>
    Strata Copilot
    Deploy the GlobalProtect Mobile App Using Microsoft Intune
    Focus
    Download PDF
    Focus
    1. Home
    2. GlobalProtect
    3. GlobalProtect Administrator's Guide
    4. GlobalProtect Apps
    5. Deploy the GlobalProtect App on Mobile Devices
    6. Manage the GlobalProtect App Using Microsoft Intune
    7. Deploy a New Device Using Windows Autopilot and Microsoft Intune
    8. Deploy the GlobalProtect Mobile App Using Microsoft Intune
    Download PDF
    GlobalProtect

    Deploy the GlobalProtect Mobile App Using Microsoft Intune

    Table of Contents

    Deploy the GlobalProtect Mobile App Using Microsoft Intune

    This chapter provides information about deploying the GlobalProtect mobile app using Microsoft Intune.
    Where Can I Use This?What Do I Need?
    • NGFW (managed by Panorama or Strata Cloud Manager)
    • Prisma Access (managed by Panorama or Strata Cloud Manager)
    • GlobalProtect Gateway license or Prisma Access license with the Mobile User subscription
    You can deploy the GlobalProtect app to managed endpoints that are enrolled with Microsoft Intune or to users whose endpoints are not enrolled with Microsoft Intune (iOS only). After you deploy the app, configure and deploy a VPN profile to managed endpoints to set up the GlobalProtect app for end users automatically.
    1. Enroll endpoints with Microsoft Intune.
      To deploy the GlobalProtect app to your endpoints, ensure that the endpoints are enrolled with Microsoft Intune.
    2. Add the GlobalProtect app to Microsoft Intune.
      Before you can assign the GlobalProtect app to any users or endpoints, you must add the app to Microsoft Intune.
    3. Set the app assignment type for the GlobalProtect app.
      You can determine who has access to the GlobalProtect app by assigning the app to users or endpoints. Before you can assign the app, you must set the assignment type for the app. The assignment type makes the app available, required, or uninstalls the app.
    4. Assign the GlobalProtect app to specific users or endpoints.
      After you set the assignment type for the GlobalProtect app, you can assign the app to specific users or endpoints.
      (iOS only) You can assign the GlobalProtect app to users whose endpoints are not enrolled with Microsoft Intune.

    © 2025 Palo Alto Networks, Inc. All rights reserved.