Edit

Share via

Step 6. Configure other apps

  • Article

App configuration policies can be deployed based on the Managed devices channel or the Managed apps channel. It's important to know the different capabilities that each channel offers. For more information about these channels, see Delivery channels for app configuration policies.

Note

Not all apps integrated with the Intune App SDK or the Intune App Wrapping Tool include configuration settings, however those apps may include app protection settings.

Additionally, you can use Graph API to accomplish app configuration tasks. For details, see Graph API Reference MAM Targeted Config. For more information about Intune and Graph, see Working with Intune in Microsoft Graph.

App configuration policies for the Managed devices channel

When you choose Managed devices,** you can choose to target your app configuration policy to either iOS/iPadOS or Android Enterprise devices. For iOS/iPadOS apps, you can choose a single associated Built-In iOS app or iOS store app. For Android Enterprise apps, you can choose a single associated Managed Google Play store app or Managed Google Play web link.

When you select the Managed devices channel, you find that iOS/iPadOS has different standard configuration options than Android Enterprise. When you select iOS/iPadOS as the platform for your configuration policy, you can add standard configuration keys for the specific app. When you select Android Enterprise as the platform for your configuration policy, you must select a Profile Type that specifies how your app is targeted based on the Android device profile. Additionally, you can add standard configuration keys for the specific app, and you can also choose to enable Connected apps.

Configure specific Android Enterprise apps

Managed Home Screen, Google Chrome for Android, and Microsoft Launcher are Android Enterprise apps that can be configured for the Managed devices channel. Each of these apps supports configuring the following areas:

Note

You must adhere to the following prerequisites:

For more information about configuring these apps, see the following resources:

Android Enterprise app configuration permissions

When creating an app configuration policy for an Android Enterprise device using the Managed devices channel, you can add Permissions within the Settings pane. Permissions granted will override the "Default app permissions" policy for the selected apps. You can set the Permission state for each permission. You can choose from Prompt, Auto grant, or Auto deny. By default, Android apps that require device permissions, such as access to location or the device camera, prompt users to accept or deny permissions. For more information, see Preconfigure the permissions grant state for apps.

Android Enterprise app configuration settings

If the managed app supports configuration settings, the Configuration settings format dropdown box is visible. You can set the configuration values by using either the configuration designer or by entering JSON data. Both methods accomplish the same configuration setting results. Additional, setting keys, types, and values may be available for the specific app. Check with the app developer to determine if there are additional configuration settings available for an app. For more information, see Add app configuration policies for managed Android Enterprise devices.

Connected apps configuration

You can allow users using Android personally owned and corporate-owned work profiles to turn on connected apps experiences for supported apps. This app configuration setting enables apps to connect and integrate app data across the work and personal app instances. For example, connecting a calendar app can show work and personal events together. Some apps might not support connected apps. Additionally, this setting only works for personally owned and corporate-owned work profile devices. For more information, see Enable connected apps.

App configuration policies for the Managed apps channel

When you choose the Managed apps channel, you can choose you can select the app(s) you would like to target with the policy. You can target an app configuration policy to Selected apps, All apps, All Microsoft apps, or Core Microsoft apps. All Apps include all Microsoft and partner apps that have integrated the Intune SDK. Microsoft Apps include all Microsoft apps that have integrated the Intune SDK. Core Microsoft apps include a set of specific Microsoft apps. Selected apps allows you to apply an app configuration policy to specific apps. These specific apps can include Public apps and Custom apps. Public apps are apps contained in a predefined app group, such as store apps that you have added to Intune. Custom apps are apps that you that you have added from an app store and have also added to Intune.

Note

The MAM channel supports Microsoft Launcher and includes general configuration settings and Microsoft Tunnel settings.

Core Microsoft Apps

As part of targeting the Managed apps channel, you can select to only target Core Microsoft apps. The Core Microsoft apps group includes the following Microsoft apps:

  • Edge
  • Excel
  • Office
  • OneDrive
  • OneNote
  • Outlook
  • PowerPoint
  • SharePoint
  • Teams
  • To Do
  • Word

Google apps and the settings catalog

With the settings catalog, you can choose which settings you want to configure for specific Android apps using the Managed apps channel. Click on Add settings to browse or search the catalog for the settings you want to configure.

Microsoft Tunnel for Mobile Application Management settings

Microsoft Tunnel is a VPN gateway solution for Microsoft Intune that runs in a container on Linux and allows access to on-premises resources from iOS/iPadOS and Android Enterprise devices. When you use the Microsoft Tunnel VPN Gateway, you can extend Tunnel support by adding Tunnel for Mobile Application Management (MAM). Tunnel for MAM extends the Microsoft Tunnel VPN gateway to support devices that run Android or iOS, and that aren't enrolled with Microsoft Intune.

Note

This capability is available when you add Microsoft Intune Plan 2 or Microsoft Intune Suite as an add-on license. For more information, see Use Intune Suite add-on capabilities.

For more information about Microsoft Tunnel for MAM, see Microsoft Tunnel for Mobile Application Management.

Managed apps configuration settings

Similar to app configuration policies for managed devices, if the managed app supports configuration settings, the Configuration settings dropdown box is visible. You can set the configuration values by using either the configuration designer or by entering JSON data. Both methods accomplish the same configuration setting results. Additional, setting keys, types, and values may be available for the specific app. Check with the app developer to determine if there are additional configuration settings available for an app.

Obtain settings for other apps

Not every app supports app configuration. Check with the app developer to see if their app supports app configuration policies or for troubleshooting specific app configuration settings. For a list of Microsoft and partner apps, see Microsoft Intune protected apps.

Custom apps

A line-of-business (LOB) app is an app that you add to Intune from an app installation file. This kind of app is typically written in-house. Intune installs the LOB app on the user's device. An organization that creates a LOB app can integrate that app with Intune using the Intune App SDK for iOS or Android.

Win32 apps that your organization creates can be added to Intune. These apps are a type of LOB app. When you add a Win32 app to Intune, you can select to customize specific installation settings, such as the how the app is installed and uninstalled. The amount of time required to install the app. Any actions associated with installing the app, such as restarting the device. Additionally, you can set specific requirements when you're adding a Win32 app, such as Operating system architecture, Minimum operating system, Disk space required (MB), Physical memory required (MB), Minimum number of logical processors required, and Minimum CPU speed required (MHz). You can also add requirement rules, detection rules, app dependencies, and app supersedence. For more information, see Win32 app management in Microsoft Intune.

Next step

Step 7 - Verify app configuration

Continue with Step 7 to verify other apps in Microsoft Intune.