IBM Security MaaS360

 View Only

  • 1.  Global Settings - Android Enterprise

    Posted Mon October 11, 2021 07:33 AM
    Edited by Noureddine LAAREJ Mon October 11, 2021 07:34 AM
    Hi Team,

    I Hope this message finds you well!

    I have somes questions about global setting (Security    ):

    how this feature works ! :
    with a customer, we try to implement Android global settings to allow devices to use all types of conditions for updating applications and Apps are auto-updated at any time.
    I found this EMM Api on google dev website : https://any-api.com/googleapis_com/androidenterprise/docs/Definitions/Device      and this : Update apps | Google Play EMM API | Google Developers.

     is this the correct way to use this feature does anyone already use global settings? Are there any differences in settings depending on the version of Android
    Good Day!
    Regards,
    ------------------------------
    Noureddine LAAREJ
    EMM & Digital Workplace Expert
    Bouygues TELECOM
    www.linkedin.com/in/NLAJBT
    ------------------------------


  • 2.  RE: Global Settings - Android Enterprise

    Posted Tue October 12, 2021 04:53 AM
    Hi Noureddine
    Good to see you on the Community!
    My response in parts. 
    - Regarding app development, generally speaking the Android OS needs to be able to handle the update to the app, meaning that even if you have coded it there will be a dependency at OS level. 
    - In an Android Enterprise context,  On managed (PO/DO) devices, all apps coming through the Play Store are managed via the "Android Enterprise" or managed Play Store.   At present, these are expected to update automatically to new versions. At present Google doesn't provide a mechanism to control app updates centrally, meaning if you want to prevent automatic updates to apps, this needs to be configured manually on each device within the Play Store "app".
    - From a MaaS360 perspective, you will see that the "Install Automatically" box appears for initial installation on a device, meaning 'start the install as soon as it reach the device'. However this depends again on how the OS handles the install process meaning that for Device Admin mode, it will only be automatic for Samsung devices with APK apps, all other app types and devices will need the user to accept installation. In Android Enterprise, this happens as described above. 
    As always, if you have any ideas on how this might be changed to your advantage, I would encourage you to raise an Enhancement Request (for new functionality) which will be handled by our Product Management team:
    https://www.ibm.com/developerworks/rfe/execute?use_case=changeRequestLanding&BRAND_ID=301&PROD_ID=1411&x=14&y=19
    Best

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------

    Original Message


  • 3.  RE: Global Settings - Android Enterprise

    Posted Fri October 15, 2021 04:52 AM
    Hi Eamon
    A pleasure to talk to you :)
    an RFE has already (RFE created ID:152398 ) been carried out and a case is in progress (TS006781832).
    but after having exchanged with google they answered me that while waiting for the IBM side development I could use the API functionalities (Global Setting) and that I can send them to a device. hence my 1st post to find out if anyone has already use this feature?

    Regards


    ------------------------------
    Noureddine LAAREJ
    EMM & Digital Workplace Expert
    Bouygues TELECOM
    www.linkedin.com/in/NLAJBT
    ------------------------------

    Original Message


  • 4.  RE: Global Settings - Android Enterprise

    Posted Thu October 21, 2021 04:52 AM
    Edited by Kjetil Holm Thu October 21, 2021 10:08 AM
    Hi Noureddine,
    I don't think you can use "Configure Global Settings" in the Android policy to configure this. As far as I can see the available functions (https://developer.android.com/reference/android/provider/Settings.Global) does not include autoupdatepolicy.

    The API you are referring to is the Google Play EMM API.

    According to "MaaS360 4th Quarter Feature Review", the possibility to set auto-update mode is planned to be released Q4 2021. The description of this feature (from Android Management API documentation):

    "

    AutoUpdateMode

    Controls the auto-update mode for the app.

    Enums
    AUTO_UPDATE_MODE_UNSPECIFIED Unspecified. Defaults to AUTO_UPDATE_DEFAULT.
    AUTO_UPDATE_DEFAULT

    The app is automatically updated with low priority to minimize the impact on the user.

    The app is updated when all of the following constraints are met:

    • The device is not actively used.
    • The device is connected to an unmetered network.
    • The device is charging.

    The device is notified about a new update within 24 hours after it is published by the developer, after which the app is updated the next time the constraints above are met.
    AUTO_UPDATE_POSTPONED

    The app is not automatically updated for a maximum of 90 days after the app becomes out of date.

    90 days after the app becomes out of date, the latest available version is installed automatically with low priority (see AUTO_UPDATE_DEFAULT). After the app is updated it is not automatically updated again until 90 days after it becomes out of date again.

    The user can still manually update the app from the Play Store at any time.
    AUTO_UPDATE_HIGH_PRIORITY

    The app is updated as soon as possible. No constraints are applied.

    The device is notified immediately about a new update after it becomes available.

    "

    ------------------------------
    Best Regards,

    Kjetil Holm
    ------------------------------

    Original Message