The simplest approach is to only use the Owner user profile. Apps installed + in the Owner profile are sandboxed the same way as everywhere else and don't + receive any special access. If you want to choose which apps use Google Play + rather than making it available to all of them, install it in a separate user + or work profile for apps depending on Google Play. You could also do it the + other way around, but it makes more sense to try to use as much as possible + without Google Play rather than treating not using it as the exceptional + case.
+Google Play is divided up into 3 separate apps:
To use sandboxed Google Play, you simply need to install the official releases of these 3 apps in the user and work profiles where you want to use it.
-The simplest approach is to only use the Owner user profile. Apps installed - in the Owner profile are sandboxed the same way as everywhere else and don't - receive any special access. If you want to choose which apps use Google Play - rather than making it available to all of them, install it in a separate user - or work profile for apps depending on Google Play. You could also do it the - other way around, but it makes more sense to try to use as much as possible - without Google Play rather than treating not using it as the exceptional - case.
-You can open our app repository client (look for Apps in the app drawer) and install the 3 core Google Play apps mirrored in our repository. Our app repository client has support for dependency installation so you can simply directly install