Search
Clear search
Close search
Google apps
Main menu

Manage your iOS mobile devices

As a Cloud Identity administrator, you can view and manage active mobile devices in your domain from the Devices page.

Access the Devices page

To access the Devices page:

  1. Sign in to your Google Admin console.
  2. From the Admin console dashboard, go to Device management.
    To see Device management, you might need to click More controls at the bottom.
  3. Click the Mobile devices box to open the page with your managed mobile devices.
    The Devices page you are viewing now displays the total count of all devices in your organization. (The Mobile devices box you clicked to open the page displays a 30-day active count.)

If your organization has many devices activated, the view is paginated. You can search for specific users and devices, and sort the columns, for different views of your mobile fleet.

If you've not yet set up mobile device management, do that first before viewing devices. 

View and manage mobile devices

On the Devices page, you can:

  • View devices in the list and filter the list by personal or company-owned categories
  • Search for one or more devices that meet common criteria
  • View general information about an individual device
  • Check device status and recent activity
  • Perform management operations
View personal devices
  1. On the Devices page, under Filters, click the Device ownership down arrow, and select Personal.
  2. Click a column heading: Device ID, Name, Email, Model, OS, Type, Last Sync, or Status

    Note: If you use basic management, information in these columns can take up to 3 days to populate after a device is enrolled. Also, the device model might not be specific.
Search for devices with common criteria
  1. On the Devices page under Filters, click the Device ownership down arrow, and select Personal or Company owned.
  2. Using one of the search operators in the tables that follow, enter each search term as a single word with no spaces, or enter several words in quotes for exact phrases.

    When you enter words and phrases into the search box, it searches all fields. Searches are not case-sensitive. The system treats punctuation as white space within a search. For example, running a search for admin@yourdomain.com is the same as entering admin yourdomain com.
     
  3. To search within a specific field, enter a search operator followed by an argument, for example, user:joesabia. You can also use single words or quoted lists of words as arguments. 
  4. Click Enter.

You can use a search to find device details shown on the general Information pages. For assistance with targeted searches, use the supplied search operators below. 

View general information about an individual device
  1. On the Devices page, click a device’s Device ID link. 
  2. View the device’s General information page. This page shows device compliance, user details, policy profile, and device properties. 

You can learn more about device details on the General Information page.

Check device status and recent activity
  1. On the Devices page under Filters, click the Device ownership down arrow, and select Personal or Company owned.
  2. Locate one or more devices by sorting or searching.

When you find the device, view its Status column at the far right. You can see if the device is being remotely wiped, blocked, unblocked, approved, or is not in use.

Known issue: If a user's device doesn't satisfy the device management policies you have specified, their device does not sync. (It can take up to 24 hours for the device to stop syncing.) 

Manage devices
  1. On the Devices page under Filters, click the Device ownership down arrow, and select Personal or Company owned.
  2. Locate one or more devices by sorting or searching.
  3. Check the relevant boxes for the devices you want to manage.
  4. Decide on a management option. The system shows what’s available for the device or devices you have selected.

    For personal devices, click Approve, Block, Wipe device, Wipe account, Delete, Show Audit Events, or Export All device data. The Export All option exports a CSV file, listing all devices synchronized with your domain, with the following information—Device ID, Name, Email, Model, OS, User Agent, Type, Last Sync, First Sync, and Status. If you have many devices in your domain, exporting data can be slow. 

Use search operators to find devices

You can search more precisely by adding search operators to your search query. 

To use the operators listed here in a search, see the search procedure above. 

You can use a global search for a free form search. For example, you can search for the serial number with or without the “serial:” operator, and the results are similar.

When you create search queries with dates, times, and date and time ranges, follow the allowed date and time formats.

Date and time formats

Form Searches Sample searches
datetime Exactly on the given date or time 2016-03-23
2016-04-26T14:23:05
datetime..datetime Within (inclusive) the given interval of date or time 2016-03-23..2011-04-26
datetime.. On or after the given date or time 2016-04-26T14:23:05..
..datetime On or before the given date or time ..2016-04-26T14:23:05

The date and time are expressed as a UTC, specified using a simplified form of ISO 8601: YYYY-MM-DD or YYYY-MM-DDThh:mm:ss, where the hour is in the range [0, 23] (24-hour system).

Device search operators

Syntax Searches for Sample searches Global search
email:address
 
Email address (as a phrase) email:joe@example.com matches joe.sabia@example.com and joe.sciarrillo@example.org Yes
Management_type:
string
Devices managed by the specified management type. Management_type::advanced
Management_type::basic
No
privilege​:string Android devices that have a work profile set up privilege:device_owner are corporate-owned devices configured to recognize the company as the device owner
privilege:profile_owner are users’ personal devices configured with managed work profiles that are separate from their personal space
privilege:device_admin are users’ personal devices configured with managed accounts within their personal space
No
status:status

 
Devices with the given G Suite provisioning status Supported values—pending, approved, blocked, wiping, wiped, unprovisioned, unknown
 
No
sync:time_range

Devices whose last policy sync was in the given time range

sync:2011-03-23
sync:2011-03-23..2011-04-05T13:42:00
No
type:string Type of device type:ios No

View individual device details

You can view important information for any of your managed devices on the device's General information page. This page displays information about the device, grouped within the following categories: Device compliance, Policy profile, User details, and Device properties.
 

To access the General information page:

  1. Sign in to your Google Admin console.
  2. From the Admin console dashboard, go to Device management.
  3. To see Device management, you might need to click More controls at the bottom.
  4. Click Mobile devices.

    On the Devices page, you can view and manage your organization’s mobile devices. You can also search to find the managed devices that meet certain criteria (for example, all devices that are in blocked status).
     
  5. Click the device ID link to view details for a device.​

Each of the following tables corresponds to a category on the General information page. The tables describe the information displayed for each category: Property name, Description, and Support.

Understand the details

Each of the following tables corresponds to a category on the General information page. The tables describe the information displayed for each category: Property name, Description, and Support.

Note: Properties that are not supported by the device are not displayed.

View device compliance information

You can view device compliance information to see the management status of mobile devices in your organization, and to determine whether a user’s mobile device adheres to policies.

Property name Description
Status Device’s management status: Pending, Approved, Blocked, Wiping, Wiped, Unprovisioned, Deleted, Account wiping, Account wiped, or Unknown. An administrator monitors and controls this property.

 

View device user details

You can view device user details—usernames, email IDs, and added account types.

Property name Description
Name

Username. As the domain administrator, you enter this name when you create the account.

Email

Lists the user’s email ID and aliases. As an administrator, you can create the list. 

 

View policy profile information

You can view details of a user’s device policy profile, such as the time of the last sync, password status, or whether or not the device is encrypted.

Property name Description

First sync

Date and time of the first sync after the user has enrolled the device in Google Mobile Management.

Last sync

Date and time of the most recent sync with Google Mobile Management.

User agent

The version of the agent serving as the management mechanism for this device (for example, Google Apps Device Policy 7.05 would be the User agent for Android).

View device properties

You can view key information for managed mobile devices, such as the latest operating system security update, the subscriber’s mobile operator, or devices that support a work profile.

Property name Description

Device ID

Distinctive number associated with the user’s device (for example, 35407fa833a25163).

Serial number

Serial number of the device (for example, ZX1G428WVV).

Type

Sync type: Android, iOS, or Google Sync.

OS

Name of the mobile operating system (for example, Android 5.1.1, iOS 9.3.2).

IMEI

International Mobile Equipment Identifier of the device (for example, 35 331207 323711 9).

MEID

Mobile Equipment Identity number of the device (applies only to CDMA devices).

Important note about IMEI and MEID

IMEI (GSM) and MEID (CDMA) IDs are available on all devices that support SIM cards. The SOC manufacturers provide these IDs, which are guaranteed to be unique. So, you can use them as unique identifiers for the device. These aren’t available on Wi-Fi-only devices. 

Wi-Fi Mac address

Wi-Fi MAC address of the device.

Network operator

Subscriber’s mobile operator (for example, Verizon Wireless)

Build number

Build number of the supported device (for example, MTC19V is the build number for Nexus 5X/6P).

View managed applications

If you have whitelisted applications for users to download, and application auditing is enabled for the user, the Applications field lists the apps that the user has downloaded. You can use this information to verify if the user has the latest version of an application.

Note: If the user’s device has no managed applications, “No applications found” is displayed.

For iOS devices, the Applications field displays the following information for each managed application: 

  • App name
  • Version
  • Package ID 

Tip: Administrators can create scripts to automate approvals and other actions based on device property changes.

View mobile reports

As an administrator, you can use aggregate reports to review trends or to see an overview of administrative information for various settings and statuses, including verification status, account status, administration status, storage quotas, document visibility, email flow, and Drive file counts. The reports generate a series of charts and graphs that display information for all users in your G Suite domains. Use aggregate reports to see an overview of information or review trends. To review user-level data, access account activity reports.

Step 1: Open your aggregate report
  1. Sign in to your Google Admin console.
  2. From the Admin console dashboard, go to Reports.
    To see Reports, you might need to click More controls at the bottom.
  3. Go to Aggregate reports.
  4. On the toolbar, click Select reports Select columns. Then select the data you want to show in your report.
Step 2: Understand aggregate reports data

The Admin console bases its aggregate reports on the following user data.

Report type Description
Managed devices (7DA)

Number of managed devices that were active in the last 7 days.

If a device has 2 types of sync set up—Google Sync and Android Sync on an Android device, or Google Sync and iOS Sync on an iOS device—then it's counted in both corresponding data sets on the graph.

Managed devices (30DA)

Number of managed devices that were active in the last 30 days.

If a device has 2 types of sync set up (see below), then it's counted in both corresponding data sets on the graph:

  • Google Sync and Android Sync on an Android device
  • Google Sync and iOS Sync on an iOS device

Note: By default, this report isn't displayed.

Managed users (7DA) Number of managed users that were active in the last 7 days.
Managed users (30DA) Number of managed users that were active in the last 30 days.
Note: By default, this report isn't displayed.
Managed iOS devices (7DA) Number of iOS devices, by version (Google Sync and iOS Sync), that were active in the last 7 days.
Managed iOS devices (30DA) Number of iOS devices, by version (Google Sync and iOS Sync), that were active in the last 30 days.
Note: By default, this report isn't displayed.

If your mobile reports show no activity, then you need to enable Mobile management by enforcing policies on your users' devices.

Step 3: Change the data you see in the chart
  1. Open your report as shown above.
  2. Next to the title above the chart, click the Down arrow Down Arrow .
  3. Select an option from the list or click a column in the table.
  4. Hover your cursor over any point in the chart to see specific data over the timeline.
Step 4: Change the data you see in reports
  1. Open your report as shown above.
  2. On the toolbar, click Select reports Select columns to view all available columns.
  3. Click the box next to each column you want to display and click Apply.
You'll see the same columns the next time you open this report.
Step 5: Customize and export your report data

Filter the report data by user or activity

You can narrow your report to show specific events or users. For example, you can create a filter to find all users who are using 2-Step Verification. Or, you can create a filter to list people who share a lot of external links.

  1. Open your report as shown above.
  2. If you don't see the Filters section, on the toolbar, click Filter Filter.
  3. Enter or select the criteria for your filter. You can filter on any combination of the data you can view in the report.

Export your report data

You can export your aggregate report data to a Google Sheet, or download it as a CSV file.

  1. Open your report as shown above.
  2. (Optional) To change the data to include in your export, on the toolbar, click Select reports Select columns .
  3. Click the box next to each column with data you want to export and click Apply.
  4. On the report, click Download Download.

You can export up to 210,000 cells. The maximum number of rows depends on the number of columns you select.

Change how much data you show

You won’t see complete data up to the present day. Instead, activity in recent days might only be partially reported while it’s still being collected. To choose an end date for collecting data and see the most recent date full data is available:

  1. At the top, next to the calendar, click the down arrow.
  2. In the calendar, choose an end date for collecting data in your report.

    A green background marks the latest date when all data are collected. You can select a date after that, but later days might report only partial data.
Was this article helpful?
How can we improve it?
Sign in to your account

Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.