Managed Device

The Managed Device enrollment type is suitable, for example, for organizations or schools to hand out devices to users. Administrators have full access to the devices and can, for instance, view the list of installed apps and reset the devices to factory settings. A factory reset is necessary for commissioning. Furthermore, it is not possible to sign in with a private Google ID. As a rule, this enrollment type is used for company-owned devices that are provided to employees or students to be used exclusively for professional or school activities (no private use).

The Relution organization must be linked to a Google organization to enroll Android devices via Android Enterprise.

Performing Enrollment with Managed Device

Creating an Enrollment in Relution

  • Go to Devices → Enrollments and then click on Add.
  • Select Android Enterprise as the platform and Set up Managed Device as the type.
  • The ownership would be COD (Company Owned Device) in this case.
  • Assign a device name and save the enrollment.

Starting with Relution 5.33, it is possible to keep pre-installed system apps such as Samsung Internet or other 3rd party apps. For this, there is the switch Keep system apps enabled during enrollment. Conversely, unwanted apps must be blocked in the Manage apps configuration.

The ownership is not relevant and only serves as a hint.

Google Work-Account-Setup

During enrollment, the option Show Google Work-Account-Setup is available. When enabled, users can authenticate their device during enrollment using their Google Work Account (Google Workspace) instead of the standard QR code-based process.

Google Work-Account-Setup option in the Relution enrollment

For details on the Work Account policy configuration, see → Work Account Setup.

Prerequisite: managed domain

Android Enterprise distinguishes between two enterprise types:

Enterprise typeSetupGoogle Work-Account-Setup
Managed Google Play AccountsDefault – registered with any Google account. Users automatically receive a managed Google account during enrollment.Not available
Managed domainRequires an active Google Workspace license with a verified company domain. Users sign in with their existing @company.com account.Available

If the Relution organization was initially linked using a personal Google account (Managed Google Play Accounts), enabling the option shows the following notice:

“The enterprise type must be a managed domain to use the Google Work Account sign in.”

Upgrade enterprise

Upgrade enterprise dialog in the Relution enrollment

The Upgrade enterprise link launches a Google-provided wizard that links the existing Android Enterprise to your Google Workspace organization. The following prerequisites must be met:

  • An active Google Workspace license (Business, Enterprise, Education, etc.)
  • Administrator access to the Google Workspace Admin Console
  • A company domain verified in Google Workspace

After a successful upgrade, the Show Google Work-Account-Setup option becomes available in the enrollment and users can enroll using their existing @company.com accounts.

Necessary Information for Performing the Enrollment

In the created enrollment, a QR code is displayed under Enrollment Information, which can be used to enroll Android devices. This can also be accessed via the QR Code column in the Enrollments overview.

Resetting Android Devices

To start the enrollment for Managed Device, Android devices must first be reset to factory settings.

Welcome Screen on the Devices

Tap on a spot on the welcome screen 6 times quickly.

Scanning the Relution QR Code

The devices will then prompt you to scan the QR code from the created enrollment.

Completing the Enrollment

Follow the further instructions to set up the devices. After successful enrollment, administrators have full access to the managed devices.

Options for Managing and Controlling Managed Android Enterprise Devices

Actions

  • Install app from the Google Play Store
  • Remove app
  • Select Play Store app from the Relution Store
  • Reset device to factory state
  • Restart device
  • Fully lock device
  • Update device information
  • Reset password

Policy Configuration

  • → Work Account Setup
  • Manage apps
  • Work profile password
  • Advanced keyguard management
  • Advanced security override
  • Advanced location sharing settings
  • Device password
  • Global proxy
  • Kiosk mode
  • Manage runtime permissions
  • Play Store management
  • Restrictions
  • Samsung Classroom Management
  • System updates
  • WLAN