Android Enterprise Setup

Android device management in CapaOne runs on top of Android Enterprise — Google’s framework for enterprise mobility management. Before you can enroll Android devices, deploy apps, or apply configurations, CapaOne must be linked to an Android Enterprise account.

The Android Enterprise settings are found under Android → Settings. Until an account is linked, the menu item is called Setup.

What is Android Enterprise?

Android Enterprise is a set of management APIs provided by Google that allows an MDM (like CapaOne) to manage Android devices without requiring users to grant individual permissions. Enrollment through Android Enterprise gives CapaOne full control over managed devices, including silent app installation, configuration enforcement, and policy compliance.

When CapaOne is linked to an Android Enterprise account, it gains access to the Google Play Managed Store — a private, organization-controlled version of Google Play where you approve which apps are available for deployment.

Link an Android Enterprise account

Before you start

Use a work Google account or work email address to sign up, not a personal Gmail account.

1. Go to Android → Setup and click Link to Google account.
2. Optionally, enter an Admin email and one or more Allowed domains, and confirm. Google’s sign-up page opens.
3. Sign in with a company Google account.
4. Click Get started on the Bring Android to Work page.
5. Enter a Business name.
6. Enter details about your key contacts. See GDPR contact information.
7. Read and agree to the Managed Google Play agreement.
8. Confirm and complete the registration.

When you return to CapaOne, the menu item changes to Settings, and the Endpoints, Configurations, Applications, and Enrollment pages become available under Android.

Account details

The Account section in Android → Settings shows the linked account details:

• Display name — the business name registered with Google
• Enterprise ID — the unique identifier Google assigned to your enterprise (format: enterprises/{ID})
• Enterprise type — typically MANAGED_GOOGLE_PLAY_ACCOUNTS_ENTERPRISE for new accounts
• Managed Google Play type — CUSTOMER_MANAGED means your organization controls app approvals in your own Play Store

Managed Google Domain upgrade

The Upgrade to Managed Google Domain option connects your Android Enterprise account to a verified Google Workspace domain. This enables additional management capabilities, including managed Google accounts for users.

The option is shown next to Enterprise type when the type is MANAGED_GOOGLE_PLAY_ACCOUNTS_ENTERPRISE. Click it, optionally enter an administrator email and the allowed domains, and confirm. Google’s upgrade page opens in a new browser tab.

Caution

This upgrade is one-way and cannot be reversed. Only proceed if you have confirmed with your Google Workspace administrator that this is the intended setup.

GDPR contact information

Organizations operating in the EU must designate a Data Protection Officer (DPO) and, where applicable, an EU Representative. Android Enterprise requires this contact information to be registered as part of the enterprise configuration.

You enter these contacts when you sign up for Android Enterprise, in the step where Google asks for details about your key contacts. CapaOne shows them, read-only, in the Contact Information section of Android → Settings:

• Data protection officer — name, email address, and phone number
• EU representative — name, email address, and phone number (required if your organization is not established in the EU but processes EU personal data)

Fields that weren’t filled in show Not available. Missing contacts don’t block device management, but should be addressed for compliance. The contacts can’t be edited in CapaOne.

Good to know

• The Enterprise ID is your troubleshooting reference — when contacting Google support or cross-referencing Google Admin Console activity, the Enterprise ID identifies your CapaOne integration.
• Google authentication required — this field, in the Google Authentication Settings section, shows whether Google account authentication is enforced for device enrollment. The status depends on your enterprise type and enrollment configuration.
• Android Enterprise is a prerequisite for all Android management features — enrolling devices, deploying apps, and applying configurations all require a linked enterprise account.
• Once Android Enterprise is set up, see Android Enrollment for how to enroll devices into CapaOne.