Approve, block, unblock, or delete a device

If you have the legacy free edition of G Suite, upgrade to G Suite Basic to get this feature. 

As an admin, you can control which devices can sync work data. With advanced mobile management, you can require approval before a device can sync work data and block devices. With basic or advanced mobile management, you can  delete a device to prevent it from syncing data.

When you block or delete a device, the device stops syncing work data. The user can still access work data that’s already saved on the device, but any data stored in Drive File Stream is deleted. To remove all work data from a device, you can wipe the account from the device or wipe the entire device.

Approve a device

Requires advanced mobile management.

When you set up Google endpoint management to require admin approval before a mobile device or computer can access your organization's data, you can manually approve devices or set up a rule to automatically approve devices.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.

    If you don't see Devices on the Home page, at the bottom, click More controls.

  3. Click Device Approvals

  4. Review the list of devices that requested access to corporate data.
  5. Choose an option: 
    • To allow devices to access work data and to tag endpoint verification devices as approved, select the devices and click More Moreand thenApprove Devices
    • To prevent devices from accessing work data and to tag endpoint verification devices as blocked, select the devices and click Block Block.
      Note: If you tag an endpoint verification device as blocked, it can still access work data until you enforce Context-Aware Access policies. For details, see the Context-Aware Access overview.

Block a device

Requires advanced mobile management.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.

    If you don't see Devices on the Home page, at the bottom, click More controls.

  3. Choose an option:

    1. To block Android, Apple® iOS®, and Google Sync devices, click Mobile devices.
    2. To block devices using endpoint verification, click Endpoint Verification.
  4. Locate the device in the list and click its name.
  5. Click Block. The device’s status changes to Blocked.

Blocked devices stay in your devices list until you delete them. You might see a message that a device can’t be blocked. For details, click the message. To try to block the device again, click Retry.

Unblock a device

Requires advanced mobile management.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.

    If you don't see Devices on the Home page, at the bottom, click More controls.

  3. Choose an option:

    1. To unblock Android, iOS, and Google Sync devices, click Mobile devices.
    2. To unblock devices using endpoint verification, click Endpoint Verification.
  4. Locate the device in the list and click its name.
  5. Click Unblock device. The device’s status changes from Blocked to Compliant or Non-compliant, depending on its compliance with your organization’s policies. 

Delete a device

When you delete a device, the device stops syncing work data, but no information is removed from it. If you want to remove work data from the device, wipe the account from the device or wipe the entire device before you delete it. For details, see Remove corporate data from a mobile device

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.

    If you don't see Devices on the Home page, at the bottom, click More controls.

  3. Choose an option:
    1. To delete Android, iOS, and Google Sync devices, click Mobile devices.
    2. To delete devices using endpoint verification, click Endpoint Verification.
  4. Select the devices you want to delete and click MoreMoreand thenDelete Devices. Deleted devices are removed from the list of managed devices.
Was this helpful?
How can we improve it?