Google Apps Device Policy overview
This article only applies to G Suite customers. Learn more about G Suite.
Depending on how your administrator manages Android devices in your organization, you might need to install the Google Apps Device Policy app on your device. The app enforces your organization’s security policies on your device to protect corporate data and make it more secure. If you don’t install the app, but your admin requires it, you can’t access G Suite data on your device, including work email, calendar, and contacts.
Learn how to set up the Google Apps Device Policy app.
- Android 2.2+.
- You've signed in to your G Suite account on your device.
- Latest version of Google Play Services.
Some organizations require their users to install the Google Apps Device Policy app on their device. If you don't install the app, your mail, calendar and contacts may not sync with your device. Contact your G Suite admin for more details.
Your admin can set the following security policies:
- Device password strength and required length.
- Number for the following items:
- Invalid passwords allowed before the device is wiped.
- Recently expired passwords that are blocked.
- Days before a device password expires.
- Idle minutes before a device automatically locks.
- Days device has not synced before wiping.
- Application auditing.
- Remote wipe a device or an account from a device.
- Device policy app version requirements.
- Blocking of security-compromised devices.
Your admin can also configure Wi-Fi networks and manage network access certificates using the app. They might choose to hide a network's details so that only users who have the network name and password can connect to it.
When you open the Google Apps Device Policy app on your device, it opens on the Status screen. To view the Policies or Messages screen, tap to select the screen that you want to view.
You can use the Google Apps Device Policy app to:
- Manage your device: You can access the My Devices page to ring, lock, and locate your device as well as reset your screen-lock PIN. You can also remotely wipe your device if your admin allows it. For more information, see View and manage mobile devices.
- Sync your device: On the Status screen, you can see when your device last successfully synced with the server. To manually sync your device to ensure that you have the most up-to-date policies, tap Sync Now.
- View security policies and network settings: On the Policies screen, you can view the security policies that your admin sets on your device. If your device doesn’t comply with any of the set policies, you need to take the shown action to resolve them.
- View details about your device: The Policies screen lists details about your device that are shared with your administrator, such as the Google Apps Device Policy app version, device OS version, device model, your email address, the Wi-Fi networks that your administrator configured and the server certificates.
- Get multiple-account support: If you set up the Google Apps Device Policy app with multiple G Suite accounts with different policies, the most restrictive policy will be enforced on your device. For example, if one domain requires the device PIN to be 4 characters long and another requires it to be 6 characters long, the device enforces the 6-character length. For more information, G Suite administrators can see Assist users of managed Android devices.
Note: You can't set up multiple G suite accounts if you are using Google Apps Device Policy app version 7.80 or higher.
- Create a work profile: If your organization uses Android in the workplace, you can set up a work profile.
To create a work profile, you must have an Android 5.0 Lollipop or later device that supports managed profiles.