Managing your Application Deployment

After deploying applications, you can confirm their assignment and installation from the Workspace ONE UEM console. You can also manage application versions and deploy new updated applications. Use access policies to manage access to SaaS applications.

Manage Custom Notifications

Update end users about changes to applications and books through custom notifications. You can send messages using email, SMS, or push notification.

Customize a message template to include application or book names, descriptions, images, and version information. Templates can also include links to your app and book catalogs, and they can prompt end users to download content from the notification. Workspace ONE UEM sends this message when you use the Notify Devices option on the actions menu or from the manage devices feature.

Navigate to Groups & Settings > All Settings > Devices & Users > General > Message Templates.

Select Add, complete the required information, and save the settings.

Setting	Description
Copy	From the ellipses-vertical, you can click copy if you choose to duplicate the assignment configurations.
Delete	From the ellipses-vertical, you can delete to remove the selected assignment from the application deployment.
Priority	You can modify the priority of the assignment you configured from the drop-down menu while placing the selected assignment in the list of assignments. Priority 0 is the most important assignment and takes precedence over all other deployments. Your devices receive all the restrictions distribution policies and the app configuration policies from the assignment group which has the highest priority. If a device belongs to more than one smart group and you assign these smart groups to an application with several flexible deployments, the device receives the scheduled flexible deployment with the most immediate Priority. As you assign smart groups to flexible deployments, remember that a single device can belong to more than one smart group. In turn, one device can be assigned to more than one flexible deployment for the same application. For example, if Device 01 belongs to Smart Group HR and Smart Group Training. You configure and assign two flexible deployments for application X, which include both Smart Groups. Device 01 now has two assignments for application X. Priority 0 = Smart Group HR, to deploy in 10 days with On Demand. Priority 1 = Smart Group Training, to deploy now with Auto. Device 01 receives the priority 0 assignment and gets the application in 10 days because of the assignment’s priority rating. Device 01 does not receive the priority 1 assignment.
Assignment Name	View the assignment name.
Description	View the assignment description.
Smart Groups	View the assigned smart group.
App Delivery Method	View how the application pushes to devices. Auto pushes immediately through the AirWatch Catalog with no user interaction. On Demand pushes to devices when the user initiates an installation from a catalog.
EMM Managed Access	View whether the application has adaptive management enabled. When you enable this setting, the end-user is allowed to access the applications using Workspace ONE SDK only when it is EMM managed. To avoid any disruption to the service, ensure to take over management if the ‘user installed’ flag is enabled.

Benefits of Deploying your applications as Managed

Workspace ONE UEM can deploy your applications as managed and unmanaged. The Workspace ONE UEM console can perform particular tasks for the managed content that it cannot perform for the unmanaged content.

Explanation of Managed

Use the Workspace ONE UEM public application feature to search and upload public applications from app stores. If you use another way to add public applications to devices,Workspace ONE UEM does not manage these applications. Management functions include these features.

Automatically deploy applications to devices through a catalog for installation.
Deploy versions of applications.
Feature applications in catalogs so that device users can easily access and install them. Beginning with Hub 22.06, device users can also uninstall the non-required applications from the catalog.
Track installations of applications and push the installation from the console.
To remove the applications from devices but to keep them in Workspace ONE UEM, you can deactivate public applications.
Delete applications and all their versions from Workspace ONE UEM and from devices.

Benefits of Management

Workspace ONE UEM can manage most applications unless there is a platform-specific reason hindering management or you upload the public content without searching for it in an app store.

Managed content
- Distribute – Workspace ONE UEM pushes managed content with a catalog to devices. The catalog automatically installs content or makes the content available for download depending upon the configured push mode.
- Remove – Workspace ONE UEM can remove the managed content off devices.
Unmanaged content
- Distribute – Workspace ONE UEM must direct end users through the catalog to an app store to download documents.
- Remove – Workspace ONE UEM cannot remove the unmanaged content from devices.

Native List View Settings and Descriptions of your Application

The Native List View is a central location to sort, filter, and search for data so you can perform management functions on internal, public, purchased, and web applications. Each Native List View in Resources is slightly different and available functions vary, so the system does not display every option for every application type.

Setting	Description
Filters	Platform – View applications by platform. This filter helps you find numerous applications so you can perform large-scale management functions simultaneously. Status – View applications by status: Active, Retired, or Inactive. This view is helpful to return applications to previous statuses. Category – Locate applications specifically for a default or custom category. Find applications tagged as Finance, Business, Social Networking, and many other options. This filter helps you find large groups of applications. Requires Renewal – Find Apple iOS applications that use a provisioning profile to function. This filter locates applications with provisioning profiles you can update. App Type – View applications depending on type. Types include Public or Custom App options.
Add Application	Upload a local application, search for a public application in an app store, or add an order with redemption codes.
Export	Export CSV: Export all the items on all the pages to a CSV file.
	Export PPKG: Choose the applications from the list of supported applications, and select Export. The applications are exported to a Windows Provisioning Package (PPKG). When the PPKG export is complete, you receive a notification with a download link. You can only export one PPKG at a time. We currently support only Win32 applications whose deployment is recognized via software distribution method. We do not support PPKG export for the following applications: Win 32 Applications that are uploaded before enabling the software distribution in 32 Applications that are installed in the user context Universal Windows Platform applications
Layout	Arrange items on the tab using the available formats. Summary lists details of the application in the UI. Custom selects what details you want the system to display.
Refresh	Refresh the items in the UI. Use refresh when you edit items and push edits to applications on devices.
Search List	Find applicable applications you want to locate by name.
Toggle Filters	Display or hide filters.
Assign	To deploy the application, navigate to the flexible deployment page by selecting the radio button to the left of the application icon. You must select the radio button to display the Assign function.
Delete	Delete applications from the Workspace ONE UEM console by selecting the radio button to the left of the application icon. You must select the radio button to display the Delete function, and the system deletes one application at a time.
Edit	To change the application record, select the pencil icon.
Name	Access the Summary tab of the Details View for internal applications so you can edit flexible deployments, track application installations, renew provisioning profiles, and select app wrapping statuses.
Install Status	Access a page with information about devices assigned to the application. Internal applications go to the Devices tab of the Details View. Perform management functions on devices like send messages, install applications, and remove applications. Web applications go to the View Devices page which offers management functions to install or delete applications.
Actions Menu	Manage Devices – Offers options for installing, removing, or notifying users about applications. Manage Feedback – Control feedback for applications for Apple iOS. This option displays under specific conditions. Displays only under specific conditions Publish – Publish the managed distribution content, manually, to devices. Notify Devices – Send a notification to devices concerning the VPP application. Deactivate – Removes an application and all versions of it from all managed devices. User Ratings – This shows the application rating and feedback. You can clear ratings with the Delete Rating option for internal and public applications. View Events – Shows device and console events for applications and allows you to export these events as a CSV file. Delete – Removes the application from devices and from the UEM console.

Details View Settings and Descriptions of your Application

The Details View of an application is an alternative page to perform management functions and audit information about internal applications and public applications that are part of a Microsoft Store for Business deployment.

Supported Application Types

This view is available for the following application types.

Internal applications
Public applications that are part of a Microsoft Store for the Business deployment

Setting Descriptions

Available tabs vary depending on the application type.

Details View Tabs

Setting	Description
Summary	Displays information to help you track installed application versions and application deployments.
Details	Displays information configured on the Details tab during the initial upload.
Licenses	Displays online and offline licenses claimed for a Microsoft Store for Business, public application.
Devices	Offers options to notify devices about applications and to install or remove applications from the device.
Screenshots	Displays screenshots of the Microsoft Store for the Business application’s user interface.
Assignment	Displays the configured flexible deployments (assignments) for the application or the groups assigned to the application.
Files	Displays the files added during the initial upload. Find application files, provisioning profiles, Apple Push Notification Service (APNs) files, and architecture applications files. Auxiliary files are required to run certain application files in the mobile environment.
More	Lists optional features: Images – If you uploaded mobile images, tablet images, and icons with the application, displays them. Terms of Use – Displays the terms of use, if configured, that device users must view and accept before they can use the application. SDK – Displays information pertaining to the use of the VMware Workspace ONE SDK. It lists the SDK profile that applies to the application, which enables its Workspace ONE UEM functionality. It also lists the application profile, which controls the use of certificates for communication. App Wrapping – Displays information pertaining to the wrapping of the application. Some of the information on this tab includes the app wrapping status, the wrapped engine version used, and the size of the wrapped application.

Actions Menu Options

Setting	Description
Edit	Displays the application record for editing the tabs first configured when you uploaded the application.
Assign	Displays the flexible deployment record allowing you to add assignments and prioritize them or enables you to assign and edit groups assigned to the application.
Sync Licenses	Syncs online and offline licenses claimed by applications in a Microsoft Store Business integration.
Add Version	Upload a different version of an application and push it to devices.
Manage	Control removal of applications and flexible deployment batching. This feature is for admins and is not available to all users. Retire – Removes an application from all managed devices. For iOS devices, if an older version of the application exists in the Workspace ONE UEM solution, then this older version is pushed to devices. Deactivate – Removes an application and all versions of it from all managed devices. Bypass Batching – Bypasses flexible deployment batching and releases all installation commands for applications.
View	Display the popularity of applications and issues with applications for troubleshooting application problems. User Ratings – Accesses ratings of applications using the star system, which you can use to gauge the popularity of internal applications. Events – Shows device and console events for applications and allows you to export these events as a CSV file.
Version	Add updated versions of applications, and accesses previous versions of internal applications. Add Version – Updates your internal application with a new version. Other Versions – Shows previous versions of an internal application that were added to the Workspace ONE UEM console.
Delete Application	Remove the application from devices and from the Workspace ONE UEM console.
Other Actions	If the application uses app wrapping or SDK functionality, displays other options. If the application does not use app wrapping or SDK, the system does not display them. Manage Feedback – Control feedback for applications for Apple iOS. This option appears under specific conditions so review the topic for these conditions. View Analytics – Exports the analytics for internal applications that use the VMware Workspace ONE SDK. View Logs – Downloads or deletes log files for internal SDK and wrapped applications.

Organize your Applications with Application Category

Application categories help organize your applications and help device users find applications easier. Use them to help organize applications in the console and in a resource catalog.

When you add a new internal or public application or book, the system applies the category that best matches based on meta data from the developer or the app store. You can override this initial assignment and apply your own custom categories.

Navigate to Resources > Apps > Settings > App Categories.
Select Add Category.
Provide the Category Name and Category Description and save the settings.

Manage Active and Inactive Status of your Application

The active or inactive status marks applications as available or unavailable for versioning features such as retire and roll back. If you try to version an application and it is the wrong status, then you might not make the expected version of an application available to your device users.

Active – This status activates the application for the assignment in retiring and rolling back scenarios and other management functions.
Inactive – This status deactivates the application for the assignment from any management functions. You must manually set this status using the Deactivate option in the actions menu. You can manually reverse this status using the Activate option from the actions menu so you can deploy multiple versions of an application.

Install and Remove Applications using The Manage Devices Action

You can use the Manage Devices option to install and remove many applications at once, to notify many devices at once, and to reinvite users to the Apple Volume Purchase Program (VPP).

Use the Status filter to find devices that have installed or not installed assets. Use the User Invite filter to find devices to invite to the Apple VPP.

Navigate to Resources > Apps > Native and select either the Public or Purchased tab.
Select the Manage Devices option from the actions menu.

Select from the actions menu or select the desired options. You can act on specific devices (selected and filtered) or act on all devices (listed).

Setting	Description
Install	Install an application on a single device or on multiple devices.
Remove	Remove an application from a single device or off multiple devices. macOS: Workspace ONE UEM cannot remove VPP applications (purchased) for macOS devices. Windows Desktop and Phone: This function removes the application but not the license for public applications acquired through the Microsoft Store for Business.
Notify	Notify devices about an asset. Settings include email, SMS, push, and message template options for sending messages.
Reinvite (Only Purchased)	Send an invitation to join the Apple VPP, managed distribution, to devices. Devices must run Apple iOS v7.0.3+. The page also lists devices that accepted the invitation.

Alternatives for Deleting your Application

You might occasionally need to delete applications to free up space and to remove unused applications. However, the delete action removes applications and all their versions, permanently, from Workspace ONE UEM. As an alternative, Workspace ONE UEM offers the menu items to deactivate and retire applications. Review the differences between deactivating, retiring, and deleting before you perform any deleting actions to decide if the deactivation or retirement of applications can meet your needs.

When to Use Delete

You know that your organization has no future use for any version of the application. You want space in yourWorkspace ONE UEM environment so remove retired applications.

Active and Inactive Applications

When you use the Delete action, Workspace ONE UEM checks to see if the application is active or inactive.

An active application, when deleted, behaves as a retired application. You also lose the ability to audit the application.

If Workspace ONE UEM has a previous version of this application, depending on the Push Mode, the system pushes a previous version to devices.
An inactive application is deleted completely from the Workspace ONE UEM application repository.

Deactivating your Application

Deactivating an application, removes it from devices and makes the version inactive. Depending on their relation to the inactive version, Workspace ONE UEM pushes or makes available active versions to devices. A benefit of deactivation is that you can reverse an inactive status in the future.

Deactivate does not delete an application from your repository in the Workspace ONE UEM console. You can still view deactivated applications in the Workspace ONE UEM console so that you can track devices that remove applications.

Numbered Active Versions

Active versions of an inactive app (deactivated) either push to devices or are still available to devices.

Lower numbered version – If there is a lower numbered, active version of the application, then that lower version pushes to devices.
Higher numbered version – If there is a higher numbered, active version in a higher organization group, that version is still available to devices.

When to Use Deactivate

Your organization is changing strategies and no longer needs applications and their versions that reflect the old focus. You can deactivate unnecessary applications so that they no longer clutter application repositories on devices. However, you can still access them in the Workspace ONE UEM console.

Retiring your Application

You can retire an application and this action has several outcomes depending on the push mode, application status, and the configuration of the Retire Previous Version option.

When to Use Retire

A new version of an application has several bugs and is costing end-users productivity. The previous version worked fine for your organization. You can retire the current version of the application and the Workspace ONE UEM console pushes the previous version to devices.

Push Mode and Retire

Configuring Push Mode as Auto or On-Demand impacts how the Workspace ONE UEM console behaves when you use the Retire option.

Auto – Set the application deployment option to Auto to push previous versions of an application to devices when you retire the current version.

Note: In order for the Auto setting to work, the previous version must be active. If you deactivated the previous version, then Workspace ONE UEM does not automatically push it to devices.
On-Demand – Set the application deployment to On-Demand to allow device users to install older versions to devices. End users must initiate a search and then install the application version.

Retire Previous Version

When you upload a new version of an application, using the actions menu and the Add Version option, Workspace ONE UEM displays the Retire Previous Version check box on the Details tab. Configure the check box depending on the desired outcome.

Retire Scenario	Retired App Version Action	Lower App Version Action
Two active versions and retire the higher version	Replaced on the device	If the push mode is Auto, the device user does nothing and the app pushes to devices, which results in having the lower, active version on the device. If the push mode is On Demand, the device user must initiate an installation from the AirWatch Catalog, which results in having the lower, active version on the device.
One active version and retire it	Removed from the device	No action results because Workspace ONE UEM has no other version to push to devices.
One active version and one inactive, lower version	Removed from the device	No action results because Workspace ONE UEM does not push inactive applications to devices.

Manage User-Installed Application

Workspace ONE UEM can assume management of user-installed applications (iOS and Windows) without requiring the deletion of the previously installed application.Workspace ONE UEM labels the feature Make App MDM Managed if User Installed.

Enable Make App MDM Managed if User Installed when you assign the application with the flexible deployment feature.

Supported iOS Device Statuses: Workspace ONE UEM can assume management of user-installed applications on devices in either the supervised or unsupervised status.

Time to Managed Status :The time the system takes over management capabilities of applications depends on the enrollment status of the device. The system manages the application upon the device enrollment or when you publish it. The following table outlines these two scenarios.

Device Enrollment Status	Initiate MDM Managed	Result
Not enrolled	Select Make App MDM Managed if User Installed, save, and publish the application.	System manages the application when the device enrolls.
Enrolled	Select Make App MDM Managed if User Installed, save, and publish the application.	System manages the application when you save and publish it.