Search
Clear search
Close search
Google apps
Main menu

Google Apps is now G Suite. Same service, new name. More about the name change.

View and manage your organization's mobile devices

This feature is available in any G Suite edition.

As an administrator, you can view and manage active mobile devices in your domain from the Mobile devices page.

Access the Mobile devices page

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. Click the Mobile devices box to open the page with your managed mobile devices.
    The Mobile devices page you are viewing now displays the total count of all devices in your organization. (The Mobile devices box you clicked to open the page displays a 30-day active count.)

If your organization has many devices activated, the view is paginated. You can search for specific users and devices, and sort the columns, for different views of your mobile fleet.

If you've not yet set up mobile device management, do that first before viewing devices. Device enrollment must also be completed, with the Device Policy app installed and enabled, in order for devices to show up on the Mobile devices page. 

Android devices without the Device Policy app enabled on them, or mobile phones connecting to G Suite through only Internet Message Access Protocol (IMAP) or Post Office Protocol (POP), don’t appear on the Mobile devices page.

View and manage mobile devices

On the Mobile devices page, you can:

  • View devices in the list and filter the list by personal or company-owned categories.
  • Search for one or more devices that meet common criteria.
  • View general information about an individual device.
  • Check device status and recent activity.
  • Perform management operations.

Open all   |   Close all

View personal devices
  1. On the Mobile devices page, under Filters, click the By device type Down arrow  Down Arrow and select Personal.
  2. Click one of the column headings—Device ID, Name, Email, Model, OS, Type, Last Sync, or Status
View company-owned devices
  1. On the Mobile devices page, under Filters, click the By device type Down arrow  Down Arrow and select Company owned.
  2. Click one of the column headings: Serial Number, Email, Device Ownership, Model, OS, Type, Last Sync, or Status.
Search for devices with common criteria
  1. On the Mobile devices page, under Filters, click the By device type Down arrow  Down Arrow and select Personal or Company owned.
  2. Using one of the search operators in the tables that follow, enter each search term as a single word with no spaces, or enter several words in quotes for exact phrases. When you enter words and phrases into the search box, it searches all fields. Searches are not case-sensitive. The system treats punctuation as white space within a search. For example, running a search for admin@yourdomain.com is the same as entering admin yourdomain com.
    To search within a specific field, enter a search operator followed by an argument, for example, user:joesabia. You can also use single words or quoted lists of words as arguments. 
  3. Press Enter.
    You can use a search to find device details shown on general Information pages.
    For assistance with targeted searches, use the supplied search operators below. Search operators are available for company-owned and personal devices.
View general information about an individual device
  1. On the Mobile devices page, click a device’s Device ID link. 
  2. View the device’s General information page. This page shows device compliance, user details, policy profile, and device properties. 

You can learn more about device details shown on the General Information page.

Check device status and recent activity
  1. On the Mobile devices page, under Filters, click the By device type Down arrow  Down Arrow and select Personal or Company owned.
  2. Locate one or more devices by sorting or searching.
  3. When you find the device, view its Status column at the far right. You can see if the device is being remotely wiped, blocked, unblocked, approved, or is not in use. A blocked device still shows up on the Mobile devices page, but the user can't access their G Suite data (mail, calendar, and contacts) from that device. If you block a device, the user can still access their mail, calendar, and contacts from a desktop computer or mobile browser. To disable a user's access to their G Suite data from any device (mobile or desktop computer) see Suspend users.
    Known issue: If a user's device doesn't satisfy the device management policies you have specified, their device does not sync. (It can take up to 24 hours for the device to stop syncing.) 
  4. (Optional) To view the Mobile audit log and see recent activities, at the top of the page, click Show audit events. (The following audit information is only available for users' devices with G Suite Device Policy 6.34 and higher installed: Adb, Unknown Sources, Developer Options, Work Profile, and Accounts Domain.)
Manage devices
  1. On the Mobile devices page, under Filters, click the By device type Down arrow  Down Arrow and select Personal or Company owned.
  2. Locate one or more devices by sorting or searching.
  3. Check the relevant boxes for the devices you want to manage.
  4. Decide on a management option. The system shows what’s available for the device or devices you have selected.
    • For personal devices, click Approve, Block, Remote Wipe, Wipe account, Delete, Show Audit Events, or Export All device data. The Export All option exports a CSV file, listing all devices synchronized with your domain, with the following information—Device ID, Name, Email, Model, OS, Type, User Agent, Type, Last Sync, First Sync, and Status. If you have many devices in your domain, exporting data can be slow. Use Show Audit Events to view the Mobile audit log. Learn more about the differences between Remote Wipe and Wipe account.
    • For company-owned devices, click Unblock, Block, Remote wipe, Delete, or Show Audit Events.

Use search operators to find devices

You can search more precisely by adding search operators to your search query. 

To use the operators listed here in a search, see the search procedure above. 

You can use a global search for a free form search. For example, you can search for the serial number with or without the “serial:” operator, and the results are similar.

When you create search queries with dates, times, and date and time ranges, follow the allowed date and time formats.

Date and time formats
Form Searches... Sample searches
datetime Exactly on the given date or time 2016-03-23
2016-04-26T14:23:05
datetime..datetime Within (inclusive) the given interval of date or time 2016-03-23..2011-04-26
datetime.. On or after the given date or time 2016-04-26T14:23:05..
..datetime On or before the given date or time ..2016-04-26T14:23:05

The date and time are expressed as a UTC, specified using a simplified form of ISO 8601: YYYY-MM-DD or YYYY-MM-DDThh:mm:ss, where the hour is in the range [0, 23] (24-hour system).

Company owned device search operators
Syntax Searches for ... Sample searches Global search
serial:string The device’s serial number serial:015d3fb66e241807 Yes
status:status Devices with the given G Suite provisioning status

Supported values:

  • approved
  • not_in_use
  • blocked
No
sync:time_range Devices whose last policy sync was in the given time range
 
sync:2011-03-23
sync:2011-03-23..2011-04-05
No
type:string Type of device type:android No
Personal device search operators
Syntax Searches for ... Sample searches Global search
apps:app Apps on users' Android devices if application auditing is turned on (see Android settings page > General settings) apps:Calendar
apps:com.android.mms
apps:4.0.4-253145
No
bootloader:string Bootloader version on Android devices bootloader:BHZ11e No
brand:string Brand name
 
brand:google Yes
build_number:string Build number build_number:6.7.2_EDEM-18 No
carrier:string Name of the mobile operator of the given device carrier:Airtel No
compromised_status:string Compromised device status compromised_status:compromised compromised_status:uncompromised compromised_status:unknown No
default_language:string Language settings on the device default_language:English No
email:address Email address (as a phrase) email:joe@example.com matches joe.sabia@example.com and joe.sciarrillo@example.org Yes
encryption_status:string Encryption status of an Android device encryption_status:encrypted
encryption_status:not_encrypted
encryption_status:unsupported
No
hardware:string Hardware for an Android device hardware:bullhead Yes
hid:string Hardware ID hid:A0000292789YD Yes
id:string Given device serial number, not case-sensitive id:12345ABCDEFXYZ Yes
imei:string International Mobile Equipment Identity (IMEI) number of the device imei:353020051574987 Yes
kernel_version:string Kernel version kernel_version:3.1.10-g1e42d16 No
mac_address:string WiFi MAC address of the device mac_address:30:85:a9:59:d5:ed Yes
manufacturer:string Manufacturer of an Android device manufacturer:LGE Yes
meid:string Mobile Equipment Identifier (MEID) of the device; only for Code Division Multiple Access (CDMA) devices meid:A0954742789012 Yes
model:name Name of the device model model:nexus s Yes
name:words Given words in usernames name:joe matches name Joe Sabia but not Joel Ortiz
name:Joe Sabia matches name Joe Sabia and Joe Sabia Daniels but not Joey Sabia or Joe The Pun Champ Sabia
Yes
os:name Name of the mobile operating system os:Android
os:ios 5
Yes
password_status:
boolean
Password status of an Android 6.0+ device password_status:on
password_status:off 
 
No
privilege​:string Android devices that have a work profile set up privilege:device_owner are corporate-owned devices configured to recognize the company as the device owner
privilege:profile_owner are users’ personal devices configured with managed work profiles that are separate from their personal space
privilege:device_admin are users’ personal devices configured with managed accounts within their personal space
No
register:time_range Devices that were registered in the given time range register:2011-03-23
register:2011-04-05T13:42:00
No
security_patch_level:date Date of the last OS security update for an Android 6.0+ Marshmallow—device security_patch_level:2016-08-05 security_patch_level:2016-08-05..
2016-09-05
No
serial:string Device serial number serial:015d3fb66e241807 Yes
status:status Devices with the given G Suite provisioning status Supported valuespending, approved, blocked, wiping, wiped, unprovisioned, unknown No
sync:time_range Devices whose last policy sync was in the given time range sync:2011-03-23
sync:2011-03-23..2011-04-05T13:42:00
No
type:string Type of device type:android
type:googlesync
type:ios
No

This feature isn't available in the legacy free edition of Google Apps.

Was this article helpful?
How can we improve it?
Sign in to your account

Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.