Overview

The Android Play Store Policy controls which apps users can see and install from the managed Google Play Store on Android devices. You choose one of two modes:

WHITELIST (default): users see only the apps you've added to the Android Application Policy.
BLACKLIST: users see every app in the Play Store, except the ones you block.

Important: By default, the managed Play Store shows only apps you've approved. Managed Android devices use WHITELIST mode unless you assign this policy with BLACKLIST. If users say the Play Store is empty, or they can't find or download apps, this is why. Either add the apps they need to the Android Application Policy, or switch to BLACKLIST mode.

Supported platforms and requirements

Item	Details
Platform	Android 9 or later
Device ownership	Company-owned and BYOD devices
Android Enterprise	Must be set up and connected to Swif

On BYOD devices with a work profile, this policy controls the Play Store in the work profile. It doesn't change which apps users can install in their personal profile.

Settings reference

Setting	Options	Default
Play Store Mode	`WHITELIST`, `BLACKLIST`	`WHITELIST`

The list also shows an empty option and PLAY_STORE_MODE_UNSPECIFIED. Both behave the same as WHITELIST.

Compare the modes

	WHITELIST	BLACKLIST
What users see in the Play Store	Only apps in the Android Application Policy	Every app, except those set to BLOCKED
How to make an app available	Add it to the Android Application Policy	Nothing. All apps are available by default.
How to block an app	Leave it out of the Android Application Policy	Add it to the Android Application Policy with Install Type set to BLOCKED
Apps not in the Application Policy	Uninstalled automatically	Left installed
When you remove an app from the Application Policy	It's uninstalled from devices	It stays on devices
Best for	Strict control, such as frontline, kiosk, or regulated devices	Knowledge workers who need flexibility

How BLOCKED works

Setting an app's Install Type to BLOCKED in the Android Application Policy:

stops users from installing it
uninstalls it if it was installed under a previous policy

This works in both modes. In BLACKLIST mode, it's the only way to keep a specific app off devices.

Before you start

Decide which mode fits your devices. Use WHITELIST when you want users to have only approved apps. Use BLACKLIST when you want users to install apps freely, apart from a few you block.
Prepare the Android Application Policy. In WHITELIST mode, add every app users need. In BLACKLIST mode, add each app you want to block with Install Type set to BLOCKED.
Check before switching to WHITELIST. Moving devices from BLACKLIST to WHITELIST uninstalls every app that isn't in the Android Application Policy, including apps users installed themselves. Add the apps users need first.

Create the policy

In Swif, go to Device Management > Policies, then select Create new policy > Configure a Policy, and select Android Play Store Policy.
Enter a clear name, such as Android Play Store – Open.
Set Play Store Mode to WHITELIST or BLACKLIST.
Save the policy.
Assign it to a device group of Android devices.
Set up the matching Android Application Policy for the same devices.

Example configurations

Example 1: Let users install any app, except a few

Policy	Setting
Android Play Store Policy	Play Store Mode: `BLACKLIST`
Android Application Policy	`com.zhiliaoapp.musically` (TikTok), Install Type: BLOCKED

Users can browse and install any app from the Play Store. TikTok is blocked, and it's uninstalled from devices where it's already installed.

Example 2: Only approved apps on frontline devices

Policy	Setting
Android Play Store Policy	Play Store Mode: `WHITELIST` (or leave the policy unassigned)
Android Application Policy	Microsoft Teams and Outlook, Install Type: FORCE_INSTALLED; Slack, Install Type: AVAILABLE

Teams and Outlook install automatically. Slack appears in the Play Store for users to install if they want it. No other apps are available.

Verify the policy

On the device, open the Play Store. On work profile devices, use the Play Store with the work badge.
In WHITELIST mode, confirm that only the apps in the Android Application Policy appear.
In BLACKLIST mode, search for any app and confirm it can be installed. Then search for a blocked app and confirm it can't be installed.

In Swif, open the device and confirm that the policy shows as applied.

Troubleshooting

Users can't see or download any apps from the Play Store

The device is in WHITELIST mode, which is the default, and no apps (or only a few) are in the Android Application Policy. Either:

add the apps users need to the Android Application Policy, or
assign an Android Play Store Policy with Play Store Mode set to BLACKLIST, then block any apps you don't want with Install Type set to BLOCKED.

An app was uninstalled after I changed policies

In WHITELIST mode, apps that aren't in the Android Application Policy are uninstalled automatically. Add the app to the policy.
In either mode, apps set to BLOCKED are uninstalled.

An app I removed from the Application Policy is still installed

This is expected in BLACKLIST mode. Removing an app from the policy doesn't uninstall it. Set its Install Type to BLOCKED to remove it.

A blocked app can still be installed

Check that its Install Type is BLOCKED in the Android Application Policy assigned to the device.
Check that the package name matches the app exactly.

The personal profile's Play Store isn't affected

This is expected. On work profile devices, this policy controls only the work profile.

Related resources

Swif

Google