Create and add custom package to user group
To add a custom package to a user group, follow the instructions for the custom package type, as described below.
Application availability package
An application availability package enables you to manage user access to applications in addition to the default set of approved applications created in Google EMM (Android Enterprise).
You can create additional restrictions, allowing users to download only a subset of approved applications selected in the package. You can also relax the restrictions, allowing users to download all applications on Google Play.
To add an application availability package to a user group:
In the Domain browser, navigate to the user group to which the package is to be added.
On the Packages tab, select Add package and then select Create custom package.
Select Application availability (Google EMM), by searching or browsing the list, and then select Select custom package.
In the Name box, enter a unique name for the package.
Optionally, in the Description box, enter a description of the package. The description is used to distinguish the package from other packages in the domain.
Select which set of applications should be available to the user:
To allow users to download all applications on Google Play, select All applications, and then go to Step 8.
This option overrides the default set of approved applications.
To allow users to download the default set of approved applications, select All approved applications, and then go to Step 8.
To allow users to download only the applications selected in this package, select Only selected applications, and then go to Step 7.
This option overrides the default set of approved applications.
Add one or more applications to the package by selecting it from the list of available applications.
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 9.
Select Create package.
The package is added to the user group. The package settings will be assigned to all devices in the user group, and underlying user groups, that are enrolled as Android Enterprise (Google EMM) and that are targeted by the smart filters (if any) added to the package.
Note
If the application availability package is removed from the user group, the settings for the devices will return to the default setting made in the Domain Administrator under Services/Google EMM Services/Access to Application.
Application configuration package
This package adds a configuration to a managed Android application. Use the package to manage multiple configuration variants for an application.
An application configuration package must always be used in combination with an application package. The application configuration package determines the configuration for the managed application in the application package.
To add different configurations to an application depending on where in the domain hierarchy the application is used, create one application package for the managed application, and one application configuration package for each configuration variant. Add the application package and one of the application configuration packages to each relevant user group. The application configuration package added to a user group determines the configuration for the application in that specific user group.
To create and add an application configuration package to a user group:
In the Domain browser, navigate to the user group to which the application configuration package is to be added.
Add the application package containing the managed application in question to the user group, either by adding an already existing package to the user group, according to Manage device settings using packages or by creating it directly in the user group, see Create and add application package to user group.
Note
The application package must not contain any configurations for the application.
On the Packages tab, select Add package and then select Create custom package.
Select Application configuration profile by searching or browsing the list, and then select Select custom package.
Select the application in question from the list of available applications, and then select Enter package details.
In the Name box, enter a unique name for the package.
Optionally, in the Description box, enter a description of the package. The description is used to distinguish the package from other packages in the domain.
Select Add configuration.
A configuration window appears.
Set a configuration for the application, and select Save.
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 11.
Select Create package.
The package is added to the user group. The configured application will be assigned to all the devices in the user group, and underlying user groups, that comply with the package profile.
Custom configuration profile package
This package enables you to apply custom configuration profiles to Apple devices.
Use Apple Configurator 2, available on the Apple App Store, to build the configuration profile. The resulting .mobileconfig file is used when creating the package, as described below.
To add a custom configuration package to a user group:
In the Domain browser, navigate to the user group to which the package is to be added.
On the Packages tab, select Add package and then select Create custom package.
Select Custom configuration profile by searching or browsing the list, and then select Select custom package.
Enter the following general settings for the package:
Name: A unique name for the package.
Description (optional): A description of the package may be added. The description is used to distinguish the package from other packages in the domain.
Upload the .mobileconfig file for the configuration profile. You can either select Select a file and then browse for the file, or drag and drop the file in the indicated area.
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 7.
A smart filter limits the impact of a package to target only devices that are tagged, or not tagged, with specific tags.
Select Create package.
The package is added to the user group. The package settings will be assigned to all devices in the user group that comply with the package profile. The settings will also be assigned to all package profile compliant devices in the user groups located beneath the user group in the domain hierarchy.
Device allowances package
A device allowances package can be applied to Android devices, primarily in Device Owner mode, to allow the end user to access certain features and functionality. The package can for example allow the end user to backup the device, install applications from unknown sources, or to enable USB debugging mode.
To add a device allowance package to a user group:
In the Domain browser, navigate to the user group to which the package is to be added.
On the Packages tab, select Add package and then select Create custom package.
Select Device allowances by searching or browsing the list, and then select Select custom package.
Select to add one ore more allowances to the package from the list of available allowances by selecting the
icon for the allowance or allowances.Hover over the
icon to see a short description of the allowance. Select Enter package details.
Enter the following general settings for the package:
Name: A unique name for the package.
Description (optional): A description of the package may be added. The description is used to distinguish the package from other packages in the domain.
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 8.
A smart filter limits the impact of a package to target only devices that are tagged, or not tagged, with specific tags.
Select Create package.
The package is added to the user group. The package settings will be assigned to all devices in the user group that comply with the package profile. The settings will also be assigned to all package profile compliant devices in the user groups located beneath the user group in the domain hierarchy.
Device restrictions package
A device restrictions package can be applied to a device to prevent access to certain features and functionality. A restrictions package can for example block in-app purchases or disable the use of location based services.
To add a device restrictions package to a user group:
In the Domain browser, navigate to the user group to which the package is to be added.
On the Packages tab, select Add package and then select Create custom package.
Select Device restrictions by searching or browsing the list.
Select either the Android or iOS check box, depending on what platform the restrictions package should apply to, and then select Select custom package.
Select to add one ore more restrictions to the package from the list of available restrictions by selecting the
icon.Hover over the
icon to see a short description of the restriction. Select Enter package details.
Enter the following general settings for the package:
Name: A unique name for the package.
Description (optional): A description of the package may be added. The description is used to distinguish the package from other packages in the domain.
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 9.
A smart filter limits the impact of a package to target only devices that are tagged, or not tagged, with specific tags.
Select Create package.
The package is added to the user group. The package settings will be assigned to all devices in the user group that comply with the package profile. The settings will also be assigned to all package profile compliant devices in the user groups located beneath the user group in the domain hierarchy.
Exchange mail package
To add an exchange mail package for Samsung and Apple devices to a user group:
In the Domain browser, navigate to the user group to which the package is to be added.
On the Packages tab, select Add package and then select Create custom package.
Select Exchange mail, by searching or browsing the list, and then select Select custom package.
In the Name box, enter a unique name for the package.
Optionally, in the Description box, enter a description of the package. The description is used to distinguish the package from other packages in the domain.
In the Email address box, enter the email address.
In the Domain name box, enter the domain name.
In the User name box, enter the unique user name.
In the Server name box, enter the name for the mail server.
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 11.
A smart filter limits the impact of a package to target only devices that are tagged, or not tagged, with specific tags.
Select Create package.
The package is added to the user group. The package settings will be assigned to all devices in the user group that comply with the package profile. The settings will also be assigned to all package profile compliant devices in the user groups located beneath the user group in the domain hierarchy.
Kiosk package for Android
A kiosk package sets the device in kiosk mode. It locks down the capabilities of the device so that only the apps and additional settings allowed by the kiosk package are available to the user. The kiosk package for Android requires Android version 7, or higher.
Note
Kiosk mode requires the device to be in device owner mode. Currently, to set a device in device owner mode, it must be enrolled by scanning a QR code, see Create and enroll a device by scanning a QR code.
To add a kiosk package to a user group:
In the Domain browser, navigate to the user group to which the package is to be added.
On the Packages tab, select Add package and then select Create custom package.
Select Kiosk (Android), by filtering or browsing the list.
In the Name box, enter a unique name for the package.
Optionally, in the Description box, enter a description of the package. The description is used to distinguish the package from other packages in the domain.
In the Apps to be available box, enter the ID for the app or apps that will be available for the device in kiosk mode.
The ID is found in the URL on Google Play, for example com.googlemaps.app.
If more than one app is entered in the box, they must be comma separated.
Optionally, in the Background color box, add a background color that will be applied to the device.
Optionally, in the Text color box, add a text color that will be applied to the device.
Optionally, in the PIN code box, enter a PIN code that can be used to unlock the device from kiosk mode.
The device may have to be unlocked from kiosk mode if it loses its connection to the system, or otherwise it will be permanently unreachable. To unlock the device from kiosk mode with the PIN code, press the Snow logo on the display of the device and then enter the PIN code.
Optionally, in the Non-default kiosk container app box, enter the ID for a kiosk container app, if you do not want to use the default kiosk container app.
Optionally, select to include one or more Additional settings:
Don't show the Snow app with allowed apps
Force screen to stay awake while charging
Allow user to configure WiFi from kiosk application
Allow user to configure date and time from kiosk application
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 13.
Select Create package.
The package is added to the user group. The package settings will be assigned to all devices in the user group that comply with the package profile. The settings will also be assigned to all package profile compliant devices in the user groups located beneath the user group in the domain hierarchy.
Kiosk package for Samsung
A kiosk package sets the device in kiosk mode. It locks down the capabilities of the device so that only the apps allowed by the kiosk package are available to the user.
Note
Kiosk mode requires the device to be in device owner mode. Currently, to set a device in device owner mode, it must be enrolled by scanning a QR code, see Create and enroll a device by scanning a QR code.
To add a kiosk package to a user group:
In the Domain browser, navigate to the user group to which the package is to be added.
On the Packages tab, select Add package and then select Create custom package.
Select Kiosk (Samsung), by filtering or browsing the list.
In the Name box, enter a unique name for the package.
Optionally, in the Description box, enter a description of the package. The description is used to distinguish the package from other packages in the domain.
In the Apps to be available box, enter the ID for the app or apps that will be available for the device in kiosk mode.
The ID is found in the URL on Google Play, for example com.googlemaps.app.
If more than one app is entered in the box, they must be comma separated.
Optionally, in the Non-default kiosk container app box, enter the ID for a kiosk container app, if you do not want to use the default kiosk container app.
Optionally, select to include one or more Additional settings.
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 10.
Select Create package.
The package is added to the user group. The package settings will be assigned to all devices in the user group that comply with the package profile. The settings will also be assigned to all package profile compliant devices in the user groups located beneath the user group in the domain hierarchy.
Kiosk package for iOS
A kiosk package sets the device in kiosk mode. It locks down the capabilities of the device so that only the app allowed by the kiosk package is available to the user.
Note
Kiosk mode requires the device to be in supervised mode. To set a device in supervised mode, it must be enrolled via Apple's Device Enrollment Program (DEP), or by using Apple Configurator.
To add a kiosk package to a user group:
In the Domain browser, navigate to the user group to which the package is to be added.
On the Packages tab, select Add package and then select Create custom package.
Select Kiosk by filtering or browsing the list, select iOS, and then select Select custom package.
In the Name box, enter a unique name for the package.
Optionally, in the Description box, enter a description of the package. The description is used to distinguish the package from other packages in the domain.
In the Application identifier box, enter the ID for the application that will be available for the device in kiosk mode.
Only one application can be available for iOS devices in kiosk mode.
Optionally, select to include one or more Additional settings.
Some of the additional settings are included by default.
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 9.
Select Create package.
The package is added to the user group. The package settings will be assigned to all devices in the user group that comply with the package profile. The settings will also be assigned to all package profile compliant devices in the user groups located beneath the user group in the domain hierarchy.
Runtime permissions for Android apps package
A runtime permissions package can be used to make sure that an Android application does not access certain information or resources due to runtime permission requests, for example a request to access contacts, or location information. The package sets the status - granted or denied - that will be applied to the runtime permission requests for the Android application.
To add a runtime permissions package for an Android app to a user group:
In the Domain browser, navigate to the user group to which the package is to be added.
On the Packages tab, select Add package and then select Create custom package.
Select Runtime permissions for Android apps, by searching or browsing the list.
Select an application from the list of available applications by searching or browsing the list, and then select Enter package details.
In the Name box, enter a unique name for the package, or use the default name displayed in the box.
Optionally, in the Description box, enter a description of the package, or use the default description displayed in the box. The description is used to distinguish the package from other packages in the domain.
For each resource or type of information in the runtime permissions list, select the status for the permission.
Default - The permission request will be granted or denied according to the default settings from Google Play.
Granted - The permission request will be granted.
Denied - The permission request will be denied.
To add smart filters to the package, select Set smart filters (optional) and proceed according to Add smart filters to package. If the package should not contain smart filters, go to Step 9.
Select Create package.
The package is added to the user group. The package settings will be assigned to all devices in the user group that comply with the package profile. The settings will also be assigned to all package profile compliant devices in the user groups located beneath the user group in the domain hierarchy.