Can MDM also manage apps that device users installed themselves?
Yes, by enabling Auto Management.
When Auto Management is enabled, the app becomes MDM-managed (Managed), and the app can be updated or deleted by MDM commands.
For how to configure it, see here.
The data in an app that becomes managed this way is not deleted.
When Auto Management is disabled, the app exists as an Unmanaged app, so MDM cannot perform operations such as updating or deleting it.
Note that a managed app cannot be replaced with an unmanaged app.
Last updated: August 1, 2025