Application Management section lets you install apps for the Android Normal Mode or the Android Kiosk Mode or the Custom Kisok Mode.
You can add apps from the Google Play Store across all three modes, while Custom Apps for AMA-enrolled devices. From the Google Play Store, following types of apps are available to add:
Add Apps from Google Play Store
To add Google Play Store Apps, follow these steps:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Click Add Apps and select Google Play Store.
Android App Management screen appears. - Click Search Play Store App.
- Select the app you want to add and click Select.

- After configuration and setting app permissions, click OK.
Android App Management screen appears.
This allows admin and device users to control each app and make device flexible and secure.
To learn more about android application management configuration. refer to Android Application Management Configuration.
The app is added.
Add Private Apps from Google Play Store
You can add custom apps from Google Play Store through Private Apps.
To add Private Apps(custom apps) from Google Play Store, follow these steps:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Click Add Apps and select Google Play Store.
Android App Management screen appears. - Click Private apps.
- Click Plus (+), enter Title, upload APK and upload .apk or .abb file for installation on the user device and click Create.

- Click the app icon and click Select app.
- Enter Configuration name and click Save.
- After configuration and setting app permissions, click OK.
The app will be visible in Private appslist.

Android Management Apps screen appears.
The app is added.
Add Web Apps from Google Play Store
To add Web apps from Google Play Store, follow these steps:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Click Add Apps and select Google Play Store.
Android App Management screen appears. - Click Web apps.
- Click Plus (+), enter Title, URL, select display type from full screen, standalone and minimal UI, upload icon and click Create.
- Click the app icon and click Select app.
- After configuration and setting app permissions, click OK.
The app is added.
The app will be visible in Web apps list.

Android Management Apps screen appears.
Add Custom Apps
Pre-requisite: You have to add custom apk first in app store to add custom apps.To learn more, refer to Adding Apps Using Upload Custom APK.
You can also push the specific version of a custom app on devices. To know more about pushing app version on a device refer to, Pushing a Custom App Version on Devices.
To add custom apps, follow these steps:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Click Add Apps and select Add Custom Apps.
Add Custom Appspop-up appears with the list of available custom apps.
- Select the app you want add and click Add Apps.
The app is added.
Once the app is added, message will appear on agent/user device to install the app.
Note:
- On Samsung KNOX AMA devices running Android 14 or below, the custom app will be downloaded and installed silently. On other devices, users will receive a message to install the app.
- In case of app upgrade, admin have to add upgraded version and push it again on device/agent.
- After an app upgrade, the admin must upload the updated version and push it to the device/agent.
Pushing a Custom App Version on Devices
Pre-requisite: You have to add custom apk versions first in app store. To learn more, refer to Adding Multiple Versions of a Custom App.
To push custom app version, follow these steps:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Click Add Apps and select Add Custom Apps.
- Click the app. Apps version is displayed.
- Choose the app version and click Add Apps.
- Click Save.
Add Custom Apps pop-up appears with the list of available custom apps.
The app version will be pushed to devices.
Important:
- This feature is only for AMA devices.
- Custom app APK versions remain available in the App Store only until the last Wednesday of each month after upload. If the version has not been pushed to devices within that period, the APK must be re‑uploaded to the App Store.
- Once a custom app is pushed, device users/the EMM agent must manually install the APK from the App Control section.
- If a device has a higher version of an app installed and a lower version is pushed, user have to uninstall the higher version have to install the lower version APK. The same behavior applies in reverse when switching from a lower version to a higher version.
Android Normal Mode
You can install apps on the user device through the Android Normal Mode in the following ways:
- Make apps available for installation through the Manage apps and device option of Play Store on the user device. User can install these apps as required.
- Make apps available through the Application Management section of the Seqrite EMM console. The application management section lets you add apps to the device Play Store, silently install standard apps, install private apps, and web apps using URL on the device.
Secure Agent/Enable Password for Seqrite EMM
To ensure only authorized personnel can make changes to the EMM agent settings and to prevent unauthorized users from modifying device policies or configurations. You can enable Seqrite EMM password protection for the EMM agent installed on managed devices.
- To enable password for Seqrite EMM agent, select Secure Agent checkbox.
Android Application Management Configuration
Android Application Management Configuration lets admin and device user control each app and make device flexible and secure.
Note: This configuration is supported in Android normal, kiosk, and custom kiosk modes.
The following are the Android application management configurations:
- Application ID
- Application Track ID
- Install Silently
- App Upgrade Preference
- Enable Password
- Exempt VPN Config
- Add Delegate Scope
Application ID
A unique identifier for every Android application.
Application Track ID
An Application Track ID is a unique identifier assigned to apps in managed app stores.It ensures that the right version of the app is installed, configured, updated, and secured across all managed devices.
To select the Application Track ID:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Select the app and click edit icon.
- Select the Application Tracking ID from drop down and click Next and then click OK.
The Android Management Apps page appears.
Install Silently
This feature allows admin to select a specific app and install it silently on a device.
To enable silent installation for a specific app:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Select the app for which you want to enable silent installation and click edit icon.
- Select the Install Silently checkbox and click Next and then click OK.
The Android Management Apps page appears.
The app is silently installed on the device.
App Upgrade Preference
An App upgrade preference allows admin to control how and when an Android app is updated. Admin can configure app upgrade preferences.
The following are the upgrade preferences:
- Default Mode: Apps update automatically based on device settings.
- High Priority Mode: Updates are pushed quickly, instead of waiting for the usual schedule.
- Postpone Mode:App updates will be delayed for 90 days after a new version is released.
To enable the app upgrade preference:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration .
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Select the app for which you want to enable app upgrade preference and click edit icon.
- Select the preference from drop down,click Next and then clickOK.
The Android Management Apps page appears.
Enable Password
This feature allows admin to restrict the access to a specific app on a device by enabling password. This helps to prevent unauthorized access and protect sensitive information.
To enable a password to lock a specific app:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Select the app for which you want to enable password and click edit icon.
- Select the Enable Password checkbox and click Next and then click OK.
The Android Management Apps page appears.
The device user must enter the password to access the app.
Note: If the device user forgot the password set for the app, admin can reset and send the command to user to reset the password for the app.
Exempt VPN Config
This configuration allows admin to control how apps interact with a VPN. Admin can enforce VPN usage for specific apps to ensure secure access to company resources or exempt certain apps from the VPN even when the VPN is active.
To enable Exempt VPN Config:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Select the app for which you want to enable password and click edit icon.
- Select VPN Lockdown Enforced to enforce VPN usage for the app or selectVPN Lockdown Exemption to exempt the app from VPN and click Next and then click OK.
The Android Management Apps page appears.
Add Delegate Scope
Adding a delegate scope to an application means assigning predefined privileges to an admin, enabling them to perform specific actions on behalf of the app.
To add delegate scope for the app:
- Log on to Seqrite EMM console and in the left pane, click Apps > Configuration.
- On the App Configurations page, select the configuration and click edit icon.
- Click the Android App Management tab and click Application Management.
- Select the app for which you want to add delegate scope and click edit icon.
- Select Add Delegate Scope checkbox, click Next.
- Select the checkbox for the delegate scope from the list, click Next and then click OK.
The Android Management Apps page appears.
Android Kiosk Mode
In this mode, all the above options of Android Normal Mode are available. However, the Install Silently option is enabled by default and enforces silent installation of selected apps on the user device. In this mode all apps are disabled except for the whitelisted apps in the kiosk mode.
You can also configure the following Advanced Settings options.
- Power Button Actions: Restricts or allows the action when the user presses and holds the power button of the device.
- System Error Warnings: Blocks the system apps forcefully without user’s intervention or allows the user to close the unresponsive system apps.
- Navigation: Blocks or allows the user to use the navigation buttons of the device. User can use only the Home button when the Home Button Only option is set for the device.
- Status Bar: Blocks or allows the display of the system information and the notifications on the status bar of the device.
- Device Settings: Blocks or allows the user to access the device settings app.
- Single App Kiosk Mode: Lets admin configure only single app or required apps on the device.
| Note: |
|---|
| You can set the Default Application Permission as PROMPT, GRANT, or DENY as per the requirements before installing the apps on the device. |
Device System Apps/ System App Configuration in Kiosk Mode
You can also configure the system apps kiosk mode for controlled and limited use on devices in the Device System Apps.
- To add the system apps, click Add System Apps, choose the app and click Add Apps.
Note: The system apps present in the enrolled device will be populated in the Add Device System Apps to Kiosk list.
Custom Kiosk Mode
Custom Kiosk Mode provides admin with advanced control over managed devices. In addition to restricting usage to specific apps, it includes a custom Launcher setting that lets admins customize the user interface and apply device feature restrictions. This makes devices suitable for specific uses while keeping them secure and flexible.
In this mode, Advanced Settings and Device System Apps are in the same way as in Android Kiosk Mode.
Custom Launcher Settings
In Custom Kiosk Mode, Custom Launcher settings give admins control over key device functions like brightness, volume, sound, hotspot, data network, bluetooth, airplane mode, Wi-Fi, allow device hard keys and flashlight. Along with this admin can configure company name, company logo, and launcher wallpaper.