Deploy the GlobalProtect Mobile App Using Microsoft Intune
You can deploy the GlobalProtect app to managed
endpoints that are enrolled with Microsoft Intune or to users whose
endpoints are not enrolled with Microsoft Intune (iOS only). After
you deploy the app, configure and deploy a VPN profile to managed
endpoints to set up the GlobalProtect app for end users automatically.
You can determine who has access to the GlobalProtect app
by assigning the app to users or endpoints. Before you can assign the
app, you must set the assignment type for the app. The assignment
type makes the app available, required, or uninstalls the app.