When you set up Google endpoint management, you can choose between basic and advanced management for mobile devices. You can also customize management across device types. Each level of management gives you a different set of features.
- Use basic management if you only want to secure devices with a screen lock or passcode and have the ability to remotely wipe corporate accounts from them, and manage apps on Android devices.
- Use advanced management* for more control over device policies and passwords, to manage apps on Android and Apple iOS devices, and for the ability to wipe all data from devices.
Mobile management features
|Basic management||Advanced management*|
|Agentless management (no app required on devices)||✔|
|Basic passcode enforcement||✔||✔|
|Remote account wipe||✔||✔|
|Android app management||✔||✔|
|Device audits and alerts †||✔||✔|
|Device management rules ‡||✔||✔|
|Block and unblock devices||✔||✔|
|Standard and strong passcode enforcement||✔|
|Remote device wipe||✔|
|iOS app management||✔|
|Android work profiles||✔|
|Reports: managed apps and more security details||✔|
|Bulk enrollment for company-owned desktop devices||✔|
|Bulk enrollment for company-owned Android devices†||✔|
|Company-owned iOS devices ‡||✔|
|User can assign device ownership to your organization||✔|
|Distribute device certificates ‡||✔|
* Not available in Business Starter and Business Standard, Essentials, or Cloud Identity Free.
† Enterprise, Education Standard and Education Plus, G Suite Business, and Cloud Identity Premium only.
‡ Enterprise, Education Standard and Education Plus, and Cloud Identity Premium only.
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.