Clear search
Close search
Google apps
Main menu

Set up mobile device management automatically

This feature is available with G Suite Business and Enterprise editions. Compare editions

You can now set up management for mobile devices automatically or manually. 

Step 1: Choose automatic or manual setup

Automatic setup

You can set up management automatically by one of these ways:
  • At the top right of the Admin console dashboard, click Manage Now 
  • In the G Suite Setup Wizard, choose the option to let Google manage all mobile devices in your domain

Both of these management setup methods automatically enable management and apply default policy settings for your managed devices.

Manual setup

If you’ve not decided which option to use, or prefer instead to complete the setup task yourself, you can set up mobile device management following supplied step-by-step instructions.

Step 2: See what setup options are in place

If you chose one of the automatic setup options, review the management features below.

iOS® devices (Basic management) Android devices (Advanced management)
  • Passcodes are required to keep devices secure.
  • You can wipe applicable corporate data from devices.
  • Users continue to get access to Google mobile apps.
  • You can view and manage all your organization’s mobile devices in one place.
  • You control the apps installed on user devices.
  • Work profiles are automatically offered so that users can keep corporate and personal accounts separate.
  • You can optionally enforce stronger passwords.
  • Management reports, audits, and alerts are available for reference.
  • You can optionally adjust policy settings to keep managed devices secure and under your control.
  • Users continue to get access to Google mobile apps.
  • You can view and manage all your organization’s mobile devices in one place.

Step 3: Complete the enrollment process

iOS device users

  • Users with G Suite accounts and a screen lock passcode in place enroll automatically. 
  • Users with G Suite accounts, but without a screen lock passcode in place, get a notification prompt to take account action and create a passcode for password security. 
  • New users who enroll any time after you have set up management have the same experience, depending on the existence of the screen lock passcode.

When the passcode is required: 

  1. For devices with an existing, currently synchronizing G Suite account, app and corporate data synchronization halt until enrollment completes.
  2. After the user creates the PIN, synchronization starts (for newly enrolled devices), or resumes (for devices with an existing G Suite account). 

Android device users

(Required) Android device users get a prompt to take account action. If they have an existing G Suite account on their devices, app and data synchronization halt until they complete these steps. For new users adding a G Suite account, synchronization does not begin until they complete these steps.
  1. Download and install a device policy app, which helps manage the device.
  2. Accept the creation of a work profile on the device. 
    This adds Android enterprise Android enterprise to each corporate G Suite app to visually differentiate it from Google personal apps on the device. 
    At enrollment time, the user can choose to not accept the work profile. However, as the administrator, you can change this from an optional choice to a requirement by setting up work profile enforcement on the Android settings card.

    Accepting the work profile makes these Google mobile apps available automatically:
    Calendar Calendar   Google Drive Drive   Gmail Gmail
  3. Accept enrollment in management, adjusting any settings on the device that do not comply with applied policies for Android advanced management.

After Android device users complete these steps, synchronization starts (for newly enrolled devices), or resumes (for devices with a synchronizing G Suite account).

By default, your apps whitelist, which has been automatically created, makes these additional apps available:

Chrome Chrome   Docs Docs   Hangouts Hangouts   Inbox Inbox
Google Keep Keep   Sheets Sheets   Slides Slides      

Users can check the Google Play store for these additional, whitelisted apps. 
You can manage your apps whitelist and add or remove apps. (If you have a third-party EMM provider, you can choose at any time to switch to using Google Mobile Management to manage Android apps.)

Step 4: Adjust management policies

Selected Android management policies were automatically applied when you chose automatic setup. If you want to adjust settings for any of these policies, see:

If you later decide to apply advanced management to iOS devices, you can also adjust iOS settings.

Next step: Manage devices

Go to the Manage devices page to view and manage devices.


Was this article helpful?
How can we improve it?
Sign in to your account

Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.