Get started with Google endpoint management

If you have the legacy free edition of G Suite, upgrade to G Suite Basic to get this feature. 

Use these steps to get started with managing mobile devices in your organization.

Before you begin

  • Organize your users—Use organizational units to apply different settings to groups of users. For example, you might want to allow notifications on the lock screen for managers but not for other employees.  For details, see Apply policies to different users.
  • Notify your users—Tell users that you're going to manage the mobile devices that they use for work. Let them know about the policies you’re going to use. 

Manage your organization's mobile devices

Open all   |   Close all

Step 1: Set up mobile management

Set up management to give users access to their corporate account and work apps on their mobile devices. Choose between basic or advanced management to fit your organization's needs. You can also customize management across device types and groups of users in your organization.

For details, see Set up mobile management.

Step 2: Make sure devices are protected

You can protect data on managed mobile devices by having users set a screen lock or password for their device. If you use advanced mobile management, you can specify the strength of the password, a minimum number of characters, and more. If a password doesn’t meet your minimum requirements, work data will stop synchronizing to the device.

For details, see Apply password settings for mobile devices.

Step 3: Apply settings for mobile devices

Advanced management only

Control how people in your organization use their devices by applying policy settings.

  • Apply Android settings to add work profiles that keep work and personal data separate, restrict network changes, limit data sharing, and more. 
  • Apply Apple® iOS® settings to control what users can see on their lock screen, decide what can be backed up to iCloud®, specify Safari settings, and more. 
  • Apply advanced settings to block compromised and jailbroken devices, enforce encryption, and more. 
Step 4: Manage work apps on mobile devices

Advanced management only

Give users the work apps that they need. Install your preferred business apps on devices automatically (Android only) or make them available to users in a catalog of recommended apps (Android and iOS). You can also create your own private internal apps and host them on Google Play.

For details, see Manage apps on mobile devices.

Step 5: Enroll devices for management

Users can enroll their devices for management by adding their corporate account to a device. After they enroll, you can see their device in the Google Admin console. There, you can manage the device, apply settings, monitor it, and more. 

This feature is available with G Suite Business and Enterprise editions, or Drive Enterprise edition. Compare editions  If your company owns Android devices that you distribute to users, you can add them to your Admin console yourself by importing their serial numbers. Then, distribute the devices to users. For details, see Set up devices your company owns.

Note: For optimal performance, we recommend that each corporate account is added to no more than 10 devices.

Step 6: Approve devices for management

Advanced management only

When you set up mobile device management, you can choose to review and approve devices before they can synchronize work data. If you choose that option, users see a message that enrollment is pending until you approve their device. For details, see Approve mobile devices for management.  

If you decide not to use device approvals, devices are automatically approved and can sync work data right away.

Step 7: Monitor your managed devices

You can track and view device information in real time and monitor compliance with your organization’s policies. With advanced management, you can also receive an email alert when a specific event happens. For example,  when the mobile settings change on a device or a device becomes compromised. 

For details, see Get insights on your domain’s mobile devices.

Was this helpful?
How can we improve it?