My employer uses Google Device Policy to be able to use the google account associate with my work. I'd like to set it up with grapheneOS.
I've tried following along to these discussions: https://discuss.grapheneos.org/d/18236-how-to-set-up-a-proper-google-managed-work-profile-if-required-by-your-employer
https://discuss.grapheneos.org/d/1662-work-profile-sandboxed-google-play-services-android-device-policy-help
But don't seem to have any luck, looks to be outdated, I can't adb to a work profile, as users reported and even then after getting play services on a work profile still have issues.
The furthest I've gotten is with these steps:
- Install Shelter via F-Droid
- Open Shelter go through the menu's, let it set up
- Now there is a "Work" section in my App Drawer
- In my "Work" section, open GrapheneOS' App, install Play Store and Play services
- Open Play Store -> Sign In with Work Email
When I do this, I sign in with work email, get taken to my work auth page, confirm auth, and then am signed in (only partially though I guess).
My work profile starts setting up, my work profile's play store is now only limited to the apps approved/monitored by my company. And certain apps start downloading by default ie. Gmail, Slack, etc. All expected and what I want.
The issue:
None of the apps that require a work profile are usable. Google Apps are always loading. Non-google Apps aren't even signed in.
In my notifications there's always a message saying "Account action required".
When I click it, it says "Getting Info" and then just closes (or crashes?)
If I click "manage google account" it says "finish signing in to continue" and "something went wrong you need to sign in again" when I click "sign in" here, same thing, it goes to "Getting Info" and then closes/crashes."
Is it possible to get this to work? I've been playing around with permissions and going through logs trying to see, with no luck.