Android app directory · Productivity
This is the app Microsoft's Intune documentation lists as Office Hub, and now describes as Microsoft Copilot, the successor to the Microsoft 365 (Office) app. Microsoft documents a handful of managed configuration keys for it on Android. The account key and the Android Enterprise channel work from any UEM on enrolled devices, and the offline caching key needs Intune app protection. Microsoft retired the old key that switched Copilot off, so that key is not listed here.
Nomidcom.microsoft.office.officehubrow Common setups
Copy a setup into the managed configuration of a policy, then adjust the values. Each one uses only keys explained below.
Limit the app to one work account and turn off the Feed and Sticky Notes creation.
{
"com.microsoft.intune.mam.AllowedAccountUPNs": "user@example.com",
"com.microsoft.office.officemobile.Feed.IsAllowed": false,
"com.microsoft.office.NotesCreationEnabled": false
}Stop Teams apps from running inside this app.
{
"com.microsoft.office.officemobile.TeamsApps.IsAllowed": false
}Only the named account may sign in, and people cannot create Sticky Notes with it.
{
"com.microsoft.intune.mam.AllowedAccountUPNs": "user@example.com",
"com.microsoft.office.NotesCreationEnabled": false
}Managed configuration
Key names and value types come from the vendor’s documentation. The explanations are written by Nomid.
| Key | Type | What it does | Example |
|---|---|---|---|
| Accounts | |||
com.microsoft.intune.mam.AllowedAccountUPNs | User principal names, separated by semicolons | Allows only the listed work or school accounts in the app and blocks personal accounts. Microsoft says it works with any UEM provider on enrolled devices, and that Office, Word, Excel and PowerPoint for Android act on it. | user@example.com |
| Features IT can switch off | |||
com.microsoft.office.NotesCreationEnabled | On or off | Controls whether people can create Sticky Notes with their work account. On by default. With an Exchange Online mailbox the notes sync to it, otherwise they stay on the device. | false |
com.microsoft.office.officemobile.TeamsApps.IsAllowed | On or off | Controls whether Teams apps run inside this app. On by default. Microsoft says managed devices and managed apps can both use it. | false |
com.microsoft.office.officemobile.Feed.IsAllowed | On or off | Turns the Microsoft 365 Feed on or off for the tenant. On by default. Microsoft says managed devices and managed apps can both use it. | false |
| Data protection (needs Intune app protection) | |||
com.microsoft.intune.mam.IntuneMAMOnly.AllowOfflineCachingWhenSaveAsBlocked | On or off | Allows offline caching of files even when an app protection policy blocks saving to local storage. Off by default, and it only has an effect together with an Intune app protection policy. | false |
Deploy with Nomid
Find it on Google Play from the policy’s apps list and choose how it is installed.
In the policy, set the app’s managed configuration with the keys and values from this page.
Devices in the policy receive Microsoft 365 Copilot app and its configuration on their next sync.
Questions
com.microsoft.office.officehubrow. Microsoft's Intune protected apps list uses this package. Related Hub variants exist, so check which one your devices install before you target a policy.
No. Microsoft struck the old Copilot on/off key from its documentation and says Copilot is now core to the app. To restrict it, Microsoft points to its integrated apps settings or to blocking the Copilot mobile app.
Not for the account key: Microsoft says it works with any UEM provider on enrolled devices. The Sticky Notes, Teams apps and Feed keys work for enrolled devices through any UEM provider, and for unenrolled devices when an Intune app protection policy applies. The offline caching key depends on an Intune app protection policy.
Microsoft lists Word, Excel and PowerPoint for Android among the apps that act on the allowed accounts key, but documents no separate keys for each, so this page covers the shared settings.
Add the app to a Nomid policy, set its configuration and choose its permissions.
