# Android Enterprise Setup

> Link CapaOne to an Android Enterprise account — the prerequisite for enrolling Android devices and deploying apps.

Source: https://docs.capaone.com/capaone/mobile-manager/android/android-enterprise-setup/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

Android device management in CapaOne runs on top of **Android Enterprise** — Google's framework
for enterprise mobility management. Before you can enroll Android devices, deploy apps, or apply
configurations, CapaOne must be linked to an Android Enterprise account.

The Android Enterprise settings are found under **Android → Settings**.

## What is Android Enterprise?

Android Enterprise is a set of management APIs provided by Google that allows an MDM (like
CapaOne) to manage Android devices without requiring users to grant individual permissions.
Enrollment through Android Enterprise gives CapaOne full control over managed devices, including
silent app installation, configuration enforcement, and policy compliance.

When CapaOne is linked to an Android Enterprise account, it gains access to the **Google Play
Managed Store** — a private, organization-controlled version of Google Play where you approve
which apps are available for deployment.

## Linking an Android Enterprise account

The Android Enterprise section in Android → Settings shows the current linked account details:

- **Display name** — the business name registered with Google
- **Enterprise ID** — the unique identifier Google assigned to your enterprise (format:
  `enterprises/{ID}`)
- **Enterprise type** — typically `MANAGED_GOOGLE_PLAY_ACCOUNTS_ENTERPRISE` for new accounts
- **Managed Google Play type** — `CUSTOMER_MANAGED` means your organization controls app
  approvals in your own Play Store

If no account is linked, follow the setup flow in CapaOne to create or connect an Android
Enterprise account with Google.

## Managed Google Domain upgrade

The **Upgrade to Managed Google Domain** option connects your Android Enterprise account to a
verified Google Workspace domain. This enables additional management capabilities, including
managed Google accounts for users.

:::caution
This upgrade is one-way and cannot be reversed. Only proceed if you have confirmed with your
Google Workspace administrator that this is the intended setup.
:::

## GDPR contact information

Organizations operating in the EU must designate a **Data Protection Officer (DPO)** and, where
applicable, an **EU Representative**. Android Enterprise requires this contact information to be
registered as part of the enterprise configuration.

Fill in the contact information under the **Contact Information (GDPR)** section:

- **Data Protection Officer** — name, email address, and phone number
- **EU Representative** — name, email address, and phone number (required if your organization
  is not established in the EU but processes EU personal data)

Leaving these fields empty means the enterprise configuration is technically incomplete for GDPR
purposes. This does not block device management from functioning, but should be addressed for
compliance.

## Good to know

- **The Enterprise ID is your troubleshooting reference** — when contacting Google support or
  cross-referencing Google Admin Console activity, the Enterprise ID identifies your CapaOne
  integration.
- **Google Authentication Required** — this field shows whether Google account authentication
  is enforced for device enrollment. The status depends on your enterprise type and enrollment
  configuration.
- **Android Enterprise is a prerequisite** for all Android management features — enrolling
  devices, deploying apps, and applying configurations all require a linked enterprise account.
- Once Android Enterprise is set up, see [Android Enrollment](/capaone/enrollment/android-enrollment/)
  for how to enroll devices into CapaOne.