Deploy Android Enterprise Apps via Managed Google Play in Intune

Quick Answer

The correct answer is to add the app from Managed Google Play in Intune, because Android Enterprise work profile devices require all apps to be sourced through the Managed Google Play store rather than through direct APK uploads. When you add an Android Enterprise app from Managed Google Play, Intune synchronizes the app metadata and makes it available for assignment to work profile devices, ensuring compliance with the work profile container’s security model. On the MD-102 exam, this question tests your understanding of the app deployment workflow for Android Enterprise, often appearing as a scenario where you must distinguish between adding an app from the store versus uploading an APK—a common trap since the latter is only valid for device administrator or legacy Android management. Remember that for work profiles, Intune acts as a broker to Managed Google Play; you must first add the app to Intune’s console before you can assign it, and there is no automatic sync that bypasses this step. A helpful memory tip is “Add first, assign second—no APK for work profile.”