使用 Intune 将托管 Google Play 应用添加到 Android Enterprise 设备Add Managed Google Play apps to Android Enterprise devices with Intune

托管 Google Play 是 Google 的企业应用商店,并且是适用于 Android Enterprise 的应用程序的唯一供应商。Managed Google Play is Google's enterprise app store and sole source of applications for Android Enterprise. 你可以使用 Intune,通过托管 Google Play 为任何 Android Enterprise 方案(包括工作配置文件、公司拥有的完全托管式专用工作配置文件注册)安排应用部署。You can use Intune to orchestrate app deployment through Managed Google Play for any Android Enterprise scenario (including work profile, dedicated, fully managed, and corporate-owned work profile enrollments). 将托管 Google Play 应用添加到 Intune 的方式不同于为非 Android Enterprise 添加 Android 应用的方式。How you add Managed Google Play apps to Intune differs from how Android apps are added for non-Android Enterprise. 商店应用、业务线 (LOB) 应用和 Web 应用在托管 Google Play 中获得批准或添加到托管 Google Play,然后同步到 Intune 中,以便它们显示在客户端应用列表中。Store apps, line-of-business (LOB) apps, and web apps are approved in or added to Managed Google Play, and then synchronized into Intune so that they appear in the Client Apps list. 一旦它们显示在客户端应用列表中,就可以像管理任何其他应用一样管理任何托管 Google Play 应用的分配。Once they appear in the Client Apps list list, you can manage assignment of any Managed Google Play app as you would any other app.

Intune 将自动向 Intune 管理控制台添加四个常见的与 Android Enterprise 相关的应用,以便在将 Intune 租户连接到托管 Google Play 后可以轻松配置和使用 Android Enterprise 管理。To make it easier for you to configure and use Android Enterprise management, upon connecting your Intune tenant to Managed Google Play, Intune will automatically add four common Android Enterprise related apps to the Intune admin console. 四个应用如下:The four apps are the following:

  • Microsoft Intune - 用于 Android Enterprise 完全托管方案。Microsoft Intune - Used for Android Enterprise fully managed scenarios. 此应用在设备注册过程中自动安装到完全托管的设备。This app is automatically installed to fully managed devices during the device enrollment process.
  • Microsoft Authenticator - 帮助你使用双因素身份验证登录帐户。Microsoft Authenticator - Helps you sign-in to your accounts if you use two-factor verification. 此应用在设备注册过程中自动安装到完全托管的设备。This app is automatically installed to fully managed devices during the device enrollment process.
  • Intune 公司门户 - 用于应用保护策略 (APP) 和 Android Enterprise 工作配置文件方案。Intune Company Portal - Used for App Protection Policies (APP) and Android Enterprise work profile scenarios. 此应用在设备注册过程中自动安装到完全托管的设备。This app is automatically installed to fully managed devices during the device enrollment process.
  • 托管的主屏幕 - 用于 Android Enterprise 专用多应用展台方案。Managed Home Screen - Used for Android Enterprise dedicated multi-app kiosk scenarios. IT 管理员应创建分配,以便在将用于多应用展台方案的专用设备上安装此应用。IT admins should create an assignment to install this app on dedicated devices that are going to be used in multi-app kiosk scenarios.

备注

当最终用户注册其 Android Enterprise 完全托管设备时,将自动安装 Intune 公司门户应用,并且应用程序图标可能对最终用户可见。When an end user enrolls their Android Enterprise fully managed device, the Intune Company Portal app is automatically installed and the application icon may be visible to the end user. 如果最终用户尝试启动 Intune 公司门户应用,则最终用户将重定向到 Microsoft Intune 应用,随后将隐藏公司门户应用图标。If the end user attempts to launch the Intune Company Portal app, the end user will be redirected to the Microsoft Intune app and the Company Portal app icon will be subsequently hidden.

开始之前Before you start

备注

在使用 Microsoft Intune 时,我们建议使用 Microsoft Edge 或 Google Chrome 浏览器。When you work with Microsoft Intune, we recommend that you use either the Microsoft Edge or Google Chrome browser.

“托管 Google Play”应用类型Managed Google Play app types

托管 Google Play 提供三种类型的应用:There are three types of apps that are available with Managed Google Play:

  • 托管的 Google Play 商店应用 - 已在 Play Store 中正式发布的公共应用。Managed Google Play store app - Public apps that are generally available in the Play Store. 通过浏览要管理的应用,批准它们,然后将其同步到 Intune 中,在 Intune 中管理这些应用。Manage these apps in Intune by browsing for the apps you want to manage, approving them, and then synchronizing them into Intune.
  • 托管的 Google Play 专用应用 - 这些是由 Intune 管理员发布到托管 Google Play 的 LOB 应用。Managed Google Play private app - These are LOB apps published to Managed Google Play by Intune admins. 这些应用是专用应用,仅适用于 Intune 租户。These apps are private and are available only to your Intune tenant. 这是通过托管 Google Play 和 Android Enterprise 管理和部署 LOB 应用的方式。This is how LOB apps are managed and deployed with Managed Google Play and Android Enterprise.
  • 托管的 Google Play Web 链接 - 包含可部署到 Android Enterprise 设备的 IT 管理员定义的图标的 Web 链接。Managed Google Play web link - Web links with IT admin-defined icons that are deployable to Android Enterprise devices. 它们显示在设备应用列表中的设备上,就像常规应用一样。These appear on devices in the device's app list just like regular apps.

托管的 Google Play 商店应用Managed Google Play store apps

有两种方式可使用 Intune 浏览和批准托管的 Google Play 商店应用:There are two ways to browse and approve Managed Google Play store apps with Intune:

  1. 直接在 Intune 控制台中 - 在 Intune 内托管的视图中浏览和批准商店应用。Directly in the Intune console - browse and approve store apps in a view hosted within Intune. 这会直接在 Intune 控制台中打开,不需要用户使用其他帐户重新进行身份验证。This opens directly in the Intune console and does not require you to reauthenticate with a different account.
  2. 在托管的 Google Play 控制台中 - 可以选择直接打开托管的 Google Play 控制台并批准其中的应用。In Managed Google Play console - you can optionally open the Managed Google Play console directly and approve apps there. 有关详细信息,请参阅将托管的 Google Play 应用与 Intune 同步See Sync a Managed Google Play app with Intune for more information. 这需要使用将 Intune 租户连接到托管 Google Play 所用的帐户进行单独登录。This requires a separate login using the account you used to connect your Intune tenant to Managed Google Play.

直接在 Intune 控制台中添加托管的 Google Play 商店应用Add a Managed Google Play store app directly in the Intune console

  1. 登录到 Microsoft 终结点管理器管理中心Sign in to the Microsoft Endpoint Manager admin center.

  2. 选择“应用” > “所有应用” > “添加” 。Select Apps > All apps > Add.

  3. 在“选择应用类型” 窗格中的可用“应用商店应用” 类型下,选择“托管的 Google Play 应用” 。In the Select app type pane, under the available Store app types, select Managed Google Play app.

  4. 单击“选择” 。Click Select. 系统会显示托管的 Google Play 应用商店。The Managed Google Play app store is displayed.

    备注

    必须将 Intune 租户帐户连接到 Android Enterprise 帐户,才能浏览托管的 Google Play 应用商店应用。Your Intune tenant account must be connected to your Android Enterprise account to browse managed Google Play store apps. 有关详细信息,请参阅如何将 Intune 帐户连接到托管的 Google Play 帐户For more information, see Connect your Intune account to your Managed Google Play account.

  5. 选择应用以查看应用详细信息。Select an app to view the app details.

  6. 在显示应用的页面上,单击“批准” 。On the page that displays the app, click Approve. 一个用于该应用的窗口会打开,请你为该应用授予执行各种操作的权限。A window for the app opens asking you to give permissions for the app to perform various operations.

  7. 选择“批准”,接受应用权限并继续 。Select Approve to accept the app permissions and continue.

  8. 选择“批准设置”选项卡中的“应用请求新的权限时始终批准”,然后单击“完成” 。Select Keep approved when app requests new permissions in the Approval Settings tab and then click Done.

    重要

    如果不选择此选项,将需要在应用开发人员发布更新时手动批准所有新权限。If you do not choose this option, you will need to manually approve any new permissions if the app developer publishes an update. 这将导致应用安装和更新暂停,直到批准该权限。This will cause installations and updates of the app to stop until permissions are approved. 为此,建议选择此选项以自动批准新权限。For this reason, it is recommended to select the option to automatically approve new permissions.

  9. 单击“选择”以选中应用 。Click Select to select the app.

  10. 单击边栏选项卡顶部上的“同步” ,以将应用与托管的 Google Play 服务同步。Click Sync at the top of the blade to sync the app with the Managed Google Play service.

  11. 单击“刷新” 以更新应用列表并显示新添加的应用。Click Refresh to update the app list and display the newly added app.

在托管的 Google Play 控制台中添加托管的 Google Play 商店应用(替代方法)Add a Managed Google Play store app in the Managed Google Play console (Alternative)

若要使用 Intune 同步托管 Google Play 应用,而不是直接使用 Intune 添加它,请按照下列步骤操作。If you prefer to synchronize a Managed Google Play app with Intune rather than adding it directly using Intune, use the following steps.

重要

下列信息是上文所述的使用 Intune 添加托管 Google Play 应用的备用方法。The information provided below is an alternative method to adding a Managed Google Play app using Intune as described above.

  1. 转到托管的 Google Play 应用商店Go to the Managed Google Play store. 通过用于在 Intune 与 Android Enterprise 之间配置连接的同一个帐户进行登录。Sign in with the same account you used to configure the connection between Intune and Android Enterprise.

  2. 在应用商店中搜索并选择要使用 Intune 分配的应用。Search the store and select the app you want to assign by using Intune.

  3. 在显示应用的页面上,单击“批准” 。On the page that displays the app, click Approve.
    下面的示例选择了 Microsoft Excel 应用。In the following example, the Microsoft Excel app has been chosen.

    托管的 Google Play 应用商店中的“批准”按钮

    一个用于该应用的窗口会打开,请你为该应用授予执行各种操作的权限。A window for the app opens asking you to give permissions for the app to perform various operations.

  4. 选择“批准”,接受应用权限并继续 。Select Approve to accept the app permissions and continue.

    应用权限的“批准”按钮

  5. 选择一个选项来处理新的应用权限请求,然后选择“保存” 。Select an option for handling new app permission requests, and then select Save.

    用于处理新应用权限请求的选项

    应用将获得批准并显示在 IT 管理员控制台中。The app is approved, and it is displayed in your IT admin console. 接下来,可以将 Android 工作配置文件应用与 Intune 同步Next, you can Sync the Android work profile app with Intune.

托管 Google Play 专用 (LOB) 应用Managed Google Play private (LOB) apps

有两种方式可将 LOB 应用添加到托管 Google Play:There are two ways to add LOB apps to Managed Google Play:

  1. 直接在 Intune 控制台中添加 - 这允许你通过直接在 Intune 中只提交应用 APK 和标题来添加 LOB 应用。Directly in the Intune console - This allows you to add LOB apps by submitting just the app APK and a title, directly within Intune. 此方法不需要用户拥有 Google 开发人员帐户,也不需要用户支付以开发人员身份注册 Google 的费用。This method does not require you to have a Google developer account and does not require you to pay the fee to register with Google as a developer. 此方法更简单,大大减少了步骤数,并使 LOB 应用可在 10 分钟内进行管理。This method is simpler and has a significantly reduced number of steps, and makes LOB apps available for management in as little as ten minutes.
  2. 在 Google Play 开发人员控制台中添加 - 如果你拥有 Google 开发人员帐户,或者想要配置仅在 Google Play 开发人员控制台中可用的高级分发功能(例如,添加其他应用屏幕截图),则可以使用 Google Play 开发人员控制台In the Google Play Developer Console - If you have a Google developer account or want to configure advanced distribution features that are only available in the Google Play Developer Console (like adding additional app screenshots), you can use the Google Play Developer Console.

托管 Google Play 专用 (LOB) 应用直接在 Intune 控制台中发布Managed Google Play private (LOB) app publishing directly in the Intune console

  1. 登录到 Microsoft 终结点管理器管理中心Sign in to the Microsoft Endpoint Manager admin center.

  2. 选择“应用” > “所有应用” > “添加” 。Select Apps > All apps > Add.

  3. 在“选择应用类型” 窗格中的可用“应用商店应用” 类型下,选择“托管的 Google Play 应用” 。In the Select app type pane, under the available Store app types, select Managed Google Play app.

  4. 单击“选择” 。Click Select. 系统会在 Intune 中显示托管的 Google Play 应用商店。The Managed Google Play app store is displayed within Intune.

  5. 在Google Play 窗口中选择“专用应用” (位于“锁定” 图标旁边)。Select Private apps (next to the lock icon) in the Google Play window.

  6. 单击右下角的“+” 按钮以添加新应用。Click the "+" button at the lower right to add a new app.

  7. 添加一个应用“标题” ,然后单击“上传 APK” 添加 APK 应用包。Add an app Title and click Upload APK add the APK app package.

    备注

    应用的包名称在 Google Play 中必须是全局唯一的(在企业或 Google Play 开发人员帐户中不是唯一的)。Your app's package name must be globally unique in Google Play (not just unique within your enterprise or Google Play Developer account). 否则,你将收到“上传具有不同包名称的新 APK 文件”错误。Otherwise, you will receive the Upload a new APK file with a different package name error.

  8. 单击 “创建”Click Create.

  9. 如果已完成添加应用,则关闭“托管的 Google Play”窗格。Close the Managed Google Play pane if you are done adding apps.

  10. 单击“同步应用” 窗格上的“同步” ,以与托管 Google Play 服务同步。Click Sync on the App app pane to sync with the Managed Google Play service.

    备注

    专用应用可能需要几分钟才能同步。如果应用在第一次执行同步时未显示,请等待几分钟,然后启动新同步。Private apps may take several minutes to become available to sync. If the app does not appear the first time you perform a sync, wait a couple minutes and initiate a new sync.

有关托管 Google Play 专用应用的详细信息(包括常见问题解答),请参阅 Google 的支持文章: https://support.google.com/googleplay/work/answer/9146439For more information about Managed Google Play private apps including a FAQ, see Google's support article: https://support.google.com/googleplay/work/answer/9146439

重要

使用此方法添加的专用应用永远不能变成公共应用。Private apps added using this method can never be made public. 仅当你确定此应用将始终专用于你的组织时,才使用此发布选项。Only use this publishing option if you are sure that this app will always be private to your organization.

托管 Google Play 专用 (LOB) 应用使用 Google 开发人员控制台发布Managed Google Play private (LOB) app publishing using the Google Developer Console

  1. 通过用于在 Intune 与 Android Enterprise 之间配置连接的同一个帐户登录到 Google Play 开发人员控制台Sign in to the Google Play Developer Console with the same account you used to configure the connection between Intune and Android Enterprise.
    如果是首次登录,则必须注册,然后支付费用才能成为 Google 开发人员计划的成员。If you are signing in for the first time, you must register and pay a fee to become a member of the Google Developer program.

  2. 在控制台中,选择“添加新应用程序” 。In the console, select Add new application.

  3. 采用与将任何应用发布到 Google Play 商店相同的方式,上传应用并提供有关应用的信息。You upload and provide information about your app in the same way as you publish any app to the Google Play store. 但是,必须选择“仅使此应用程序可供我的组织使用(<组织名称>)” 。However, you must select Only make this application available to my organization (<organization name>).

    此操作使应用仅可供你的组织使用。This operation makes the app available only to your organization. 在公共的 Google Play 应用商店中,它将不可用。It won't be available on the public Google Play store.

    有关上传和发布 Android 应用的详细信息,请参阅 Google 开发人员控制台帮助For more information about uploading and publishing Android apps, see Google Developer Console Help.

  4. 在发布应用后,通过用于在 Intune 与 Android Enterprise 之间配置连接的同一个帐户登录到托管的 Google Play 商店After you've published your app, sign in to the Managed Google Play store with the same account that you used to configure the connection between Intune and Android Enterprise.

  5. 在该商店的“应用” 节点中,验证是否显示已发布的应用。In the Apps node of the store, verify that the app you've published is displayed.
    应用已自动获得批准,可与 Intune 同步。The app is automatically approved to be synchronized with Intune.

与其他 Android 应用一样,托管的 Google Play Web 链接可进行安装和管理。Managed Google Play web links are installable and manageable just like other Android apps. 当安装在设备上时,它们将与其所安装的其他应用一起显示在用户的应用列表中。When installed on a device, they will appear in the user's app list alongside the other apps they have installed. 点击后,它们将在设备的浏览器中启动。When tapped, they will launch in the device's browser.

Web 链接将使用 Microsoft Edge 或你选择部署的任何其他浏览器应用打开。Web links will open with Microsoft Edge or any other browser app you choose to deploy. 请务必将至少一个浏览器应用部署到设备,以便 Web 链接能够正常打开。Be sure to deploy at least one browser app to devices in order for web links to be able to open properly. 但是,可用于 Web 链接的所有显示选项(全屏、独立和最小 UI)仅适用于 Chrome 浏览器 。However, all of the Display options available for web links (full screen, standalone, and minimal UI) will only work with the Chrome browser.

  1. 登录到 Microsoft 终结点管理器管理中心Sign in to the Microsoft Endpoint Manager admin center.

  2. 选择“应用” > “所有应用” > “添加” 。Select Apps > All apps > Add.

  3. 在“选择应用类型” 窗格中的可用“应用商店应用” 类型下,选择“托管的 Google Play 应用” 。In the Select app type pane, under the available Store app types, select Managed Google Play app.

  4. 单击“选择” 。Click Select. 系统会在 Intune 中显示托管的 Google Play 应用商店。The Managed Google Play app store is displayed within Intune.

  5. 在 Google Play 窗口中选择“Web 应用” (位于“全局” 图标旁边)。Select Web apps (next to the Globe icon) in the Google Play window.

  6. 单击右下角的“+” 按钮以添加新应用。Click the "+" button at the lower right to add a new app.

  7. 添加应用“标题” Web 应用 URL ,选择该应用的显示方式,然后选择一个应用图标。Add an app Title, the web app URL, select how the app should be displayed, and select an app icon.

  8. 单击 “创建”Click Create.

  9. 如果已完成添加应用,则关闭“托管的 Google Play”窗格。Close the Managed Google Play pane if you are done adding apps.

  10. 单击“同步应用” 窗格上的“同步” ,以与托管 Google Play 服务同步。Click Sync on the App app pane to sync with the Managed Google Play service.

    备注

    Web 应用可能需要几分钟才能同步。如果应用在第一次执行同步时未显示,请等待几分钟,然后启动新同步。Web apps may take several minutes to become available to sync. If the app does not appear the first time you perform a sync, wait a couple minutes and initiate a new sync.

将托管的 Google Play 应用与 Intune 同步Sync a Managed Google Play app with Intune

如果已从商店批准了应用,但未在“应用”工作负荷中看到该应用,则按照如下所示的步骤强制立即同步 :If you have approved an app from the store and don't see it in the Apps workload, force an immediate sync as follows:

  1. 登录到 Microsoft 终结点管理器管理中心Sign in to the Microsoft Endpoint Manager admin center.
  2. 选择“租户管理” > “连接器和令牌” > “托管的 Google Play” 。Select Tenant administration > Connectors and tokens > Managed Google Play.
  3. 在“托管的 Google Play”窗格中,选择“同步” 。In the Managed Google Play pane, choose Sync.
    该页会更新上次同步的时间和状态。The page updates the time and status of the last sync.
  4. 在 Microsoft 终结点管理器管理中心中,选择“应用” > “所有应用” 。In the Microsoft Endpoint Manager admin center select Apps > All apps.
    系统会显示最新可用的托管的 Google Play 应用。The newly available Managed Google Play app is displayed.

将托管 Google Play 应用分配到 Android Enterprise 工作配置文件和公司拥有的工作配置文件设备Assigning a Managed Google Play app to Android Enterprise work profile and corporate-owned work profile devices

如果应用显示在“应用” 工作负荷窗格的“应用许可证” 节点中,可以将应用分配到用户组,从而分配应用,就像分配其他任何应用一样When the app is displayed in the App licenses node of the Apps workload pane, you can assign it just as you would assign any other app by assigning the app to groups of users.

分配应用之后,它会安装(或可安装)在用户的目标设备上。After you assign the app, it is installed (or available for install) on the devices of the users that you've targeted. 不会要求设备的用户批准此安装。The user of the device is not asked to approve the installation. 有关 Android Enterprise 工作配置文件设备的详细信息,请参阅设置 Android Enterprise 工作配置文件设备的注册For more information about Android Enterprise work profile devices, see Set up enrollment of Android Enterprise work profile devices.

备注

对于最终用户,在托管的 Google Play 商店中仅显示已分配的应用。Only apps that have been assigned will show up in the Managed Google Play store for an end user. 因此,在使用托管 Google Play 设置应用时,管理员需要执行此步骤。As such, this is a key step for the admin to take when setting up apps with Managed Google Play.

将托管 Google Play 应用分配到 Android Enterprise 完全托管设备Assigning a Managed Google Play app to Android Enterprise fully managed devices

Android Enterprise 完全托管设备是与单个用户关联的企业自有设备,它们专门用于工作而非个人用途。Android Enterprise fully managed devices are corporate-owned devices associated with a single user and used exclusively for work and not personal use. 完全托管设备上的用户可以从其设备上的托管 Google Play 应用中获取其可用的公司应用。Users on fully managed devices can get their available company apps from the managed Google Play app on their device.

默认情况下,Android Enterprise 完全托管设备不允许员工安装组织未批准的任何应用。By default, an Android Enterprise fully managed device will not allow employees to install any apps that are not approved by the organization. 此外,员工将无法根据策略删除任何已安装的应用。Also, employees will not be able to remove any installed apps against policy. 如果希望允许用户访问完整的 Google Play 商店来安装应用,而不只是有权访问托管 Google Play 商店中已批准的应用,则可以将“允许访问 Google Play 商店中的所有应用”设置为“允许” 。If you wish to allow users to access the full Google Play store to install apps rather than only having access to the approved apps in Managed Google Play store, you can set the Allow access to all apps in Google Play store to Allow. 使用此设置,用户可以使用其公司帐户访问 Google Play 商店中的所有应用,但购买可能会受到限制。With this setting, the user can access all the apps in the Google Play store using their corporate account, however purchases may limited. 你可以通过允许用户将新帐户添加到设备来删除有限的购买限制。You can remove the limited purchases restriction by allowing users to add new accounts to the device. 这样一来,最终用户就可以使用个人帐户从 Google Play 商店中购买应用,还可以进行应用内购买。Doing so will enable end users to have the ability to purchase apps from the Google Play store using personal accounts, as well as conduct in-app purchases. 有关详细信息,请参阅便于使用 Intune 允许或限制功能的 Android Enterprise 设备设置For more information, see Android Enterprise device settings to allow or restrict features using Intune.

备注

在载入过程中,Microsoft Intune 应用、Microsoft Authenticator 应用和公司门户应用将作为必需的应用安装到所有完全托管的设备上。The Microsoft Intune app, the Microsoft Authenticator app, and the Company Portal app will be installed as required apps onto all fully managed devices during onboarding. 自动安装这些应用会提供条件访问支持,Microsoft Intune 应用用户可以查看和解决符合性问题。Having these apps automatically installed provides Conditional Access support, and Microsoft Intune app users can see and resolve compliance issues.

管理 Android Enterprise 应用权限Manage Android Enterprise app permissions

Android Enterprise 需要用户先在托管的 Google Play Web 控制台中批准应用,然后才能将应用与 Intune 同步并分配给用户。Android Enterprise requires you to approve apps in the managed Google Play web console before you sync them with Intune and assign them to your users. 由于 Android Enterprise 允许以无提示方式将这些应用自动推送到用户的设备,因此必须代表所有用户接受应用权限。Because Android Enterprise allows you to silently and automatically push the apps to users' devices, you must accept the app permissions on behalf of all your users. 用户安装应用时将不会看到任何应用权限,因此请务必了解这些权限。Users don't see any app permissions when they install the apps, so it's important that you understand the permissions.

当应用开发人员使用新版本的应用更新权限时,即使你批准了之前的权限,系统也不会自动接受这些权限。When an app developer updates permissions with a new version of the app, the permissions are not automatically accepted even if you approved the previous permissions. 运行以前版本应用的设备仍可以使用它。Devices that run the previous version of the app can still use it. 但是,在新权限获得批准之前,应用不会升级。However, the app is not upgraded until the new permissions are approved. 在你批准应用的新权限之前,未安装应用的设备将不会安装应用。Devices without the app installed do not install the app until you approve the app's new permissions.

更新应用权限Update app permissions

定期访问托管的 Google Play 控制台,查看是否有新权限。Periodically visit the managed Google Play console to check for new permissions. 可以将 Google Play 配置为当已批准的应用需要新权限时向你和其他人发送电子邮件。You can configure Google Play to send you or others an email when new permissions are required for an approved app. 如果分配了应用,但发现设备上未安装此应用,请执行以下步骤,检查是否有新权限:If you assign an app and observe that it isn't installed on devices, check for new permissions following these steps:

  1. 转到 Google PlayGo to Google Play.
  2. 使用发布和批准应用时所用的 Google 帐户登录。Sign in with the Google account that you used to publish and approve the apps.
  3. 选择“更新” 选项卡,并检查是否有任何应用需要更新。Select the Updates tab, and check to see whether any apps require an update.
    列出的所有应用都需要新权限,且在应用新权限之前不会进行分配。Any listed apps require new permissions and are not assigned until they are applied.

或者,可将 Google Play 配置为根据每个应用的情况自动重新审批应用权限。Alternatively, you can configure Google Play to automatically reapprove app permissions on a per-app basis.

Android Enterprise 工作配置文件设备的其他托管 Google Play 应用报告Additional Managed Google Play app reporting for Android Enterprise work profile devices

对于部署到 Android Enterprise 工作配置文件设备的托管 Google Play 应用,可以使用 Intune 查看设备上安装的应用的状态和版本号。For Managed Google Play apps deployed to Android Enterprise work profile devices, you can view the status and version number of the app installed on a device using Intune.

处理托管 Google Play 已结束的测试跟踪Working with Managed Google Play closed testing tracks

要执行测试,可将托管的 Google Play 应用的非生产版本分发至 Android Enterprise 方案(“Android Enterprise 工作配置文件”、“完全托管”、“专用”和“公司拥有的工作配置文件”)中注册的设备 。You can distribute a non-production version of a Managed Google Play app to devices enrolled in an Android Enterprise scenario (Android Enterprise Work Profile, Fully Managed, Dedicated, and Corporate-owned Work Profile) in order to perform testing. 在 Intune 中,可查看是否已向应用发布了预生产生成测试跟踪,并可将该跟踪分配给 AAD 用户组或设备组。In Intune, you can see whether an app has a pre-production build test track published to it, as well as be able to assign that track to AAD user groups or device groups. 将生产版本分配给当前既有组的工作流与分配非生产通道的工作流相同。The workflow for assigning a production version to a group that currently exists is the same as assigning a non-production channel. 部署后,每个跟踪的安装状态将与托管的 Google Play 中的跟踪版本号相对应。After deployment, the install status of each track will correspond with the track's version number in Managed Google Play. 有关详细信息,请参阅 Google Play 已结束的应用预发布测试跟踪For more information, see Google Play's closed test tracks for app pre-release testing.

删除托管 Google Play 应用Delete Managed Google Play apps

必要时,可以从 Microsoft Intune 中删除托管 Google Play 应用。When necessary, you can delete managed Google Play apps from Microsoft Intune. 若要删除托管 Google Play 应用,请在 Azure 门户中打开“Microsoft Intune”,并依次选择“应用” > “所有应用” 。To delete a managed Google Play app, open Microsoft Intune in the Azure portal and select Apps > All apps. 在应用列表中,选择托管 Google Play 应用右侧的省略号 (...),再从随即显示的列表中选择“删除” 。From the app list, select the ellipses (...) to the right of the managed Google Play app, then select Delete from the displayed list. 从应用列表删除托管的 Google Play 应用时,托管的 Google Play 应用会自动变为未批准状态。When you delete a managed Google Play app from the app list, the managed Google Play app is automatically unapproved.

备注

如果某个应用未经批准或已从托管的 Google Play 商店中删除,则它不会从 Intune 客户端应用列表中删除。If an app is unapproved or deleted from the managed Google Play store, it will not be removed from the Intune client apps list. 这使你仍可将卸载策略定向到用户,即使该应用未经批准。This allows you to still target an uninstall policy to users even if the app is unapproved.

若要禁用 Android Enterprise 注册和管理,请参阅断开 Android Enterprise 管理帐户连接To turn off Android Enterprise enrollment and management, see Disconnect your Android Enterprise administrative account.

Android 企业系统应用Android Enterprise system apps

你可以为 Android Enterprise 专用设备完全托管设备启用 Android Enterprise 系统应用。You can enable an Android Enterprise system app for Android Enterprise dedicated devices or fully managed devices. 有关添加 Android Enterprise 系统应用的详细信息,请参阅将 Android Enterprise 系统应用添加到 Microsoft IntuneFor more information about adding an Android Enterprise system app, see Add Android Enterprise system apps to Microsoft Intune.

后续步骤Next steps