Connect your Intune account to your Managed Google Play account

To support the following Android enrollment types, you must connect your Intune tenant account to your Managed Google Play account:

Refer to the following support article from Google to ensure that Android Enterprise is available in your country or region: https://support.google.com/work/android/answer/6270910

Intune makes it easier for you to configure and use Android Enterprise management. After connecting to Google Play, Intune automatically adds these four common Android Enterprise related apps to the Intune admin console:

Note

Due to interaction between Google and Microsoft domains, this step may require that you adjust your browser settings. Make sure that "portal.azure.com" and "play.google.com" are in the same security zone in your browser.

  1. If you haven't already, set the mobile device management authority to Microsoft Intune.

  2. Sign in to the Microsoft Endpoint Manager admin center, choose Devices > Android > Android enrollment > Managed Google Play. If you are using a custom Intune admin role, access to option this requires Organization Read and Update permissions.

    Android enterprise enrollment screen

  3. Choose I agree to grant Microsoft permission to send user and device information to Google.

  4. Choose Launch Google to connect now to open the Managed Google Play website. The website opens on a new tab in your browser.

  5. On Google's sign-in page, enter the Google account that will be associated with all Android Enterprise management tasks for this tenant. This Google account is the one that your company's IT admins share to manage and publish apps in the Google Play console. You can use an existing Google account or create a new one. The account you choose must not be associated with a G-Suite domain.

    Important

    Be sure to use or create an Enterprise account rather than a personal GMail account. Keep in mind that the account you use should be one that is easily shared or transferred in the case that the person setting up the Managed Google Play connection leaves the company or moves teams.

    Note

    If you are using the Microsoft Edge browser, click Sign-In in the upper right corner to sign-in to your Google account.

  6. Provide your company's name for Organization name. For Enterprise mobility management (EMM) provider, Microsoft Intune should be displayed.

  7. Agree to the Android agreement, and then choose Confirm. Your request will be processed.

    Note

    Choose a scope tag for your Managed Google Play apps. Under this section, you can select a scope tag that will apply to all newly-approved Managed Google Play apps. You must have the following permissions to interact with this section:

    • Android Sync - Read
    • Android Sync – UpdateOnBoarding

    Admins without these permissions will not be able to remove the scope tag selected on the pane. Tenant admins, or admins who are in charge of giving admin permissions to others, can update permissions in Microsoft Endpoint Manager admin center by selecting Tenant Administration > Roles.

    Important

    Only link 1 Intune account to a managed Google Play account. Linking multiple accounts is unsupported and prevents basic functionality from working as expected.

Disconnect your Android Enterprise administrative account

You can turn off Android Enterprise enrollment and management by following these steps:

  1. Retire all the following devices:
    • Android Enterprise personally-owned work profile devices
    • Android Enterprise corporate-owned work profile devices
    • Android Enterprise fully managed
    • Android Enterprise dedicated devices
  2. As an Intune administrator, sign in to the Microsoft Endpoint Manager admin center.
  3. Choose Devices > Android > Android enrollment > Managed Google Play > Disconnect.
  4. Choose Yes to disconnect and unenroll all Android enterprise devices from Intune.

Next steps

After connecting to the Managed Google Play account, you can set up Android Enterprise: