Search
Clear search
Close search
Google apps
Main menu

Set up mobile device management

If you have the legacy free edition of Google Apps, upgrade to G Suite to get this feature.

You can use Google Mobile Management to offer users secure access to corporate apps and data, including Google mobile apps and other apps. As an administrator, you can set up fully integrated mobile device management with continuous system monitoring and reporting for device activities. You manage active devices in the Google Admin console or by using the Admin app from a mobile device. You can also audit and manage device usage and events. 

Open all   |   Close all

Setup options

Step-by-step setup
Learn about management features as you choose them. For step-by-step setup, start by learning about management options.
Automatic setup
Have the system set up management for you, applying default settings and policies that you can later adjust. You have initiated automatic setup if you:
  • Clicked Manage Now when you saw it.
  • Chose the option to let Google manage all mobile devices in your domain.

Continue the process of setting up mobile device management automatically

Management options

You can set up basic or advanced management. You can also customize management across device types and organizational units. 

Basic management
As an Admin, you can:

Your device users can:

  • Get access to Google mobile apps.
  • (Apple® iOS® users) Bypass downloading any management app or profile. They enroll their device for management by installing a G Suite mobile app, such as Gmail, and signing in with their work account.
  • (Android users—Required) Download the Google Apps Device Policy app during enrollment.
  • Download apps through the Google Play store. (In general, Google Play needs to be on for Android device management.)

Note: iOS 7 and earlier devices aren’t supported under Basic management. 

Advanced management
Advanced management has the same features as basic management, and you can also:

Your device users with devices enrolling in advanced management must follow these steps:

  • (Android users) Download the Google Apps Device Policy app during enrollment.
  • (iOS users) Download a device policy profile. This app or profile communicates policy compliance and helps to manage the device. Device users are prompted to update it each year.
Custom management
You can customize mobile device management by device type. For example, you can select basic management for Android devices and advanced management for iOS devices. 
No management
You can choose not to manage devices by turning mobile management off. When you do, users can still sync their corporate data to their mobile device, but you can’t apply policies or manage the device from the Google Admin console. For example, you can’t wipe corporate data from a device if it’s lost or stolen.

Turn on mobile device management

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. On the left, click Setup.
  4. Click Mobile Management.
  5. (Optional) On the left, select an organization.
  6. Turn Enable Mobile Management On On.
  7. Select a management option.
  8. If you select Custom, choose a level of management for each type of device.
  9. Click Save.
  10. If you selected Basic management, you’re done and your users can enroll their devices. Go to Next steps for more options.
  11. If you selected Advanced management, go to Set up advanced mobile management.

Set up advanced mobile management

The steps to complete the setup of advanced mobile management depend on the type of device you want to manage. Before you begin, make sure you turn on mobile device management and select Advanced for the device type. 

Android devices

Here are some benefits of setting up advanced mobile management:

  • (Android devices)  You can offer work profiles. 
  • You can flag the devices your company owns, making them easier to view and control. 
  • (Optional) You can choose to set an approval requirement for enrollment completion. Users register their devices and wait for you to approve them before enrollment completes.

Choose Android advanced management features

You need to set up Android app management if you want to offer work profiles. The remaining features are optional.

  1. On the Device management setup page, click Android app management.
    If you haven’t enrolled in the managed Android apps program, it’s marked Disabled. Go to step 2.
  2. Click Enable Android app management.
  3. Click Enable to confirm. 
  4. (Optional) To flag company-owned devices, go to Set up management for company-owned devices.
  5. (Optional) To selectively approve personal devices for activation, go to Set up an approval requirement for personal device activation.
  6. When you are ready, go to Next steps.

Apply Android policies

You can enforce policies for managed Android devices. Some policy settings apply, by default, when you turn on mobile management. You can adjust them.

(Optional) Set up management for company-owned devices

As a G Suite administrator, you can give mobile devices to your employees and flag them as company owned. After they’re flagged, you have full administrative control of the devices. You can apply policies that regulate app installation, personal accounts, hardware, network settings, and security options.

You can apply additional policies to users with company-owned devices. For example, when a device is lost or stolen, you can see if the device is company owned. If so, you can wipe the device and not worry about the user losing data from a personal device.

Note: Before you set up a device as company-owned, you need to factory reset the device.

There are 2 ways to set up company-owned device management. You can use one or both methods:

  • User opt-in: You can prompt individual users to accept the company as the device owner when they enroll their devices. Available for Android 6.0 Marshmallow and above devices. 
  • Bulk enrollment: You can enroll devices yourself. You can import them in bulk by serial number.

To set up User opt-in:

  1. On the Device management setup page, click Company Owned Devices.
  2. Check the box to Allow users to opt in device owner mode during initial device setup.
  3. Click Save.

(Optional) For bulk-enrolled, company-owned devices:

  • Check the box to send a monthly report to super administrators. 
  • Click Save.
iOS devices

To complete setup for iOS devices, you need to install (or renew) an Apple Push Certificate. Then, you can apply policies and settings for iOS users. 

Install an Apple Push Certificate

  1. On the Device management setup page, click Apple Push Certificate.
  2. Click Set up an Apple Push Certificate or Renew Certificate.
  3. Follow the instructions to set up or renew the certificate. For help, see create and renew Apple Push certificates
  4. To apply additional management settings, go to Apply iOS policies.
  5. (Optional) To selectively approve personal devices for activation, go to Set up an approval requirement for personal device activation.
  6. Go to Next steps.

Apply iOS policies

You can apply additional management settings to iOS devices. Some of these settings apply by default when you turn on mobile management. You can adjust them.

Devices running Google Sync 

You can apply additional management settings for Microsoft® Windows Phone® and other devices that use Google Sync to access your G Suite corporate data:

(Optional) Set up an approval requirement for personal device activation

When a user enrolls a device, they’ll see a message that enrollment is pending until the administrator activates their device. Without this option, devices automatically complete enrollment and are ready to be managed.

Note: You don’t need to set up this requirement for company-owned Android devices. They activate automatically.

  1. On the Device management setup page, click Device activation.
  2. (Optional) On the left, select an organization.
  3. Click Require admin approval for device activation
  4. (Optional) Enter an email address to get notifications when users enroll their devices.
    Tip: Instead of an individual email address, use a group email address that includes all administrators who can activate devices. 
  5. Click Save

After your users enroll their devices, approve and activate pending devices

Turn management off and sync unmanaged devices

If you decide not to manage mobile devices, you can still allow users to sync their corporate mail, calendar, and contacts apps to their mobile device. Your device users need to sign in with their G Suite accounts on their devices to synchronize data.

If you choose this setting:

  • You can’t wipe corporate data from a device if it’s lost or stolen.
  • You can’t apply policies or manage the device from the Admin console.
  • Devices that were previously managed are still listed in the Admin console. New devices will only be listed if they sync data via Google Sync.
Turn off mobile management

You can turn mobile management off for all mobile devices in your organization or only for certain device types.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. On the left, click Setup.
  4. Click Mobile Management.
  5. (Optional) On the left, select an organization.
  6. Choose an option:
    • To turn off management for all mobile devices, turn Enable Mobile Management Off Off.
    • To turn it off only for certain device types, select Custom. Then, for the devices you don’t want to manage, select Unmanaged.
  7. Click Save.
Set up synchronization for unmanaged devices
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. On the left, click Setup.
  4. Click Sync on mobile.
  5. Next to the device type, check the box to sync these devices.
  6. Click Save.

Next steps

Was this article helpful?
How can we improve it?
Sign in to your account

Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.