Hi Daniel,

Thank you for your question. Work managed devices will only allow your company’s enterprise google account to be used in the play store. There does not appear to be an option to use an alternative google account in the play store.

If you approve Soti Surf, or another web browser in your For Work Account, the user will be able to access the internet and create their own google account on google's website. 

What would be some uses cases that you want to have this feature for?

Please feel free to let us know if you have any questions or concerns.

Kind Regards

Thank you very much for the reply.

In work managed devices, if you provided another personal Google account in the system you can switch your Google account in the Play Store (top left). We need a solution

Regards

Hi Daniel,

You can try using "Disable Google Account Creation" in an Android Enterprise Feature Control payload.  If you can't find such item, you might need to upgrade your MobiControl server.  

Hello,

we want still allowing the Google personal accounts creation (as indicated at the beginning of the post). I want to know any way to disable Google account switching only in the Play Store app.

Thanks!

Hi Daniel,

Thank you for your response. Would you consider android for work enrollment type (Android Enterprise Enrollment) and see if it meets your requirements? Devices enrolled using this method will by default only use the corporate google account linked to MobiControl in the play store. For specific apps such as email or twitter, users should have the capacity to enter their own accounts.

Would this be something you are looking for?

Another type of enrollment is known as managed profile. You will have the option to push apps to the devices, but they will be accessible only within a specific enterprise folder on the device. Users will have the option to enter their own google account in the play store outside of that folder. The downside is that the users will be able to unenroll their device from MobiControl very easily.

Please feel free to contact SOTI Support if any of the two options suggested is something that you would like to try. One of our representatives will be happy to provide you with additional assistance.

If any of the options above does not meet your requirements, please give us more details on what you are looking for. We are happy to see if we can submit a feature request to our development team on your behalf so that we can further improve our product to meet your requirements.

Below are some documentation for your reference.

Add a Google Managed Account to MobiControl

https://www.soti.net/mc/help/v13/en/default.htm#Web/Profiles/AndroidPlus/AndroidWork/AFW_mgpa.html

Setting Up Device for Enrollment

https://www.soti.net/mc/help/v13/en/default.htm#Web/Profiles/AndroidPlus/AndroidWork/managing_androidwork_devices.html#ENROLLAFW

Kind Regards,

Hi Daniel,

You first uncheck the  "Disable Google Account Creation"  feature control option and  allow a device user to add his/her personal account. Then, you check the feature control option to disallow him/her from adding another personal account, although he/she can remove the old personal account previously added.  This should work for your use case if each of your device is not shared by multiple end-users.

All the above assume you are using Android Enterprise device agent enrolled in managed-device mode.

Hello everyone,

In fact, devices are enrolled as an Android Enterprise managed devices.

If I add the personal Google account first, the option to switch to this account in the Play Store still appears, even disabling the addition of Google accounts option later ... I need at least one way to know what applications are installed through the play store (maybe through some log), so I could contrast it with our blacklist...

Thank you

Either one of the following may be a partial solution for your problem on MobiControl v14.x :

1.  Consolidate from time to time the full list of app that are allowed to be installed by the device end-user, and have all such apps added to the corporate Managed-Google Play store.  There is thus no need to allow addition of Personal Google account for app installation.

2.  Allow personal Google account to be added for app selection from personal Google Play store, but add app blacklist(s) with application-run-control profile configuration to disallow installation/running of known malware or other software violating corporate security/usage policies.

Hi everyone,

we have over 550 devices enrolled, so the second point is very difficult to discover every non-permission installed app for adding to the blacklist... we need some log (i didn't find any alarm, event, etc, in the console) which say us that an app has installed on the device from Google Play. So I'll can put (or won't) that app in the blacklist

Are there any way to have a personal google account but disabling switching account in Google Play? How other people with the same problem work?

Thanks a lot

Hello Everyone,

Any reply about this? Maybe any way to get some log about Google Play apps installation could be help me to know, at least, what apps people install on their own, and put in a blacklist

Regards

Did you ever resolve this? 

We need to allow access to gmail emails for a different account but don't want the user to be able to swap the account used in the play store.

There is no solution for this because SOTI cannot control the Account switching from playstore. If some one need to add Gmail account addition to Manage account only work around is block the playstore app from application control profile. 

I don't think SOTI can help on this.

Hi

Daniel

There is a way blocking some activities of the playstore APP that will let you deploy apps by the Android Enterprise Binding but will block the personal playstore to download apps. 

So you can keep using other services like contacts, googledrive sync, whatsapp, etc.

Regards.