Android device managed by MDM with APP from another tenant

Question

I have an Android device with the Company Portal app registered with one tenant. I also have an account from another tenant registered in Outlook and Teams. Recently, the IT department from the second tenant deployed app protection policies that protect the account in Outlook and Teams. Now, I no longer can use the account on the device with these apps since when I try to add them they require to unregister the account from the first tenant in the Company Portal. Is this supported at all, can MAM policies be deployed to a device which is registered to another tenant?

Answer 1

@Yordan Yordanov, Thanks for posting in Q&A. In General, App protection policies are associated with user account. When the user login the app, it will apply the App protection policy. So it can be applied to the app on a device that is registered to another tenant. However, in this scenario, other user accounts are unable to login Outlook and Teams apps since the IT department deployed app protection policies that protect the account in these apps. To use the account on the device with these apps, the user needs to unregister the account from the first tenant in the Company Portal.

---

References:

• App protection policies overview - App protection experience for Android devices
• Mobile Application Management and personally-owned work profiles on Android Enterprise devices in Intune
• Deployment guide: Mobile Application Management (MAM) for unenrolled devices in Microsoft Intune

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.