You have a Microsoft 365 E5 subscription and must enroll Android Enterprise devices into Microsoft Intune using zero‑touch enrollment. What should you perform first?

To use Android Enterprise zero-touch enrollment with Microsoft Intune, you must first establish a connection between Intune and Google's services. Linking a Managed Google Play account in the Microsoft Intune admin center is the foundational step that enables Intune to manage Android Enterprise devices and leverage features like zero-touch enrollment. Without this link, Intune cannot communicate with Google's Android Enterprise infrastructure. Configuring enrollment restrictions is a subsequent step to control which devices can enroll and how, but it's not the initial prerequisite for zero-touch itself. Creating a zero-touch configuration, whether in Intune or the zero-touch enrollment portal, relies on the prior establishment of the Managed Google Play connection.