This article only applies to Google Workspace customers. To manage your personal Google apps on your iOS device, see Sync your mail, contacts, calendar, and more.
When you let your organization manage your Apple iOS device, you agree to allow your administrator to control some data and features on the device. You can check which device features your admin controls (details below). If you have questions about the specific features, contact your IT admin.
Your personal account stays private
If you access multiple Google Accounts on your device, only data from your work or school account can be controlled by your organization. For example, if you have a personal Gmail account and a work email account, only information from the work account is available to your employer. Browser activity in private or Incognito mode in Chrome Browser or Apple Safari stays private.
You might need a configuration profile
When you first sign in to your work or school account on your device, you might be asked to install a Google mobile device management configuration profile. The profile helps your admin protect and manage your device. If you don’t install the profile, you might not be able to access your work data on your device.
You can only have one account with a configuration profile on your device. To use a different account with a configuration profile, remove the existing account and the associated configuration profile. Then, install the profile with the new account. For details on configuration profiles and how to remove them, go to Manage a Google configuration profile.
Your admin can control some features
|Feature||What your admin controls...|
Your admin can ask you to set a password to lock your screen. The password settings might require:
If your password doesn’t meet your organization’s requirements, you can’t access your work account on the device.
|Locked screen access||
Your admin can control what you can access when your device is locked, including:
Your admin can remotely wipe your work account from your device. Wiping removes all data associated with the account from the device.
An admin can also wipe the entire device, including all of your personal apps and data. Some organizations require this action if your device is lost or stolen. If your admin remotely wipes the entire device, you can restore your personal content using an Apple iCloud or iTunes backup. For details on restoring data, see your Apple documentation.
Your admin might maintain a list of apps for you to install on your device. You can access these apps from the Google Device Policy app and install them for free. Your admin can remove apps and associated data from your device. They can also decide whether you can:
Your admin can control whether you can copy data between apps. Depending on the settings your admin chooses, you might not be able to:
When you back up your iOS device to iTunes, your admin might require that you encrypt the backup. An encrypted backup is stored on your computer. You can use it to restore your device. When your admin turns on this setting, iTunes asks you to enter a password. You need to enter this password to restore your iOS device.
Note: Your device can't be backed up or synchronized without your permission.
|iCloud||Your admin can let you connect your device to iCloud to store data and then sync it between your authorized devices. Your organization might require that your device automatically backs up to iCloud every day. To back up to iCloud, the iOS device must be turned on, locked, and connected to a power source.|
|Apple Handoff||Your admin can control whether you can use Handoff to send data between devices.|
Your admin can control some features in Safari, including:
|Photos, camera, and screen capture||Your admin can stop photos in your camera roll from syncing to My Photo Stream. Your admin can also decide whether you can store and share photos and videos in iCloud. They might also turn your camera off or prevent you from taking screenshots and recordings of your screen.|
|Siri||Your admin can control whether Siri is on or off and if it responds when your device is locked.|
|Apple Watch||If you added your work account to your Watch device, your admin can control whether the watch locks automatically when it’s removed from your wrist. You can unlock it with the passcode or a paired Apple iPhone.|
- On your device, tap SettingsGeneralDevice Management.
- Under Mobile Device Management, tap Google Apps Device Policy Payload Profile.
- Tap More detailschoose an option:
- To see the settings that your admin can control on your device, tap Mobile Device Management.
- To see any network restrictions on your device, tap Network usage restrictions profile.
- Go back to Google Apps Device Policy Payload Profile and tap Restrictions to see any device restrictions on your device.
- Tap RestrictionsPasscode to see the password requirements for your device.
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.