Not able to set email via android's app restriction policy for word excel powerpoint

Question

Most microsoft apps have a feature where you can set"com.microsoft.intune.mam.AllowedAccountUPNs" via android's app restrictions ( https://developer.android.com/reference/android/content/RestrictionsManager ) Most of the microsoft apps on android use this feature where an MDM can set this and the app then restricts the account that can be configured on the device.

We are running into an issue with the Microsoft word, excel and power points apps where if we use this app restriction, then the app just shows a blank screen. We have tried uninstalling/reinstalling the app and cleared the cache/data multiple times. Using the "com.microsoft.intune.mam.AllowedAccountUPNs" ( https://learn.microsoft.com/en-us/intune/intune-service/apps/app-configuration-policies-use-android ) always results in this white screen. Other apps like outlook, teams, edge, onedrive and the office 365 app work fine with this setting.

Following is a screen shot of what we get with the word app when used with this setting. Please note that we do not use intune or MAM and are using a third party MDM.

Answer 1

For Microsoft 365 (Office) apps on Android, including Word, Excel, and PowerPoint, the com.microsoft.intune.mam.AllowedAccountUPNs key is supported only in the context documented for:

• Managed Android Enterprise devices using an MDM app configuration policy (Managed Devices ACP), and
• Scenarios where the apps are deployed and managed according to the Intune/Android Enterprise model.

The documentation explicitly ties the “only allow work or school accounts” behavior for Microsoft 365 (Office) for Android to:

• Android Enterprise enrollment, and
• App configuration delivered through the Android Enterprise managed‑configurations channel, with Office deployed from Managed Google Play.

It also notes that this configuration scenario “only works with enrolled devices” but that any UEM provider is supported, provided that the provider correctly delivers the documented keys and values.

In practice this means:

1. The device must be enrolled as Android Enterprise (work profile / fully managed / COPE) and the Office apps must be the Android Enterprise versions from Managed Google Play.
2. The app configuration must be sent as a Managed Devices App Configuration Policy using the exact, case‑sensitive key names. For Word/Excel/PowerPoint this is part of the Office Hub configuration; the same com.microsoft.intune.mam.AllowedAccountUPNs key is honored only in that supported configuration path.
3. Using the RestrictionsManager / legacy app‑restriction mechanism outside of the Android Enterprise managed‑configurations channel, or against consumer/non‑managed builds of the apps, is not a supported configuration path for Office and can result in undefined behavior such as the blank/white screen being observed.

Because Outlook, Teams, Edge, and OneDrive are handling the key correctly in the current setup but Word/Excel/PowerPoint are not, the behavior aligns with the documentation: Office mobile requires the Android Enterprise + Managed Google Play + managed‑configurations flow, and the org‑allowed‑accounts mode is only guaranteed to work in that scenario.

To resolve the issue, the environment must be aligned with the documented, supported configuration model:

1. Ensure Android Enterprise enrollment is used for the devices.
2. Deploy Microsoft 365 (Office) for Android from Managed Google Play via the UEM.
3. Deliver the com.microsoft.intune.mam.AllowedAccountUPNs key as part of a Managed Devices app configuration policy for the Office Hub/Office mobile app, following the case‑sensitive key names.

If a third‑party MDM cannot deliver the configuration via the Android Enterprise managed‑configurations channel as described, or if the devices/apps are not in an Android Enterprise enrolled state, the AllowedAccountUPNs setting for Word/Excel/PowerPoint is not supported and may continue to produce the blank screen.

---

References:

• Add App Configuration Policies for Managed Android Enterprise Devices
• Manage Collaboration Experiences in Microsoft 365 (Office) for iOS and Android With Microsoft Intune
• Step 2. Configure Microsoft Outlook