Manage private Android apps in Google Play

Make internal work apps available to users

Supported editions for this feature: Frontline; Business Starter, Standard and Plus; Enterprise; Education Fundamentals, Standard, Teaching and Learning Upgrade, and Plus; G Suite Basic and Business; Essentials; Cloud Identity Free and Premium. Compare your edition

You can host Android apps specifically for your organization in the managed Google Play store and control who can download them. With managed Google Play, you also get security checks, such as user authentication and malware detection.

You can publish private apps to the Play store from the Google Admin console or the Google Play Console. After you add a private app to the apps list, users can download it from the managed Play Store on their Android device. It can take a few hours for the app to be available to users.

Before you begin

Read the following sections to decide how to publish your app and important considerations.

Open all in this section  |  Close all

Managing private apps in Admin console versus Google Play Console

You might want to use Google Play Console if the following is true:

  • You have existing private apps in Play Console. You can't manage existing private apps in the Admin console.

You might want to use Admin console if any of the following are true:

  • You don't plan on making your private apps public.
  • You don't want to pay a one-time 25 USD registration fee.
  • You want to your apps list to include all managed apps—public mobile apps, SAML apps, and private apps.
  • You want to make the app available to only select organizational units and groups.

Important information about app publishing

  • Apps can't be published as a private app and in the public Google Play store at the same time. If an app with the same app ID was published by another organization (publicly or privately), you can't publish the app until the developer changes the application ID for your variant. However, you can add public apps to your app list to make them available to your users as managed apps. This setup allows your users to easily find all work-related apps in one place.
  • If you publish an app to the public Google Play store, you can change it to a private app but you won't be able to manage it in your Admin console.
  • Private apps don't support billing features. Publishers can't charge for private apps.
  • In Play Console, you can't publish the app for a specific group of users. You can publish an app intended for a specific country or specific device models. If you want to beta test your app with specific groups, or Play Store users, you can set up alpha/beta testing.
  • The app must be less than the download size limit.

Option 1: Publish private apps from the Admin console

To upload and publish private apps in the Admin console, you only need an Android application package (APK) and a title. When you publish a private app for the first time, a Play Console account is created on behalf of your organization. Private apps are automatically approved for your organization and are typically ready for distribution within 10 minutes. You can upload up to 15 private apps per day.

  1. From the Admin console Home page, go to Apps and then Web and mobile apps.

  2. ClickAdd app and then Add private Android app.
  3. At the bottom, click Create"".
  4. Enter a title.
  5. Click Upload APK.
  6. Select an APK and click Open.
  7. Click Select.
  8. Set who can find and download the app.
    • To let all users in your organization install the app, select Entire organization.
    • To allow only certain users to install the app, clickSelect groups or Select organizational units. You can add both groups and organizational units. Supported editions for this feature: Frontline; Business Plus; Enterprise; Education Standard and Plus; G Suite Basic and Business; Cloud Identity Premium. Compare your edition

      Groups settings are applied at the top organizational unit level and override organizational unit settings. If a user belongs to multiple groups with conflicting configurations, the settings are applied in order of group precedence, which you can set after you add the app.

  9. Click Continue.

  10. Set app options.

    • Access method: Choose how users get the app. To apply a managed configuration before you force install an app, select Available, complete app setup, apply the managed configuration, then edit the app settings to force install the app.
      • To let users install the app themselves, select Available. With this option, users who don't need the app don't have to download it.
      • To install the app on all managed devices, select Force install. With this option, the app is automatically installed on all managed devices, with no option to opt out. Optionally, you can prevent users from uninstalling a force installed app.

        Force install is also supported for basic mobile management with Business Plus, Enterprise, G Suite Business, and Cloud Identity Premium editions.

    • Allow users to add widgets to homescreen–Let users create a home screen shortcut when a widget is available.
    • Use as the always-on VPN app–When turned on, app traffic from a work profile or managed device must pass through this app. Requires Android 7.0 or later. This setting creates a more secure network connection for work profile traffic.
  11. Click Finish.

Depending on the app, you might have more settings options. For details, see Configure app settings.

Edit and unpublish private apps from the Admin console

Open all in this section  |  Close all and return to top

Edit the title or APK of a private app

  1. From the Admin console Home page, go to Apps and then Web and mobile apps.

  2. ClickAdd app and then Add private Android app.
  3. Select the private app you want to edit.
  4. Click Edit.
  5. Update the title or click edit to upload a new APK.
  6. Click Save.

Edit advanced private app details

To add a description, screenshots, and other advanced app details:

  1. From the Admin console Home page, go to Apps and then Web and mobile apps.

  2. ClickAdd app and then Add private Android app.
  3. Select the private app you want to edit.
  4. Click Make advanced edits.
  5. Go to Grow and then Store presence and then Main store listing.
  6. Make any edits and click Save.

Unpublish a private app

If you unpublish a private app, the app isn't available for new users to find and download in managed Google Play. However, existing users can still use your app.

To unpublish an app:

  1. From the Admin console Home page, go to Apps and then Web and mobile apps.

  2. ClickAdd app and then Add private Android app.
  3. Select the private app you want to unpublish.
  4. Click Make advanced edits.
  5. Using a Google Account, sign in to the Play Console. You can use this account in the future to sign into the Play Console.
  6. Go to Release and then Setup and then Advanced settings.
  7. In the App Availability section, select Unpublish.

Option 2: Publish private apps from the Play Console

For instructions, see Publish private apps from the Play Console. Note: To avoid the registration fee, follow the instructions in this article to publish private apps from the Admin console.

Set who can publish and access private apps

If you aren't the one who publishes private apps, you can allow other users or third-party developers to publish private apps. If your organization uses managed Play without an EMM (formerly called Google Play Private Channel) to grant access to private apps, you must explicitly allow users to access and download private apps. For instructions, see the following sections.

Open all in this section  |  Close all and return to top

Allow other users to publish private apps

Allow third-party developers to publish apps

No EMM: Allow users to access private apps

Before you begin: To apply the setting for certain users, put their accounts in an organizational unit.

  1. From the Admin console Home page, go to Devices.

  2. On the left, click Mobile & endpoints and then Settings and then Android settings.
  3. Click Apps and data sharing and then Google Play private apps.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Check theAllow users to access Google Play private apps box.
  6. Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

Related topics

  • Manage private apps (Managed Google Play)

Was this helpful?

How can we improve it?