Auto-Deploy Apps via Blueprints

Overview

Blueprints let you define a standard app set for a device type or role. Once assigned, GuardMDM automatically ensures every device in that Blueprint has the required apps installed and licensed.

Adding VPP App Assignments to Blueprints

Prerequisites

• VPP token integrated with GuardMDM
• Apps purchased and available in VPP
• Blueprint created

Steps

1. Go to Blueprints > select a Blueprint
2. Click App Assignments
3. Click Add App
4. Search and select the app from your VPP catalog
5. Choose assignment type:
   • Required — app is installed automatically, cannot be removed by user
   • Optional — app is available in Self Service, user chooses to install
6. Set license count (or leave as Auto to let GuardMDM manage)
7. Save

GuardMDM syncs the assignment to all devices in the Blueprint within minutes.

How Auto-Install Works

When a device checks in with GuardMDM, the following happens:

1. Check installed apps — GuardMDM compares the device's installed apps against the Blueprint's required app list
2. Assign licenses — If a required app is missing, GuardMDM assigns a VPP license to the device
3. Install missing apps — GuardMDM pushes the install command to the device
4. Confirm installation — The device reports back when the app is installed

This cycle repeats on every device check-in. If an app is manually removed by the user, GuardMDM re-installs it on the next sync.

License Management

• GuardMDM tracks VPP license usage per app
• When a device leaves a Blueprint, the license is freed for reuse
• If license count runs out, GuardMDM queues the install and retries when a license becomes available

App Deployment Workflow

Typical Timeline

Step	Time
Blueprint assignment	Immediate
First device check-in	Within 15 minutes
License assignment	Seconds
Install command	Within 1 minute of license
App download	Depends on app size and network
Installation complete	Varies (typically 5-30 minutes)

Removing Apps via Blueprint

Remove an App Assignment

1. Go to Blueprints > select the Blueprint
2. Click App Assignments
3. Find the app and click Remove
4. Choose what happens on devices:
   • Remove from devices — uninstalls the app from all devices in the Blueprint
   • Keep on devices — leaves the app installed but stops managing it

Remove a Device from a Blueprint

When a device is removed from a Blueprint:

• Required apps from that Blueprint are not automatically uninstalled
• VPP licenses are freed for reuse
• The device stops receiving app updates from that Blueprint

To also uninstall the apps, remove the app assignment first, then remove the device.

Deployment Status Tracking

Per-App Status

Status	Meaning
Pending	App assigned, waiting for device check-in
Installing	Install command sent, device is downloading
Installed	App confirmed installed on device
Failed	Install failed (check device logs)
License Error	No VPP license available
Removed	App was uninstalled via policy change

Viewing Status

• Blueprint detail page — shows aggregate install progress per app
• Device detail page — shows installed apps and their status
• App detail page — shows which devices have the app installed
• Deployment dashboard — overview of all active deployments

Troubleshooting Failed Installs

Issue	Likely Cause	Fix
App stuck on Pending	Device offline	Wait for device check-in
Install Failed	Insufficient storage	Free up device space
License Error	All VPP licenses in use	Purchase more licenses
App not appearing	OS version too old	Update device OS
Install slow	Large app on cellular	Connect to WiFi

---

Next: Deployment Strategies