Question for users with Owner as Admin

Tandara

Hi everyone! ⊂⁠(⁠(⁠・⁠▽⁠・⁠)⁠)⁠⊃

I have seen numerous threads recommending Owner as Admin setup, but after trying to use it as an app pusher/updater I met certain difficulties:

First, do I need to change Play Store and Play Services battery from Optimized to Unrestricted? Not sure how to check whether auto-update works since multiple threads complained about inconsistencies with it.

Second, I noticed that if you push apps from Owner into User profiles, the pushed apps are automatically given internet permission. It's there a way to change it?

At last, how do some of you that utilize Private Space in User profiles (along with Owner as Admin) push apps from owner to P Space? I noticed a limitation where I need to push the app to User first, and only then FROM THAT USER to P Space. Additionally, I'm not sure how does the restriction of "app installation and update" from owner enforced on the Private Space within that User.

will be glad if someone can answer these

Probably9857

Tandara I noticed a limitation where I need to push the app to User first, and only then FROM THAT USER to P Space. Additionally, I'm not sure how does the restriction of "app installation and update" from owner enforced on the Private Space within that User.

An app only ever exists in one place on a device. If it is updated anywhere, it is updated everywhere. Some people would actually like to have different versions of the same app in different profiles, but it is not possible.

Probably9857

Tandara do I need to change Play Store and Play Services battery from Optimized to Unrestricted?

Play Store never needs to be Unrestricted.

I think Play Services only needs Unrestricted to get timely push notifications, but I'm not certain about that.

Elysium

Tandara Second, I noticed that if you push apps from Owner into User profiles, the pushed apps are automatically given internet permission. It's there a way to change it?

Don't think so. But you can enter airplane mode once its installing or VPN/DNS tools to get more granular control.

Personally I disable Google Playstore and Services after whenever I did an update. I don't have many Google Store apps to begin with, and those I use are not so relevant that they would require critical updates or auto-updates asap.

I think downside of owner profile being the app distribution profile is that, if you use GooglePlayStore, they will still see all apps you have installed.

Tandara

For the last part, I wonder if it's a deal breaker for a setup like this

Tandara

Probably9857 That's what I figured! But what I meant is that an option in owner to prevent app instillation in users exists and it doesn't seem to apply to P Spaces within those profiles

Probably9857

Tandara But what I meant is that an option in owner to prevent app instillation in users exists and it doesn't seem to apply to P Spaces within those profiles

Oh! That's interesting. I haven't tried that.

AOSP doesn't allow private spaces in secondary profiles, so it wouldn't be an issue there.

If it really allows that, it is likely a bug. I think there is a good chance GrapheneOS would fix that (eventually) if an issue were created.

Tandara

Can I push apps from owner into the user's private space directly? How does everyone do this in the Owner as Admin setup?

schweizer

I had this setup. It has many disadvantages. The main one is that Play Services are always running because you cannot shut off the owner. A second important disadvantage is that you have to log in twice after each reboot.

I recommend the opposite: To use a secondary profile as an app updater and leave the owner without play and use it as the main profile. You can still use play in the owners private space (without login) for apps that need it. Bot most don't.