How your iOS device is managed

This article only applies to G Suite customers. To manage your personal Google apps on your iOS device, see Sync your mail, contacts, calendar, and more

When you let your organization manage your Apple® iOS® device, you agree to allow your administrator to control some data and features on the device. You can check which device features your admin controls (details below). If you have questions about the specific features, contact your IT admin.

Your personal account stays private

If you access multiple Google Accounts on your device, only data from your work or school account can be controlled by your organization. For example, if you have a personal Gmail account and a work email account, only information from the work account is available to your employer. Browser activity in private or Incognito mode in Chrome Browser or Apple® Safari® stays private.

You might need a configuration profile

When you first sign in to your work or school account on your device, you might be asked to install a Google mobile device management configuration profile. The profile helps your admin protect and manage your device. If you don’t install the profile, you might not be able to access your work data on your device. 

You can only have one account with a configuration profile on your device. To use a different account with a configuration profile, remove the existing account and the associated configuration profile. Then, install the profile with the new account. For details on configuration profiles and how to remove them, go to Manage a Google configuration profile.

Your admin can control some features

Feature What your admin controls...
Device password

Your admin can ask you to set a password to lock your screen. The password settings might require:

  • A minimum number of characters
  • An expiration date
  • A time limit before your screen automatically locks
  • An automatic wipe of your device (equivalent to a factory reset) if there are too many failed password attempts

If your password doesn’t meet your organization’s requirements, you can’t access your work account on the device.

Locked screen access

Your admin can control what you can access when your device is locked, including:

  • The Control Center
  • The Notifications Center
  • The Today View
  • Siri®
Remote wipe

Your admin can remotely wipe your work account from your device. Wiping removes all data associated with the account from the device. 

An admin can also wipe the entire device, including all of your personal apps and data. Some organizations require this action if your device is lost or stolen. If your admin remotely wipes the entire device, you can restore your personal content using an Apple® iCloud® or iTunes® backup. For details on restoring data, see your Apple documentation.

Managed apps

Your admin might maintain a list of apps for you to install on your device. You can access these apps from the Google Device Policy app and install them for free. Your admin can remove apps and associated data from your device. They can also decide whether you can:

  • Use managed apps to open your personal documents.
  • Open documents created in managed apps in your personal apps.
  • Share documents created in managed apps with Apple® AirDrop®. You can still use AirDrop for your personal documents.
  • Store documents created in managed apps with iCloud. You can still use iCloud for your personal documents.
  • Use your mobile data to go online and use managed apps, including while roaming.
Work data

Your admin can control whether you can copy data between apps. Depending on the settings your admin chooses, you might not be able to:

  • Copy data from G Suite apps in your work account to G Suite apps in your personal account or to a third-party app.
  • Drag content between G Suite apps in any account.
  • Combine messages from multiple Gmail accounts into one inbox (All inboxes feature).
Backups

When you back up your iOS device to iTunes, your admin might require that you encrypt the backup. An encrypted backup is stored on your computer. You can use it to restore your device. When your admin turns on this setting, iTunes asks you to enter a password. You need to enter this password to restore your iOS device.

Note: Your device can't be backed up or synchronized without your permission.

   
iCloud Your admin can let you connect your device to iCloud to store data and then sync it between your authorized devices. Your organization might require that your device automatically backs up to iCloud every day. To back up to iCloud, the iOS device must be turned on, locked, and connected to a power source.
Apple® Handoff® Your admin can control whether you can use Handoff to send data between devices.
Safari

Your admin can control some features in Safari, including:

  • Autofill when you complete an online form
  • Fraudulent website warnings
  • Oracle® JavaScript®
  • Pop-up windows
  • Cookie usage
Photos, camera, and screen capture Your admin can stop photos in your camera roll from syncing to My Photo Stream. Your admin can also decide whether you can store and share photos and videos in iCloud. They might also turn your camera off or prevent you from taking screenshots and recordings of your screen.
Siri® Your admin can control whether Siri is on or off and if it responds when your device is locked.
Apple® Watch® If you added your work account to your Watch device, your admin can control whether the watch locks automatically when it’s removed from your wrist. You can unlock it with the passcode or a paired Apple® iPhone®.

Check which device features your admin controls

  1. On your device, tap Settingsand thenGeneraland thenDevice Management.
  2. Under Mobile Device Management, tap Google Apps Device Policy Payload Profile.
  3. Tap More detailsand thenchoose an option:
    • To see the settings that your admin can control on your device, tap Mobile Device Management.
    • To see any network restrictions on your device, tap Network usage restrictions profile.
  4. Go back to Google Apps Device Policy Payload Profile and tap Restrictions to see any device restrictions on your device.
  5. Tap Restrictionsand thenPasscode to see the password requirements for your device.
Was this helpful?
How can we improve it?