GSA Android client deployment
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 8e5dd2a · +25 −24 lines · also on GitHub
⋯ 2 unchanged lines
33
description: The Global Secure Access client secures network traffic at the end-user device. This article describes how to download and install the Android client app.
44
ms.service: global-secure-access
55
ms.topic: how-to
6
−ms.date: 08/27/2025
6
+ms.date: 09/02/2025
77
ms.author: jayrusso
88
author: HULKsmashGithub
99
manager: dougeby
⋯ 43 unchanged lines
5353
1. On the **Basics** tab:
5454
1. Enter a **Name**.
5555
1. Set the **Platform** to **Android Enterprise**.
56
−1. Set the **Profile type** to **Fully Managed, Dedicated, and Corporate-Owned Work Profile Only**.
56
+ 1. Set the **Profile type** to **Fully Managed, Dedicated, and Corporate-Owned Work Profile Only**.
5757
1. Set the **Targeted app** to **Microsoft Defender**.
5858
1. Select **Next**.
59
−:::image type="content" source="media/how-to-install-android-client/create-policy-basics.png" alt-text="Screenshot of the Create app configuration policy on the Basics tab.":::
59
+:::image type="content" source="media/how-to-install-android-client/create-policy-basics.png" alt-text="Screenshot of the Create app configuration policy on the Basics tab." lightbox="media/how-to-install-android-client/create-policy-basics-expanded.png":::
6060
6161
1. On the **Settings** tab:
6262
1. Set **Configuration settings format** to **Use configuration designer**.
63
−1. Use the JSON editor to configure the disabled configuration keys, and then select the **+ Add** button.
64
− 1. In the search field, type `global` and select these configuration keys:
65
− - **Global Secure Access** (this key is required to enable Global Secure Access).
66
− - **GlobalSecureAccessPrivateChannel** (this optional key enables Global Secure Access Private channel).
67
− 1. Set the appropriate values for each configuration key according to the following table:
63
+ 1. Use the JSON editor to configure the disabled configuration keys:
64
+ 1. Select the **+ Add** button.
65
+ 1. In the search field, type `global` and select these configuration keys:
66
+ - **Global Secure Access** (this key is required to enable Global Secure Access).
67
+ - **GlobalSecureAccessPrivateChannel** (this optional key enables Global Secure Access Private channel).
68
+ 1. Set the appropriate values for each configuration key according to the following table:
6869
69
−| Configuration key | Value | Details |
70
−|----------------------------------|----------|-----------|
71
−| Global Secure Access | No value | Global Secure Access isn't enabled and the tile isn't visible. |
72
−| | 0 | Global Secure Access isn't enabled and the tile isn't visible. |
73
−| | 1 | The tile is visible and defaults to false (disabled state). The user can enable or disable Global Secure Access using the toggle in the app. |
74
−| | 2 | The tile is visible and defaults to true (enabled state). The user can override Global Secure Access. The user can enable or disable Global Secure Access using the toggle in the app. |
75
−| | 3 | The tile is visible and defaults to true (enabled state). The user **can't** disable Global Secure Access. |
76
−| GlobalSecureAccessPrivateChannel | No value | Global Secure Access defaults to value 2 behavior. |
77
−| | 0 | Private Access isn't enabled and the toggle option isn't visible to the user. |
78
−| | 1 | The Private Access toggle is visible and defaults to the disabled state. The user can enable or disable Private Access. |
79
−| | 2 | The Private Access toggle is visible and defaults to the disabled state. The user can enable or disable Private Access. |
80
−| | 3 | The Private Access toggle is visible but grayed out, and defaults to the enabled state. The user **can't** disable Private Access. |
70
+ | Configuration key | Value | Details |
71
+ |----------------------------------|----------|-----------|
72
+ | Global Secure Access | No value | Global Secure Access isn't enabled and the tile isn't visible. |
73
+ | | 0 | Global Secure Access isn't enabled and the tile isn't visible. |
74
+ | | 1 | The tile is visible and defaults to false (disabled state). The user can enable or disable Global Secure Access using the toggle in the app. |
75
+ | | 2 | The tile is visible and defaults to true (enabled state). The user can override Global Secure Access. The user can enable or disable Global Secure Access using the toggle in the app. |
76
+ | | 3 | The tile is visible and defaults to true (enabled state). The user **can't** disable Global Secure Access. |
77
+ | GlobalSecureAccessPrivateChannel | No value | Global Secure Access defaults to value 2 behavior. |
78
+ | | 0 | Private Access isn't enabled and the toggle option isn't visible to the user. |
79
+ | | 1 | The Private Access toggle is visible and defaults to the disabled state. The user can enable or disable Private Access. |
80
+ | | 2 | The Private Access toggle is visible and defaults to the disabled state. The user can enable or disable Private Access. |
81
+ | | 3 | The Private Access toggle is visible but grayed out, and defaults to the enabled state. The user **can't** disable Private Access. |
8182
82
−> [!NOTE]
83
−> The **GlobalSecureAccessPA** configuration key is no longer supported.
83
+ > [!NOTE]
84
+ > The **GlobalSecureAccessPA** configuration key is no longer supported.
8485
8586
6. Select **Next**.
86
−:::image type="content" source="media/how-to-install-android-client/create-policy-settings.png" alt-text="Screenshot of the Create app configuration policy on the Settings tab.":::
87
+:::image type="content" source="media/how-to-install-android-client/create-policy-settings.png" alt-text="Screenshot of the Create app configuration policy on the Settings tab." lightbox="media/how-to-install-android-client/create-policy-settings-expanded.png":::
8788
8889
1. On the **Scope tags** tab, configure scope tags as needed and select **Next**.
8990
1. On the **Assignments** tab, select **+ Add groups** to assign the configuration policy and enable Global Secure Access.
90
−:::image type="content" source="media/how-to-install-android-client/create-policy-assignments.png" alt-text="Screenshot of the Create app configuration policy on the Assignments tab.":::
91
+:::image type="content" source="media/how-to-install-android-client/create-policy-assignments.png" alt-text="Screenshot of the Create app configuration policy on the Assignments tab." lightbox="media/how-to-install-android-client/create-policy-assignments-expanded.png":::
9192
9293
> [!TIP]
9394
> To enable the policy for all but a few specific users, select **Add all devices** in the **Included groups** section. Then, add the users or groups to exclude in the **Excluded groups** section.
⋯ 35 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:31 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.