Switch device management before downgrading Google Workspace

Switch from advanced to basic device management

As an administrator, you can help users in your organization stay connected and productive when you switch their Google Workspace licenses to licenses that don't support advanced mobile management. To make sure users who enrolled their devices under advanced management don’t lose access to their work data on mobile devices, change their mobile management to basic.

If you downgrade without doing the following steps:
  • Some admin settings can't be changed. The setting might still show the advanced setting, but the basic or default option is applied to users' devices.
  • For iOS devices, managed apps that you set to be removed from the device when the management profile is removed are removed from the device, even if the user also uses them with a personal account.
  • Users might need to factory reset their device to use previously blocked system apps, remove their work account, or be able to remotely wipe their device with My Devices.

You should also understand:

  • Devices that were under advanced mobile management and blocked or pending approval are automatically approved. Users can immediately use Google apps for work on these devices.
  • If you use a third-party Android EMM provider or use Google Sync with iOS devices, users might still need to factory reset devices.
  • Devices continue to be managed through the Google Device Policy app or Android Device Policy until the user factory resets their device or, for Android users, removes their work profile.

Step 1. Revert certain Android settings

Skip if you don't manage Android devices.

You might want to update the following settings, which can’t be updated after you change to basic mobile management:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.
  3. On the left, click Mobile & endpointsand thenSettingsand thenAndroid settings.
  4. Go to Generaland thenUser device wipe. If you unchecked the box to prevent users from wiping their devices, check the box. Otherwise, users can’t wipe their devices from My Devices (https://mydevices.google.com/) unless they factory reset their device.
  5. Click Save.
  6. In Android settings, go to Apps and Data sharingand thenSystem apps. If you blocked specific system apps, remove them from the list. Otherwise, users with devices set up in Device owner mode can’t use these system apps unless they factory reset their device. Even with this step, some users might need to factory reset to use system apps that aren’t available in Google Play.
  7. Click Save.
  8. In Android settings, go to Users and accountsand thenAccounts. If you unchecked the box to block users from adding or removing accounts, check the box. Otherwise, users with devices set up in Device owner mode can’t remove accounts unless they factory reset their device.
  9. Click Save.

Step 2. Update managed iOS apps

Skip if you don't manage iOS devices or iOS apps.

If you set iOS apps to be removed when the configuration profile is removed, you might want to update app settings to prevent those apps from being removed from the device.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Appsand thenWeb and mobile apps.

  3. (Optional) If you manage many apps and want to show only iOS apps, click Add a filterand thenPlatform, select iOS, and click Apply.
  4. Click the app you want to edit.
  5. Click Settings.
  6. If the app is set to be removed when the configuration profile is removed (set to On), change the setting to Off.
  7. Click Save.
  8. Ask your users to sync the apps managed through the Google Device Policy app:
    1. Tap Google Device Policy "".
    2. Tap Menu ""and thenApps.
    3. At the top, click Accept.
If users don't accept the app updates, the apps are removed from their devices when you change to basic mobile management.

Step 3. Switch to basic mobile management

When you’re ready, switch mobile management from advanced to basic:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.
  3. On the left, click Mobile & endpointsand thenSettingsand thenUniversal settings.
  4. Go to Generaland thenMobile management.
  5. Choose Basic (recommended). Note: The other option, Turn off mobile management, isn't recommended because you can't manage device security at all through Google endpoint management.
  6. Click Save.

Step 4: Users may have to factory reset their device

Even with the preceding steps, users might have to factory reset their device in the following situations:

  • (Android) If you use a third-party Android EMM provider, users can't access work data because the EMM isn't applied correctly. The fix depends on how you want to manage devices:
  • (iOS) If you use Google Sync with iOS devices and required a standard or strong password, users must still meet those password requirements. Users can't use a basic password (any screen lock) unless they factory reset their device.


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
73010
false