Back to top
Home / Knox Manage / Configure / Applications / Assign applications /

Assign internal Android, iOS, macOS, and Windows apps

Last updated January 15th, 2025

You can assign a privately developed app, as well as an app that is sourced from an on-premises vendor. Both of these fall under the definition of internal app.

Requirements

  • Before you can assign an internal app, you must add it to your tenant. Different platforms have different requirements for adding an app:

  • Android devices require a Knox Manage or Knox Suite license (or their Knox Suite Plan equivalent) to install an internal app in the work profile. For more information about Knox Manage licensing, see Licenses overview

  • Internal apps on Android Enterprise, iOS, and Wear OS can only be installed automatically, but the device user can choose to remove them.

Starting with 25.01, the Knox Manage agent for macOS is automatically installed and authenticated during macOS device enrollment. Device users must click allow “Samsung Knox Manage” Notifications to ensure the agent works as expected.

DMG apps are now supported, and can be automatically or manually deployed by the agent. VPP and PKG apps can be installed manually.

A DMG app must contain at least one application file (.app), and can’t be auto-installed during a user agreement prompt. If a DMG contains multiple application files, only one of them will be installed based on the ascending sort order of file names.

Device users can look up assigned apps, as well as manually download or update apps from the Application Store screen of the agent. Unless you disallow app reviews in Setting > Configuration > Basic configuration > App & Service Desk > Allow Knox Manage App store review, device users can leave reviews on App Details pages.

The Support screen of the macOS agent can be used to be send diagnostic logs, or to reach out to the Knox Manage support team (the IT admin’s contact phone number and email address will be transmitted).

The About screen indicates if you’re using the latest agent version.

Assign an internal app

To assign an internal app on any platform:

  1. Go to Application, select an internal app, then click Assign. The Assign Application page opens.

  2. Configure the assignment:

    Setting Action Supported platform
    Target Device Specify the platform, between Android Enterprise, Android Legacy, and Android Enterprise + Legacy.

    Android Enterprise

    Android Legacy
    Installation Area

    For Android Enterprise, the app installs to both the primary profile and work profile.

    For Android Legacy, you can choose where the app installs:

    • Primary profile
    • Knox Workspace
    • Both

    Android Enterprise

    Android Legacy
    Installation Type

    Select how the app installs:

    • With Manual, the device user installs the app manually from the agent.
    • With Automatic, the app installs automatically.

    iOS

    Windows

    macOS
    Installation Request Priority Select the preferred order in which the app installs on the device. Apps with high priority install before apps with normal priority. When multiple apps have high priority, they are installed in order of largest to smallest package size. Android Enterprise
    Installation Context Select whether to install for all users on the device, or the user currently signed in. Windows
    Screen capture Select whether to allow the device user to capture screens in the app. Android Enterprise
    Text copy Choose whether to allow the device user to copy text from the app. iOS
    Printing Choose whether to allow the device user to print from the app. iOS
    Share list Choose whether to allow the device user to share data to the app using the instant share dialog. iOS
    Automatically Run Apps (Non-Android Management API)

    Choose whether the app should run immediately after it installs.

    Values

    • After installation
    • After installation and every app update
    • Don't automatically run app
    		 Android Enterprise

    Managed Configuration

    Managed App Setting

    		 If the app supports it, configure special key-value pairs to override or customize behavior.

    Android Enterprise

    iOS
    Home Screen Shortcut Add a shortcut for the app to the Home screen. If the device user deletes the shortcut, it won't be re-added. Android Legacy on Samsung Galaxy device
    Schedule

    Specify how the app is rolled out:

    • For Use Deployment Scheduler, select Use for a scheduled deployment, or Do not use for a manual deployment.
    • For Deployment Starts At, choose the date and time to start the scheduled deployment.

    Android Enterprise

    Wear OS
    Target type Select one or more groups or organizations to assign the app to. You can't assign to both groups and organizations at the same time. All

  3. Click Assign.

  4. On the Assign Application dialog, review the assignment information and click OK.

On this page

Is this page helpful?