# Controlled Rollout using Intune

## Enroll Android Devices Using Android Enterprise

### Link Google Play Account to Intune

{% hint style="info" %}
️ Before we can enroll Android devices, we need to connect to **Google Play Store**. There is no need for a developer account to connect to **Intune**.
{% endhint %}

1. On <https://intune.microsoft.com/>, go to **Devices**.
2. Under **Android**, click on **Android enrollment** and select **Managed Google Play**.

![](/files/IXBRTmZfMHocGEQlni8B)

3. Check the “**I agree**” checkbox and click on **Launch Google to connect now**.

![](/files/oOkYA9Ju3BErAz955HBv)

4. Follow the prompts and sign in using a **Google account**.

![](/files/L3Kxu7nOztQuWDWcJ4m6)

5. Green Status will be obtained once signed in and connected.

## Enrollment Profile

{% hint style="info" %}
️ There are several enrollment profiles on Intune. In this example, we use Corporate-owned, fully managed user devices.
{% endhint %}

{% hint style="warning" %}
️ To enroll as a Corporate-owned, fully managed profile, devices must reset.
{% endhint %}

1. Click on **Corporate-owned, fully managed user devices**.

![](/files/udS7PRovdioq1mUM6jxf)

2. On the next page, click on **Create Profile**.

![](/files/CQQowqzWrthzJIaIojdZ)

3. Type in the device name to be enrolled with the proper description.

![](/files/e7yu71KJLsjSqFagoMos)

a. After creating a profile, a Token will be received to enroll a device.

b. On your Android device, perform a factory reset.

c. On the **Google** **sign-in screen**, in the email or phone, type “*afw#setup*\*\*”\*\*.

d. Enter the code or scan the QR code to enroll the device.

{% hint style="info" %}
**Note:** For personally-owned devices with work profiles, you can enroll by downloading the **MS Company Portal** (Available on Play Stores) and logging into your work account.
{% endhint %}

{% hint style="info" %}
️ For more information, visit [**Enroll device**](https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-device-android-microsoft-intune-app).
{% endhint %}

## Deploy the EKW app using Intune

1. In the <https://intune.microsoft.com/>, click **Apps** and select **Android**.
2. Click on the **Add** button.

![](/files/YmxZHIUc6smv5yqOlbQB)

3. Click on the **Managed Google Play app**.

![](/files/gJ4ylckCDG6YjCyBwIPJ)

4. Search for **Epicor Kinetic Warehouse**.

![](/files/Do0dzCKxyqZA9ODawiOq)

{% hint style="info" %}
️ **To upload APK as a Private App**, select Private App from the second option. Note: Please make sure your APK has a unique **package name** that has not already been used in Google Play.
{% endhint %}

5. Click on **Select** and **Sync**.

![](/files/soSvS8kCKU2t08WY7bOW)

6. Once synced, **Epicor Kinetic Warehouse** will be included in the list.

![](/files/d7KWrzDTkMcma8FxNrDP)

{% hint style="info" %}
️ For more information on App deployment, please visit <https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work#add-a-managed-google-play-store-app-directly-in-the-microsoft-intune-admin-center>
{% endhint %}

## Creating Group in Intune

1. In the <https://intune.microsoft.com/>, click **Apps** and select **Android**.
2. Go to **Group** and select **New Group**.

![](/files/nIg4ZPMQmPS3wCQGO7hE)

3. Under the **Group Type**, in the drop-down, select either **Security** or **Microsoft 365**.
4. Then select “**No members selected**” to add users or devices.

![](/files/CdmMk5a7RAb0ySmq7ThF)

{% hint style="info" %}
We can assign enrolled devices in the **Security group** while **Microsoft 365** can only assign to users. Intune supports both assignments.
{% endhint %}

{% hint style="info" %}
️ More information: <https://learn.microsoft.com/en-us/mem/intune/apps/apps-deploy>
{% endhint %}

5. Search for users or devices to add to the group.

![](/files/VEVslkiVIFi7EulBUllw)

6. Click **Create**.

## Application Assignment

{% hint style="info" %}
️ Updates for the app can be postponed for 90 days for certain groups of users or devices using Intune.
{% endhint %}

1. In the [**Microsoft Intune Admin Center**](https://intune.microsoft.com/), click on **Apps**.

![](/files/n5dLA5l2rvZDs36SFkak)

2. Click on **Android** and select the **EKW**.

{% hint style="info" %}
EKW is managed by the Google Play Store.
{% endhint %}

![](/files/MfXoCrXB8ONxnDPqqEeX)

3. In the E**picor Kinetic Warehouse(EKW)** app, select **Properties** and under **Assignments**, click on **Edit**.

![](/files/DJYJt6mxhnppXNoiz0Zz)

{% hint style="info" %}
Assume that we have two groups of users, the nyuth and the Security Team. We want the security team to get an update as soon as possible and postpone the update to nyuth team until the security team completes testing. We can do that by updating the priority.
{% endhint %}

4. Click on **Default** to change the update priority.

![](/files/DIYBX8pWgmDGOovotfiN)

5. Change the update priority for nyuth team to **Postponed**.
6. Meanwhile, change priority for the security team to **High Priority**.

![](/files/sYA6T7rjgyZKu52uvsF4)

7. Refer to the screenshot.
8. Click **Save.**

![](/files/d1Bjfg6FdGqdqJaoQ43G)

1. When the **EKW** release a new version to the **Play Store**, the security team will get an update. If we want the nyuth team to get the latest update after testing, we need to change the update priority from **Postponed** to **High Priority**.

{% hint style="warning" %}
️ Make sure we change the nyuth team back to Postponed to avoid auto-update when the new version gets released.
{% endhint %}

{% hint style="info" %}
**Note:** **High Priority** means the devices will get the update soon after the new release becomes available on the **Play Store**, while **Postponed** means the devices will get the update after 90 days of the released date. Unfortunately, this **90 days cannot be changed.**
{% endhint %}

## Preset the License Key and URL

{% hint style="info" %}
️ For a company that has more than 100 devices, it would be a hassle to enter a license key and URL for every device. Preset the values using the steps in this guide.
{% endhint %}

1. In the [**Microsoft Intune Admin Center**](https://intune.microsoft.com/), under **Apps**, click on **App Configuration policies**.

![](/files/5xOSZkgMrmltFtjQQXCt)

2. Select **Add** and click on **Managed devices**.

![](/files/io9DkfX72UjA6lMbAm14)

3. In the landing page, provide the appropriate information.

![](/files/wgtCjAIDtmK3K48qFtr2)

| **Title**        | **Details**          |
| ---------------- | -------------------- |
| **Name**         | Appropriate Name     |
| **Platform**     | Platform Information |
| **Profile Type** | Profile Information  |

4. Under **Create app configuration policy,** click on **Select app**.

![](/files/f6MDa7TcjzzR7kzDgToV)

![](/files/CFhb89zOn1GjxQLQrOFr)

5. In the **Associated app** section, select the **EKW application**.
6. Preset the values such as **Epicor server URL**, **licence key**, and **username**.

{% hint style="info" %}

* Leave the username value “blank” if it is necessary.
* For security reasons, the password value cannot be preset.
  {% endhint %}

![](/files/nYu3qiqcxwjlp4MS2pKZ)

7. In the **Assignments** section, assign to **users**, **groups** and/or **devices**.

{% hint style="info" %}
In this example, it is assigned to all devices.
{% endhint %}

![](/files/iLBOn2UvSI6oTE0jBuQG)

8. Review and create.

{% hint style="warning" %}
️ Wait up to 30 minutes for the policies to apply on devices.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.biscit.com/epicor-kinetic-warehouse/epicor-kinetic-warehouse-best-practice-guide/controlled-rollout-using-intune.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
