Enumerate and remediate non-compliant apps in an Android enterprise managed by Android Management API

Steps

1. List all devices for the enterprise via GET https://androidmanagement.googleapis.com/v1/{parent=enterprises/*}/devices using a service account with the androidmanagement.devices.list permission
2. For each device, inspect the applicationReports array; each entry contains packageName, versionName, installedFrom, and applicationSource fields
3. Cross-reference applicationReports with the policy's applications array to identify apps installed from sources other than MANAGED_GOOGLE_PLAY (installedFrom field value)
4. Identify devices with nonComplianceDetails where the reason is APP_NOT_INSTALLED or APP_NOT_UPDATED and the packageName matches a required app
5. Issue a reboot or start lost mode command via POST to https://androidmanagement.googleapis.com/v1/{name=enterprises/*/devices/*}:issueCommand for devices requiring intervention
6. Update the policy to add problematic packages to the blockedApplications list and PATCH the policy to force removal on next sync