Setup guide · from scratch
Approve Managed Google Play store apps (in-Intune iframe)
Approve Android apps in the embedded Google Play store inside Intune — one action both approves and syncs. Set 'keep approved' for new permissions, and remember approving is not enough: you must also assign to a group.
Step 1. In Intune go to Apps > All Apps > Create.
Screenshot: Create app pane (captured during a live customer build — coming to this page)
Step 2. Under 'Store app' choose 'Managed Google Play app', then Select.
Screenshot: Select app type with 'Managed Google Play app' highlighted (captured during a live customer build — coming to this page)
Step 3. The Google Play store opens embedded (no separate login); search for the app.
Screenshot: Embedded Managed Google Play iframe search (captured during a live customer build — coming to this page)
Step 4. Click the app tile, then click 'Approve' / 'Select'.
Screenshot: App tile with Approve button (captured during a live customer build — coming to this page)
Step 5. Accept permissions on behalf of all users and choose 'Keep approved when app requests new permissions'.
Screenshot: Permissions prompt with 'Keep approved' toggle (captured during a live customer build — coming to this page)
Step 6. Repeat per app, then click 'Sync' and 'Refresh' on the Intune app pane.
Screenshot: Sync / Refresh action on the app pane (captured during a live customer build — coming to this page)
Step 7. Assign each app: open it > Properties > Edit (Assignments), add the target dynamic device group and set the update mode (Default / High Priority / Postponed). Unassigned apps never appear on devices.
Screenshot: Assignments showing the group + update-mode selector (captured during a live customer build — coming to this page)
Step 8. If the store shows 'Custom' mode (after Collections were used), reset via Apps > Managed Google Play > Store layout > Reset to Basic (this deletes all collections).
Screenshot: Store layout showing Basic vs Custom / Reset to Basic (captured during a live customer build — coming to this page)
See it on a real device.
Decolla is in private build — early-access members see a build defined, deployed and rolled back first.
Get early access