Manage system apps on company-owned mobile devices

As an administrator, you can block user access to some system apps on managed mobile devices. System apps are preinstalled apps such as Clock and Calculator for Android, or FaceTime and iTunes Store for iOS. Many of these apps can't be uninstalled, but you can allow or block access to them.

Block or allow Android system apps

Supported editions for this feature: Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; G Suite Basic and G Suite Business; Cloud Identity Premium. Compare your edition

You can block all Android system apps, allow some, or specify a custom list. When you block system apps, the apps aren't uninstalled, but users and other apps can’t access them.

Note:

• Some system apps are critical to device function and can't be blocked. Review the list.
• We do not recommend blocking user access to accessibility apps. Review the list.
• This setting applies only when a device is first enrolled. If you add or remove system apps to the allow or disable lists, these changes aren't applied to devices already enrolled in advanced mobile management.

Before you begin: To apply the setting for certain users, put their accounts in an organizational unit.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesMobile and endpointsSettingsAndroid.
3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
4. Click Apps and data sharingSystem apps.
5. Choose an option:
   • To make all system apps available, select Allow all. With this option, you can still block specific system apps. Use this option if you want to make most system apps available.
   • To remove access to all system apps, select Disable all. With this option, all but critical system apps are blocked. If you want to allow specific apps, choose the next option.
     Note: This setting doesn’t remove access to Android apps you add to the Web and mobile apps list. For details, see Add mobile apps to your managed app list.
   • To remove access to most system apps, select Allow certain system apps. Then, to specify allowed system apps, enter the app package name of the app you want to allow and click Allow app. If you don’t know the package name of an app, check the mobile device details in your Admin console. If the app isn’t listed, contact the device manufacturer or reseller.
6. To override the preceding options and block specific system apps, under Disable certain system apps, enter the app package name and then click Disable app. The apps you add here are blocked.
7. Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

Changes can take up to 24 hours but typically happen more quickly. Learn more

Block or allow iOS system apps (company-owned devices only)

Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Cloud Identity Premium. Compare your edition

For supervised company-owned iOS devices, you can block user access to many system apps, such as FaceTime, iMessage, and AirDrop. For details, see Apply settings for iOS devices.

Critical Android system apps

Some system apps are critical for a device to function correctly. You can’t disallow these critical system apps:

• android
• com.android.bluetooth
• com.android.contacts
• com.android.keychain
• com.android.keyguard
• com.android.launcher
• com.android.nfc
• com.android.phone
• com.android.providers.downloads
• com.android.settings
• com.android.systemui
• com.android.vending
• com.google.android.deskclock
• com.google.android.dialer
• com.google.android.gms
• com.google.android.GoogleCamera
• com.google.android.googlequicksearchbox
• com.google.android.gsf
• com.google.android.gsf.login
• com.google.android.inputmethod.latin
• com.google.android.marvin.talkback
• com.google.android.nfcprovision
• com.google.android.setupwizard
• com.google.android.webview
• com.samsung.android.contacts
• com.samsung.android.phone

Android accessibility apps

Some Android system apps are for accessibility. We do not recommend blocking user access to these apps:

• com.google.android.accessibility.soundamplifier
• com.google.audio.hearing.visualization.accessibility.scribe

_{Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.}