When you set up Google endpoint management, you can choose between basic and advanced management for mobile devices. You can also customize management across device types. Each level of management gives you a different set of features.
- Use basic management if you only want to secure devices with a screen lock or passcode and have the ability to remotely wipe corporate accounts from them, and manage apps on Android devices.
- Use advanced management* for more control over device policies and passwords, to manage apps on Android and Apple® iOS® devices, and for the ability to wipe all data from devices.
Mobile management features
|Basic management||Advanced management*|
|Basic passcode enforcement||✔||✔|
|Remote account wipe||✔||✔|
|Android app management||✔||✔|
|Device audits and alerts **||✔||✔|
|Device management rules †||✔||✔|
|Standard and strong passcode enforcement||✘||✔|
|Remote device wipe||✘||✔|
|iOS app management||✘||✔|
|Android work profiles||✘||✔|
|Reporting managed applications and
advanced security signals
|Bulk enrollment for company-owned desktop devices||✘||✔|
|Bulk enrollment for company-owned Android devices **||✘||✔|
|User can assign device ownership to your organization||✘||✔|
* Not available in Drive Enterprise.
** G Suite Enterprise, Business, or Enterprise for Education only.
† G Suite Enterprise and Enterprise for Education only.