Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 16:48 UTC Customize Public modeDiscuss ChangeIntel on Discord

GSA Android client deployment

This page's changes and edits · All guidance changes

Microsoft's edit ·

Aug 12 added screen shots from Word doc

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 7a5c769 · +6 −1 lines · also on GitHub

⋯ 2 unchanged lines
33 description: The Global Secure Access client secures network traffic at the end-user device. This article describes how to download and install the Android client app.
44 ms.service: global-secure-access
55 ms.topic: how-to
6 −ms.date: 08/08/2025
6 +ms.date: 08/12/2025
77 ms.author: jayrusso
88 author: HULKsmashGithub
99 manager: dougeby
⋯ 52 unchanged lines
6262 1. Set the **Profile type** to **Fully Managed, Dedicated, and Corporate-Owned Work Profile Only**.
6363 1. Set the **Targeted app** to **Microsoft Defender**.
6464 1. Select **Next**.
65 +:::image type="content" source="media/how-to-install-android-client/create-policy-basics.png" alt-text="Screenshot of the Create app configuration policy on the Basics tab.":::
66 +
6567 1. On the **Settings** tab:
6668 1. Set **Configuration settings format** to **Use configuration designer**.
6769 1. Use the JSON editor to configure the disabled configuration keys. Select the **+Add** button.
⋯ 19 unchanged lines
8789 > The **GlobalSecureAccessPA** configuration key is deprecated.
8890
8991 6. Select **Next**.
92 +:::image type="content" source="media/how-to-install-android-client/create-policy-settings.png" alt-text="Screenshot of the Create app configuration policy on the Settings tab.":::
93 +
9094 1. On the **Scope tags** tab, configure scope tags as needed and select **Next**.
9195 1. On the **Assignments** tab, select **+ Add groups** to assign the configuration policy and enable Global Secure Access.
96 +:::image type="content" source="media/how-to-install-android-client/create-policy-assignments.png" alt-text="Screenshot of the Create app configuration policy on the Assignments tab.":::
9297
9398 > [!TIP]
9499 > To enable the policy for all but a few specific users, select **Add all devices** in the **Included groups** section, and then add the users or groups to exclude in the **Excluded groups** section.
⋯ 35 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:31 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 16:48 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current