First published on TechNet on Mar 03, 2017
Author: Chris Baldwin, Senior Program Manager
Android for Work requires that you "approve" applications in Google's managed Play web console before syncing them to Intune and deploying them to your users. Because Android for Work allows you to silently and automatically push these apps to users' devices, you must accept the app's permissions on behalf of all your users at approval time. End users will not see any app permission prompts at installation time, so it's important that IT admins read and understand these permissions before approving.
But what happens when the app developer publishes a new version of the app with additional permissions? New permissions will not automatically be accepted, even if you've already approved the app.
Here's what will occur:
We recommend that you periodically visit the managed Google Play console and check for new permissions to be updated. If you deploy an app and observe that it's not being installed on the device, the first thing to check would be to see if the app requires new permissions.
We recognize visiting Play to look for new permissions isn't ideal, and we're working to improve that based on your feedback. Intune is planning some features in the admin console to more visibly alert IT admins when apps update their permissions. Stay tuned for that.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.