This article only applies to Google Workspace customers. Learn more about Google Workspace.
Depending on how your administrator manages Android devices in your organization, you might need to install the Google Apps Device Policy app on your device. The app enforces your organization’s security policies on your device to protect corporate data and make it more secure. If you don’t install the app, but your administrator requires it, you can’t access Google Workspace data on your device, including work email, calendar, and contacts.
What you need
- A device running Android 2.2 or higher.
- A Google Workspace account. See your administrator if you don’t have one.
- Latest version of Google Play Services.
What your administrator can do with the Device Policy app
Some organizations require their users to install the Device Policy app on their device. If you don't install the app, your mail, calendar and contacts may not sync with your device. Contact your administrator for more details.
Your administrator can set the following security policies:
- Device password strength and required length.
- Number for the following items:
- Invalid passwords allowed before the device is wiped.
- Recently expired passwords that are blocked.
- Days before a device password expires.
- Idle minutes before a device automatically locks.
- Days device has not synced before wiping.
- Application auditing.
- Remote wipe a device or an account from a device.
- Device policy app version requirements.
- Blocking of security-compromised devices.
Your administrator can also configure Wi-Fi networks and manage network access certificates. They might hide a network's details so that only users who have the network name and password can connect to it.
What users can do with the Device Policy app
When you open the Device Policy app on your device, it opens on the Status screen. To view the Policies or Messages screen, tap to select the screen that you want to view.
You can use the Device Policy app to:
- Manage your device: You can access the My Devices page to ring, lock, and locate your device as well as reset your screen-lock PIN. You can also remotely wipe your device if your administrator allows it. For more information, see View and manage mobile devices.
- Sync your device: On the Status screen, you can see when your device last successfully synced with the server. To manually sync your device to ensure that you have the most up-to-date policies, tap Sync Now.
- View security policies and network settings: On the Policies screen, you can view the security policies that your administrator sets on your device. If your device doesn’t comply with any of the set policies, you need to take the shown action to resolve them.
- View details about your device: The Policies screen lists details about your device that are shared with your administrator, such as the Device Policy app version, device OS version, device model, your email address, the Wi-Fi networks that your administrator configured and the server certificates.
- Get multiple-account support (version 7.7 or earlier only): If you set up the Device Policy app with multiple Google Workspace accounts with different policies, the most restrictive policy will be enforced on your device. For example, if one domain requires the device PIN to be 4 characters long and another requires it to be 6 characters long, the device enforces the 6-character length. For more information, administrators can see Assist users of managed Android devices.
- Create a work profile: If your organization uses Android in the workplace, you can set up a work profile. To create a work profile, you must have an Android 5.0 Lollipop or later device that supports managed profiles.