Manage your business's mobile devices
This feature is available in any G Suite edition.
As a G Suite administrator, you can manage Android and Apple® iOS® mobile devices. You can also manage Microsoft® Windows Phones®, and smartphones and tablets that use Microsoft Exchange® ActiveSync®.
- Manage mobile devices from anywhere.
- Use your Admin console or the Google Admin app for Android and iOS devices.
- Recommend and make available preferred business applications.
- Individually approve devices for active management or allow them to activate automatically to complete the enrollment process.
- Instantly push policies (such as Wi-Fi and email configurations, including server-side certificates) to devices.
- Choose between basic or advanced management to fit your organization's needs. For details, see Set up mobile device management.
- For Android devices that your users own, you can allow the addition of work accounts. (Personal and corporate data on these devices aren't kept separate.)
- As an alternative, you can contain business content in a work profile on the user's device. You can manage the applications and data in the work profile without worrying about the user's personal space.
- For Android devices that your business owns, you can control the entire device with advanced management. You can:
- Allow personal accounts.
- Restrict mobile network, Wi-Fi, or VPN changes with device lockdowns.
- Limit sharing by controlling USB transfers, screen captures, and the SD card.
- Use app management to restrict users from using a file manager to install apps or share their location in an app.
- Avoid misuse by having factory-reset protection on devices.
For iOS devices, in addition to management, you can:
- Apply policies for calendars and contacts.
- Control Apple® iCloud® backup and sync.
- Turn on backup encryption.
- Apply device-management controls, such as account wipe, encryption, and screen lock.
- Keep work data secure through integration with G Suite services, such as Gmail, Google Drive, and Calendar.
- Use advanced management to establish a trusted connection with an Apple Push Certificate. (An Apple Push Certificate is not required for basic management.)
Let your users install preferred business apps from a whitelist you create.
- You can whitelist Android apps hosted in managed Google Play.
- You can whitelist iOS apps hosted in the Apple® App® Storeand managed device users can download them directly.
For advanced management of Android devices, add Android enterprise to separate business apps from personal apps. This way, employees can use their favorite Android device for work and play. You can subscribe (at no extra cost) when you have a G Suite account. (Learn more about Android enterprise.)
Your employees enroll themselves in mobile management by adding their work account to their devices*. The account uses a synchronization process (Android Sync, iOS Sync, or Google Sync) to connect with your business and keep data everywhere up to date.
For devices your company owns, you can speed up enrollment. Import them in bulk by serial number. Then, either enroll each device yourself, or distribute the devices and allow employees to complete enrollment as usual.
After users enroll a device, you can:
- View device activity from the Admin console or Admin app.
- Use reports to get the big picture.
- Use audit logs to see individual event details.
- Respond quickly to activity that indicates policy noncompliance. You can block or remove an account from the device.
*For optimal performance, we recommend that each work account is added to no more than 10 devices.