Bring your best ideas to life with Gemini for Google Workspace. Get tips & real-life use cases for using gen AI at work.

How your iOS device is managed

This article only applies to Google Workspace customers. To manage your personal Google apps on your iOS device, go to Sync your mail, contacts, calendar, and more.


Want advanced Google Workspace features for your business?

Try Google Workspace today!



When you let your organization manage your Apple iOS device, you agree to allow your administrator to control some data and features on the device. You can check which device features your administrator controls (details later). If you have questions about the specific features, contact your IT administrator.

Your personal account stays private

If you access multiple Google Accounts on your device, your organization can control data only from your work or school account. For example, if you have a personal Gmail account and a work email account, only information from the work account is available to your employer. Browser activity in private or Incognito mode in Chrome Browser or Apple Safari stays private.

You might need a configuration profile

When you first sign in to your work or school account on your device, you might be asked to install a Google mobile device management configuration profile. The profile helps your administrator protect and manage your device. If you don’t install the profile, you might not be able to access your work data on your device. 

You can only have one account with a configuration profile on your device. To use a different account with a configuration profile, remove the existing account and the associated configuration profile. Then, install the profile with the new account. For details on configuration profiles and how to remove them, go to Manage a Google configuration profile.

Your administrator can control some features

What your administrator can control depends on how your device is enrolled in your organization:

  • User enrollment—Work and personal data are separated on the device. Your administrator has full control of work apps and data on the device.
  • Device enrollment–Your administrator can control work and personal apps and data on the device. 
Feature What your administrator controls...
Device password

Your administrator can ask you to set a password to lock your screen.

If your organization has full control of your device (device enrollment), the password settings might require:

  • A minimum number of characters
  • An expiration date
  • A time limit before your screen automatically locks
  • An automatic wipe of your device (equivalent to a factory reset) if there are too many failed password attempts

If your password doesn’t meet your organization’s requirements, you can’t access your work account on the device.

Locked screen access

Your administrator can control what you can access when your device is locked, including:

  • The Control Center
  • The Notifications Center
  • The Today View
  • Siri
Remote wipe

Your administrator can remotely wipe your work account from your device. Wiping removes all data associated with the account from the device. 

If your organization has full control of your device (device enrollment), an administrator can also wipe the entire device, including all of your personal apps and data. Some organizations require this action if your device is lost or stolen. If your administrator remotely wipes the entire device, you can restore your personal content using an Apple iCloud or iTunes backup. For details on restoring data, see your Apple documentation.

Google mobile apps Your administrator can block access to Google apps from your work account based on your device’s country or region, network, security settings, or operating system.
Managed apps

Your administrator might maintain a list of apps for you to install on your device. You can access these apps from the Google Device Policy app and install them for free. Your administrator can remove apps and associated data from your device. They can also decide whether you can do the following:

  • Use managed apps to open your personal documents.
  • Open documents created in managed apps in your personal apps.
  • Share documents created in managed apps with Apple AirDrop. You can still use AirDrop for your personal documents.
  • Store documents created in managed apps with iCloud. You can still use iCloud for your personal documents.
  • Use your mobile data to go online and use managed apps, including while roaming.
Work data

Your administrator can control whether you can copy or share data between apps. Depending on the settings your administrator chooses, you might not be able to do the following:

  • Copy or share data from Google Workspace apps in your work account to Google Workspace apps in your personal account or to a third-party app.
  • Drag content between Google Workspace apps in any account.
  • Combine messages from multiple Gmail accounts into one inbox (All inboxes feature).

When you back up your iOS device to iTunes, your administrator might require that you encrypt the backup. An encrypted backup is stored on your computer. You can use it to restore your device. When your administrator turns on this setting, iTunes asks you to enter a password. You need to enter this password to restore your iOS device.

Note: Your device can't be backed up or synchronized without your permission.

iCloud Your administrator can let you connect your device to iCloud to store data and then sync it between your authorized devices. Your organization might require that your device automatically backs up to iCloud every day. To back up to iCloud, the iOS device must be turned on, locked, and connected to a power source.
Apple Handoff Your administrator can control whether you can use Handoff to send data between devices.

Your administrator can control some features in Safari, including:

  • Autofill when you complete an online form
  • Fraudulent website warnings
  • Oracle JavaScript
  • Pop-up windows
  • Cookie usage
Photos, camera, and screen capture Your administrator can stop photos in your camera roll from syncing to My Photo Stream. Your administrator can also decide whether you can store and share photos and videos in iCloud. They might also turn your camera off or prevent you from taking screenshots and recordings of your screen.
Siri Your administrator can control whether Siri is on or off and if it responds when your device is locked.
Apple Watch If you added your work account to your Watch device, your administrator can control whether the watch locks automatically when it’s removed from your wrist. You can unlock it with the passcode or a paired Apple iPhone.

Check which device features your administrator controls

  1. On your device, tap Settingsand thenGeneraland thenDevice Management.
  2. Under Mobile Device Management, tap Google Apps Device Policy Payload Profile.
  3. Tap More detailsand thenchoose an option:
    • To see the settings that your administrator can control on your device, tap Mobile Device Management.
    • To see any network restrictions on your device, tap Network usage restrictions profile.
  4. Go back to Google Apps Device Policy Payload Profile and tap Restrictions to see any device restrictions on your device.
  5. Tap Restrictionsand thenPasscode to see the password requirements for your device.


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.


Was this helpful?

How can we improve it?
Clear search
Close search
Google apps
Main menu
Search Help Center