How to Enroll Organization in Android Enterprise?

Android Enterprise (formerly Android for Work) is a powerful framework designed to secure corporate data by creating a dedicated work container. This separates professional applications and data from personal content, allowing IT admins to enforce security policies without compromising user privacy.

To begin managing devices, you must first register your organization with the Android Enterprise program.

Prerequisites for Android Enterprise Enrollment

Before starting, ensure you have access to your Hexnode UEM portal and a Google account (Work account or personal Gmail).

The enrollment workflow follows three stages:

1. Organization Registration: Linking your business to the Google Android Enterprise program.
2. Device Enrollment: Choosing between Device Owner (DO), Profile Owner (PO), or Work Profile on Company-Owned (WP-C) modes).
3. Configuration (Optional): Setting app permissions, creating custom app stores, and deploying software.

Step-by-Step: Enrolling via Managed Domain/Google Domain

Hexnode facilitates a seamless integration with Managed Google Play. Follow these steps to register your organization:

1. Navigate to Enrollment: Log in to the Hexnode UEM portal. Go to Enroll > Platform – Specific > Android > Android Enterprise > Enroll Android Enterprise Devices.
2. Select Enrollment Method: Choose Managed Domain (or Google Domain) and click Enroll.
3. Assign Profile: Select a Default enrollment profile or click “Create new profile” to customize settings for new devices.
4. Google Authentication:
   1. Sign in with your Google Work account.

   

   2. No work account? Use a personal Gmail address and select Sign up for Android only.



5. Organization Details: Click Get Started, enter your Organization Name, and review the Managed Google Play agreement.
6. Finalize: Accept the terms and click Confirm > Complete Registration. You will be redirected back to the Hexnode portal.

Managing Multi-User Access for Android Enterprise

When your organization registers for Android Enterprise via a Managed Domain, a dedicated Managed Google Play account is generated. The email address used during initial enrollment is automatically designated as the Primary Administrator.

To scale IT operations, you can delegate app management tasks by adding multiple users to the Managed Google Play console.

User Roles and Permissions Hierarchy

Understanding the distinction between roles is critical for secure account governance:

Note: Only Owners possess the authority to create, upgrade, or remove other users within the Managed Google Play console.

Step-by-Step User Management

1. How to Add a New Admin

1. Sign in to the Managed Google Play console.
2. Navigate to Admin Settings > Admins.
3. Click the (+) button, enter the user’s email address, and select Invite.



4. The user must open the invitation email and click Get Started to activate their access.

2. How to Create an Owner (Role Upgrade)

Owners cannot be created directly; they must be upgraded from an existing Admin account.

1. In the Admins section of Managed Google Play, locate the target user.
2. Click the Pencil (Edit) icon next to their name.
3. Change the user role from Admin to Owner and click Update.

3. How to Delete an Owner or Admin

1. Go to Admin Settings > Admins.
2. Click the Pencil icon next to the user you wish to remove.
3. Select Delete and confirm.

Pro-Tip: Re-configuring Hexnode Integration

If you need to re-configure the Android Enterprise settings within the Hexnode UEM portal without forcing all your devices to re-enroll, use this workflow: Create a new Owner account, then remove the old one. This maintains the enterprise link while updating administrative credentials.

Frequently Asked Questions (FAQs)

Q1: Can I have multiple Owners for one enterprise account?

Yes. It is recommended to have at least two Owners to prevent lockout if one administrator leaves the organization.

Q2: Why can’t I see the option to delete a user?

Ensure you are logged in as an Owner. Users with “Admin” permissions can see other users but cannot delete them or change roles.

Troubleshooting

1. Error: “Cannot enroll organization”

Context: This error occurs while attempting to enroll an organization with Android Enterprise in Hexnode.

Probable Cause

The organization is already linked to a Hexnode portal from a previous enrollment attempt.

Solution

To resolve this, you must manually release the organization from the Google Play Console:

1. Log in to the Google Play Console.
2. Navigate to Admin Settings.
3. Locate your Organization name and Organization ID.
4. Click the ellipsis (three-dot icon) next to Organization information.
5. Select Delete Organization.
6. Return to Hexnode and restart the enrollment process.