Internal apps are company-specific apps developed by your organization that you may not necessarily want to be searchable in the public app store, but you want your users to have access to this application from their device.
If you are using Android 6.0+ devices as Work managed devices, add these apps to Workspace ONE UEM console so that they are available to Android specific users. Once you have added your internal application to the UEM console, these apps are treated as public applications.
For information on uploading internal apps for Work managed devices, see Add and Deploy Internal Applications as a Local File. Follow all directions in this section to get these apps approved, uploaded, and assigned to your users.
If you are deploying internal apps on Android Work profile devices, add internal apps to Google Play for Work so that they are available to Android specific users. Upload your application by logging into the Google Play Developer Console with your enterprise credentials. There is an option to enable, Restrict Distribution, which only allows users of your domain to view this application on Google Play for Work (the badged play store). Once you have added your internal application to the developer console, these apps are treated as public applications.
If you are adding an internal application, Per-App VPN Profile tunneling currently supports only the Android (Legacy) devices. However, Android Work Profile and the Work Managed devices do not support Per-App VPN Profile tunneling for all the internal applications.