This feature isn't available in the free edition of Cloud Identity.
You can distribute an app to some people in your organization, but not others. You can also distribute different app settings to different people. For example, you can automatically install a sales app on mobile devices used by people in your sales department. Or, you might let your support team add widgets from an app to their home screen.
To do this, add users that have specific requirements to organizational units or groups (if you use Google Groups). Then, distribute the app with your desired settings to those organizational units or groups. For details, see Distribute an app to a specific group of users.
Note: You can't distribute apps to user's personal devices when the user enrolled their device as user owned and didn't create a work profile. This set up mode (Device Admin mode) is available only on Android 9.0 and earlier, and is deprecated.
Use Google Groups to distribute apps
You can distribute apps to one or more groups. You can specify different app settings for each group. If a user belongs to more than one group that you distribute the app to, the settings for the group that’s highest in the list apply for that user. To reorder groups in the list, next to the group name, click Move and drag the group where you want it.
Note: If you distribute an app to a group that has another group as a member, the app is distributed to the users in both groups.
Use organizational units to distribute apps
You can also distribute apps to one or more organizational units. You can specify different app settings for each organizational unit. Child organizational units inherit settings from their parent. Therefore, distributing an app to a high-level organizational units distributes it to all users in that organization and its child organizational units. For details, see How the organizational structure works.
If a user belongs to an organizational unit and a group that you distribute an app to, the settings in Google Groups apply for that user.