Enroll to Managed Google Play Accounts enterprise

Learn how to Enroll to Managed Google Play Accounts enterprise to manage applications on Android devices.

Before you Begin: An IT Admin must have a Google account not associated to any EMM, Google Workspace (formerly G Suite), or managed domains.

The workflow to enroll to managed Google Play Accounts enterprise is as follows:

A. Request for enterprise token and upload it: You need an enterprise token (the Google credentials for the master service account), to create service account credentials, and to enable required privileges which is required for enterprise-specific service account. This token has user-restricted privileges and is not a part of MDM server installation. You need to request a token from BigFix MCM Admin and upload it to further proceed to create an enterprise service account.

B. Register for an enterprise service account and complete the process to manage Android devices.

A. Request for enterprise token and upload it

As an IT admin, to send request for enterprise token, perform the following steps:
  1. Go to the BigFix Configuration URL (for example, https://MDM-demo/config). This URL represents where you installed MDM and is separate from the WebUI. Enter your organization email ID and password and click Login.

  2. From the BigFix Admin Configurations page, navigate to Manage Token and click Request Token.



    This triggers a mail to the BigFix MCM Admin with the generated encoded secret and the deployment serial number.

  3. Send the email with the encoded secret and the deployment serial number to the BigFix MCM Admin (bigfix_mcm_admin@hcl.com). BigFix MCM Admin uses the information, generates the encrypted token file (FILE_2.enc), and mails it back to you.

  4. After you receive the encrypted token file from the BigFix MCM Admin, upload it. To do that, in the BigFix Admin Configuration page, navigate to Manage Token and click Upload Token. On successfully uploading the token, the success message is displayed and under Enterprise Registration, the Register button is enabled and you can register the enterprise.

Note: The enterprise token can be used just once. After an enterprise service account is created using the token, it gets destroyed.

B. Register for an enterprise service account

As an IT admin, to register your enterprise using the Android Management API, perform the following steps:
  1. Go to the BigFix Configuration URL (for example, https://MDM-demo/config. Note this is separate from WebUI). Enter your organization email ID and password and click Login.

  2. The following screen appears, Enter the required details.


    Enterprise Registration

    Note: The Register button gets enabled only after uploading the token file received from the BigFix Mobile Admin.
    1. Business Name: This field is required. Enter the name of the business to be displayed.
    2. Data Protection Officer: This is optional. Enter the Name, Email, and Phone number of the person responsible for the data.
    3. EU Representative: This is optional. Enter the Name, Email, and Phone number of the person who represents the enterprise.
    4. Contact Info: This is optional. Enter the email of the person to contact in the enterprise.
      Note: After the enterprise is registered, you can modify the details of Data Protection Officer, EU Representative, and the Contact Info.
    5. Select the consent check box for Managed Google Play agreement.
    6. Click Register.

    A service account is created and auto-provisioned.

    After completing the registration, BigFix Admin Configuration page displays the enterprise ID, Account Type, Service Account, and all the other optional information entered.



    This process creates the Enterprise service account, service account credentials, and encrypts the credentials and saves to certificates directory. IT admins can now provision Android devices to the created enterprise account. Managed Google Play Accounts (user accounts) are automatically created when devices are provisioned.

  3. Update information: You can update the optional enterprise information such as the Data Protection Officer details, EU Representative details, and the Contact Email if required. To do that:
    1. Update the required information.
    2. Select the consent check box for Managed Google Play agreement.
    3. Click Update.