# How to Enroll Organization in Android Enterprise?

Android Enterprise (formerly Android for Work) is a powerful framework designed to secure corporate data by creating a dedicated **work container**. This separates professional applications and data from personal content, allowing IT admins to enforce security policies without compromising user privacy.

To begin managing devices, you must first register your organization with the Android Enterprise program.

### Prerequisites for Android Enterprise Enrollment 

Before starting, ensure you have access to your **Hexnode UEM** portal and a **Google account** (Work account or personal Gmail).

The enrollment workflow follows three stages:

1. **Organization Registration**: Linking your business to the Google Android Enterprise program.
2. **Device Enrollment**: Choosing between [Device Owner (DO)](https://www.hexnode.com/mobile-device-management/help/how-to-enroll-a-device-as-device-owner-using-hexnode-mdm/), [Profile Owner (PO)](https://www.hexnode.com/mobile-device-management/help/how-to-enroll-a-device-as-profile-owner-using-hexnode-mdm/), or [Work Profile on Company-Owned (WP-C)](https://www.hexnode.com/mobile-device-management/help/how-to-enroll-a-device-in-android-enterprise-as-work-profile-on-company-owned-device/) modes).
3. **Configuration (Optional)**: [Setting app permissions](https://www.hexnode.com/mobile-device-management/help/set-up-permissions-and-configurations-for-an-app-using-hexnode-mdm/), [creating custom app stores](https://www.hexnode.com/mobile-device-management/help/customize-play-store-with-custom-apps-using-hexnode-mdm/), and deploying software.

Step-by-Step: Enrolling via Managed Domain/Google Domain 
---------------------------------------------------------

Hexnode facilitates a seamless integration with Managed Google Play. Follow these steps to register your organization:

1. **Navigate to Enrollment**: Log in to the Hexnode UEM portal. Go to **Enroll > Platform – Specific > Android > Android Enterprise > Enroll Android Enterprise Devices**.
2. **Select Enrollment Method**: Choose **Managed Domain** (or [Google Domain](https://www.hexnode.com/mobile-device-management/help/configure-android-in-the-enterprise-using-gsuite-in-hexnode-mdm/)) and click **Enroll**.
3. **Assign Profile**: Select a **Default enrollment profile** or click “[Create new profile](https://www.hexnode.com/mobile-device-management/help/create-enrollment-profile-for-android-enterprise-devices/)” to customize settings for new devices.
4. **Google Authentication**: 
    1. Sign in with your Google Work account.
    ![Enter the Google work account in the field to register with android enterprise](https:2024/03/Signing-in-with-work-email-address-for-android-enterprise-registration.png "Signing in with work email address for android enterprise registration")
    
    3. No work account? Use a personal Gmail address and select **Sign up for Android only**.
![Select the Sign up for Android only option to register with your personal email address](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2024/03/Android-enterprise-registration-with-Managed-Google-domain.png "Android enterprise registration with Managed Google domain")

6. **Organization Details**: Click **Get Started**, enter your **Organization Name**, and review the Managed Google Play agreement.
7. **Finalize**: Accept the terms and click **Confirm > Complete Registration**. You will be redirected back to the Hexnode portal.

Managing Multi-User Access for Android Enterprise 
--------------------------------------------------

When your organization registers for Android Enterprise via a **Managed Domain**, a dedicated **Managed Google Play** account is generated. The email address used during initial enrollment is automatically designated as the **Primary Administrator**.

To scale IT operations, you can delegate app management tasks by adding multiple users to the [Managed Google Play console](https://play.google.com/work/apps).

User Roles and Permissions Hierarchy 
-------------------------------------

Understanding the distinction between roles is critical for secure account governance:

Feature/PermissionAdminOwner**App Management**Approve, manage, and deploy free/paid apps.Full Admin capabilities.**User Management**View existing admins.Add or delete Admins and Owners.**Enterprise Control**Cannot delete the enterprise account.Can delete the entire enterprise.**Note**: *Only **Owners** possess the authority to create, upgrade, or remove other users within the Managed Google Play console.*

Step-by-Step User Management 
-----------------------------

### 1. How to Add a New Admin 

1. Sign in to the  **[Managed Google Play console](https://play.google.com/work/apps)**.
2. Navigate to **Admin Settings > Admins**.
3. Click the (**+**) button, enter the user’s email address, and select **Invite**.
![create new owners](https:2021/11/send-invitation-to-new-owners.png "send invitation to new owners")

5. The user must open the invitation email and click **Get Started** to activate their access.

### 2. How to Create an Owner (Role Upgrade) 

Owners cannot be created directly; they must be upgraded from an existing Admin account.

1. In the **Admins** section of Managed Google Play, locate the target user.
2. Click the **Pencil (Edit)** icon next to their name.
3. Change the user role from **Admin** to **Owner** and click **Update**.

### 3. How to Delete an Owner or Admin 

1. Go to **Admin Settings > Admins**.
2. Click the **Pencil** icon next to the user you wish to remove.
3. Select **Delete** and confirm.

![delete the existing owner from Android Enterprise](https:2021/11/delete-the-owner-from-admin-settings.png "delete the owner from admin settings")

### Pro-Tip: Re-configuring Hexnode Integration 

If you need to re-configure the Android Enterprise settings within the **Hexnode UEM** portal without forcing all your devices to re-enroll, use this workflow: **Create a new Owner account, then remove the old one**. This maintains the enterprise link while updating administrative credentials.

Frequently Asked Questions (FAQs) 
----------------------------------

### Q1: Can I have multiple Owners for one enterprise account? 

Yes. It is recommended to have at least two Owners to prevent lockout if one administrator leaves the organization.

### Q2: Why can’t I see the option to delete a user? 

Ensure you are logged in as an **Owner**. Users with “Admin” permissions can see other users but cannot delete them or change roles.

Troubleshooting
---------------

### 1. Error: “Cannot enroll organization” 

**Context**: This error occurs while attempting to enroll an organization with Android Enterprise in Hexnode.

**Probable Cause**

The organization is already linked to a Hexnode portal from a previous enrollment attempt.

**Solution**

To resolve this, you must manually release the organization from the Google Play Console:

1. Log in to the **Google Play Console**.
2. Navigate to **Admin Settings**.
3. Locate your **Organization name** and **Organization ID**.
4. Click the **ellipsis** (three-dot icon) next to **Organization information**.
5. Select **Delete Organization**.
6. Return to Hexnode and **restart** the enrollment process.