How your iOS device is managed

This article only applies to G Suite customers. Other users should see Sync your mail, contacts, calendar, and more. Learn more about G Suite.

When you let your organization manage your Apple® iOS® device, you agree to allow your administrator to control some data and features on your device. Each organization is different, so if you have questions about the specific features your organization controls, contact your IT administrator.

Your personal account stays private

If you access multiple Google Accounts on the device, then no data in any account outside of the managed account is shared with your organization without your consent. For example, if you have a personal Gmail account, a managed work account, and an unmanaged account for a volunteer group you work with, no information from the personal or volunteer group account is shared with your employer. Browser activity while in private or Incognito mode of Apple Safari® or Chrome is also not shared.

You might need a security profile

When you first sign in to your G Suite account on your device, you might be asked to install a security profile. The profile helps your administrator protect and manage your device. If you don’t install the profile, you might not be able to access your work account on your device. For details, see How the device policy profile works.

Note: You can only use one G Suite account that requires a security profile at a time. If you need to use another account that requires a security profile, first you need to remove the device policy profile and G Suite account that you're currently using.

Your administrator can control some features

Device password

Your administrator can ask you to set a password to lock your screen. And, there might be certain password requirements, such as:

  • A minimum number of characters.
  • A length of time before the password expires.
  • An elapsed time limit before your screen automatically locks.
  • An automatic wipe of your device (equivalent to a factory reset) if there are too many failed password attempts.

If your administrator applies a password setting and you disable the password, you won’t be able to access your managed account on the device.

Locked screen access

Your administrator can control what you can access when your device is locked, including:

  • The Control Center.
  • The Notifications Center.
  • The Today View.
  • Siri.
Remote wipe
Your administrator can remotely wipe your G Suite account from your device. This removes all G Suite data associated with your account from the device. They can also wipe the entire device, including all your personal apps and data. This might happen if your device is lost or stolen. If your administrator remotely wipes the entire device, you can restore your personal content using an Apple iCloud® or iTunes® backup. For details, see Backups for iOS devices.
Corporate apps

Your administrator might maintain a list of corporate apps for you to install on your device. You can access these apps from the Google Device Policy app and install them for free. Your administrator can remove corporate apps and associated data from your device. They can also decide whether you can:

  • Use corporate apps to open your personal documents.
  • Open documents created in corporate apps in your other personal apps.
  • Share documents created in corporate apps with Apple AirDrop®. You can still use AirDrop for your personal documents.
  • Store documents created in corporate apps with iCloud. You can still use iCloud for your personal documents.
  • Use your mobile data to go online with corporate apps, including while roaming.
Backup, iCloud, and Handoff

Note: Your device can't be backed up or synced without your permission.

When you back up your iOS device to iTunes, your administrator might require that the backup is encrypted. An encrypted backup is stored on your computer.You can use it to restore your device. When your administrator turns this setting on, iTunes asks you to enter a password. You need to enter this password to restore your iOS device.

Your administrator can also let you connect your device to iCloud to store data and then sync it between your authorized devices. They may require that your device automatically backs up to iCloud over Wi-Fi every day. The iOS device must be turned on, locked, and connected to a power source during an iCloud backup.

Your administrator can also control whether you can use Apple Handoff® to send data between devices.


Your administrator can control some features in Safari, including:

  • Autofill when you complete an online form.
  • Fraudulent website warnings.
  • JavaScript®.
  • Pop-up windows.
  • Cookie usage.
Photos, camera, and screen capture
Your administrator can stop photos in your camera roll from syncing to My Photo Stream. They can also decide whether you can store and share photos and videos in iCloud. They might also turn your camera off or prevent you from taking screenshots and recordings of your screen.
Your administrator can control whether Siri® is on or off and if it responds when your device is locked.
Apple Watch

If you added your work account to your Apple Watch® device, your administrator can control whether the watch locks automatically when it’s removed from your wrist. You can unlock it with the passcode or a paired iPhone.

Was this helpful?
How can we improve it?