How to Update a Managed Android App’s Settings in Google Workspace

Quick and easy-to-follow guide for Google Workspace administrators

Requirements to manage Android app settings for Google Workspace users

This feature is supported for Google Workspace Business Starter, Standard, and Plus; Enterprise; Education Fundamentals, Standard, Teaching and Learning Upgrade, and Plus; G Suite Basic and Business; Essentials; Frontline.

What Android app settings can you manage

You can update a managed Android app’s settings by enabling or disabling:

Automatic installation
Preventing users from uninstalling the app
Allowing users to add widgets to the Home screen
Enabling or disabling the app for specific organizational units

How to manage Android app settings step-by-step with images

Step 1

In Google Admin at https://admin.google.com, click Apps > Web and mobile apps.

Step 2

Click the app’s name.

Step 3

There are three sections here: User access, Settings, and Runtime permissions.

The User access section lets you control which Organizational Units listed on the left side of the screen have access to the app.

For example, to prevent users in a specific OU from using a managed app, select that OU, then update this setting to OFF and click SAVE.

The Settings section lets you make the app Available for download ( when non-managed apps are blocked, as shown here) or Force-install it to users’ devices.

Additionally, you can:

Prevent users from uninstalling the app;
Allow users to add widgets to the home screen
Check Use for Always on VPN to add a VPN service for app traffic

Never turn on Use as Always on VPN for more than one app. If you turn it on for multiple apps, one of the apps will be randomly used as the Always on VPN app.

The Runtime permissions section is not available for Google Workspace Business Starter and Standard.

Some apps request permissions from the user. For example, an app might request access to a device’s location or contacts. In this section, you can choose to automatically Allow or Deny access to specific types of permissions without prompting the user.