrictions", "Install Apps" and "Uninstall Apps" must be toggled ON ( Details mentioned below )
Note: For BYOD devices, apps can be installed and managed only within the Work Profile.
App Restrictions
Before starting device management, it’s recommended to configure the appropriate app restrictions applicable to the devices. This applies for both BYOD and fully managed devices.
Key Controls
Install Apps:
Allows app installations. If turned off, both SuperOps MDM and users cannot install apps (including managed apps).Uninstall Apps:
Allows app removals. If turned off, both SuperOps MDM and users cannot uninstall apps.Picture-in-Picture:
Restricts apps from displaying floating windows.Play Store Mode:
Controls which apps are visible in the Play Store.Allow All Apps: Users can access all Play Store apps.
Managed Apps: Only admin-approved apps remain; all others are removed.
(Managed Apps are defined in the App Management configuration section explained in the later sections of this article.)
Install Untrusted Apps:
Defines whether apps from unknown sources can be installed.Disallowed: Users cannot install from unknown sources.
Allowed: Users can install from unknown sources.
Personal Profile Only: Users can install apps only in their personal space (BYOD only).
Google Play Protect Verification:
Ensures app verification before installation.Developer Settings Configuration:
Enables or disables access to developer options.
App restrictions define how applications are installed, uninstalled, and managed on devices. You can control Play Store access, installations from unknown sources, and more.
Understanding App Installation Restrictions
The Play Store Mode, Install Apps, and Uninstall Apps settings work together to provide precise control over application management. The table below explains how these settings interact:
How It Works
Play Store Mode: Controls which apps are visible in the Play Store.
Install Apps: Determines if apps can be installed (including managed apps).
Uninstall Apps: Determines if apps can be removed by the user or MDM.
Play Store Mode | Install Apps | Uninstall Apps | User Permissions |
Allow All Apps | Enabled | Enabled | Users can view, install, and uninstall any app from the Play Store. |
Managed Apps | Enabled | Enabled | Users can only view and install admin-approved Managed Apps. They can only uninstall Managed Apps. |
Any Mode | Disabled | Enabled | Users cannot install any apps (including managed ones). They can only uninstall apps as permitted. |
Any Mode | Enabled | Disabled | Users can install apps (based on Play Store Mode) but cannot uninstall them. |
Any Mode | Disabled | Disabled | Users and the MDM cannot install or uninstall any apps. |
Note: When you switch the Play Store Mode from “Allow All Apps” to “Managed Apps Only,” all non-managed apps will be automatically uninstalled from the device.
Managing App installations and uninstallations
SuperOps works with Google play store to help you manage Apps on your Android devices. Apps can be deployed to Android devices through SuperOps Policy Sets (Settings → Android Policies → App Management). Before deploying apps, you can group all the applications you intend to manage under Software for easier organization and deployment.
Creating an Android Software Bundle
Software bundles allow you to group applications together for easy deployment across multiple policies.
Navigate to Settings -> Software Bundle. Click "Create Software Bundle" and choose "Android"
On the 'New software bundle' page, click Add from Play Store to begin selecting applications.
A window will open, allowing you to browse and select public apps from the Google Play Store. As you select apps, they will appear in the 'SELECTED APPS' list on the right.
Click Add to include the selected applications in your bundle. Next, provide a descriptive name for the bundle, such as 'Android Enterprise Apps'.
Click Save to finalize the creation of your software bundle.
Applying Software to an Android Device Policy
Once you have created a software bundle, you can apply it to a policy to deploy the apps to all associated devices. You can also add individual apps directly within the policy.
Navigate to Policy Management from the left-hand settings menu and select Android Device Policies.
Within the policy settings, go to the App Management section and ensure the feature is toggled on.
To add the bundle you created, click Add Bundle. Select the 'Android Enterprise Apps' bundle from the list and click Add.
To add individual applications without using a bundle, click Add from Play Store. Select the apps you wish to add, such as 'Shopify' and 'Google Ads'.
Click Add to include these individual apps in the policy. The App Management section will now list both the software bundle and the individual apps.
Finally, click Save to apply these changes. The apps will be installed on all Android devices assigned to this policy the next time they connect to Wi-Fi.
Understanding App Deployment Logic
The system intelligently handles app installation and uninstallation to keep your devices compliant:
New devices: During enrollment, all apps defined in the assigned policy are installed automatically once the device is connected to Wi-Fi.
Existing devices: When you add a new app to a policy, the installation command is pushed to all devices under that policy. The app will be installed the next time the device is online.
App already exists: If an app is already installed on a device, the installation request will be skipped to avoid duplication.
Uninstallation: To uninstall an app, simply remove it from the policy. The uninstall command will be pushed immediately to all assigned devices, and the app will be removed.