About Google Apps Device Policy for Android

This article applies only for G Suite customers. Learn more about G Suite.

Depending on how your administrator manages Android devices in your organization, you might need to install the Google Apps Device Policy app on your device. The app enforces your organization’s security policies on your device to protect corporate data and make it more secure. If you don’t install the app, but your admin requires it, you can’t access G Suite data on your device, including work email, calendar, and contacts.

Learn how to set up the Google Apps Device Policy app.

Before you begin

  • These instructions apply to users with Pixel devices running Android 8.0 or higher. Setup might vary if you’re using a different device.
  • To get started, you need a G Suite account and a personal Android device. See your administrator if you don’t have a G Suite account. You can enroll a currently used, new, or factory-reset device.

Enroll your device in mobile management

  1. Choose an option:
    • If you have a new or factory-reset device, start the device and follow the steps to get to the Google Sign in screen.
    • If your device isn’t new, tap Settings and then Accounts and then Add account and then Google.
  2. Enter your G Suite email address and tap Next.
    Tip: Your G Suite email address is the email address you use at your organization.
  3. Enter your password and tap Next.
  4. To accept the Terms of Service and Privacy Policy, tap I agree.
  5. When prompted, tap Accept & continue to set up your device for work. The setup may take a few minutes.
    Note: If you see a prompt to install the Google Apps Device Policy app, create a work profile, or both follow the steps below to Enroll your device with Google Apps Device Policy.
  6. Tap More and then tap Next
  7. Tap Next and choose an option: 
    • If you only use the device for work, tap Use for work only
    • If the phone is for work and personal use, tap Use for work & personal.
  8. Follow the prompts to set up security features, install work apps and restore your work data.

Enroll your device with Google Apps Device Policy

Use these steps if your device prompts you to install the Google Apps Device Policy app, create a work profile, or both.

Step 1: Install the device policy app

Using the Google Apps Device Policy app, your admin can manage your device and control certain settings. For example, you might have to use a work profile or a screen lock. Pixel devices come with this app pre-installed, so you might just need to install an update to the built-in version.

  1. When prompted to install the Google Apps Device Policy app, tap Next.
  2. Tap Install to update the Google Apps Device Policy app.
    For new or factory-reset devices, your admin manages and keeps your device secure.
  3. If prompted to set up your work device, choose one of the following options:
    1. ​If this is a company-owned device, tap Next.
    2. If this is a personal device, tap I own this device and then tap Next.
  1. (Optional) If prompted to allow the Device Policy app to make and manage phone calls, tap Allow.
  2. (Optional) If your admin offers you the option or requires you to create a work profile:
    1. When prompted, tap Next.
    2. Complete the steps in Create a work profile.
  3. Sign in to your G Suite account and start using your apps.
Step 2: Create a work profile

A work profile keeps your personal and corporate apps and data separate from one another. Creating a work profile is recommended. This way, your admin can’t delete your personal apps or data from the device.

  1. If prompted to create a work profile, tap Set Up and then OK.
  2. (Optional but not recommended) Tap I don’t want a work profile.
  3. Tap Next.
    If you decide not to use a work profile, you’re prompted to activate the device administrator. This lets you do things like find your device and change the ring volume.
  4. (Optional) To activate the device administrator, tap Activate and then Enforce.
  5. (Optional) If prompted, tap Encrypt and take the following actions:
    • Tap Encrypt Phone. (If prompted, confirm your PIN.)
    • To begin encrypting your device, tap Encrypt Phone again.
      It might take a few minutes to complete.

    If your admin needs to approve your device, you get a notice on the device. Wait until you receive this notice before continuing.

  6. Tap Next each time you see a prompt to do so.
  7. At the Policies window, tap Next to return to the sign-in screen.
  8. Sign in to your G Suite account and start using your apps.
    You can launch Android Enterprise apps, which are marked with an image of a suitcase. Tap the app you want to use to launch it.
    You can also go to the Google Play store Play Store.  From there, install the managed apps you want to use.

    Note: Depending on the settings your admin has selected, you may not be able to install all the apps you want. If so, contact your admin.

Tip: If you ever need to, you can read about how to remove a work profile and start again.

Enroll a company-owned device

Before you begin

Do a factory-reset of your currently used device.

You don’t need to do this step if you are using a new device.

  1. Tap Settings and thenBackup & reset and thenFactory data reset.
  2. Follow the prompts as they appear.
Step 1: Sign in to your account
  1. When prompted, sign in to your Google account and tap Next.
  2. Enter your email username and password, tapping Next as it appears.
  3. Accept the Terms of Service and Privacy Policy.
Step 2: Install the device policy app

Using the Google Apps Device Policy app, your admin can manage your device and control certain settings. For example, you might have to lock your screen or use device encryption. Pixel devices come with this app pre-installed, so you might just need to install an update to the built-in version.

  1. When prompted to install the Google Apps Device Policy app, tap Next.
  2. (Optional) Tap Install to install an update to the Google Apps Device Policy app.
  3. Tap Next when prompted.
  4. When prompted to allow the Device Policy app to make and manage phone calls, tap Allow.
  5. Tap Next each time you’re prompted and return to the sign-in screen.
  6. Sign in and go to the managed Google Play store Play Store and install the managed apps you want to use.
    Note: Depending on the settings your admin has selected, you may not be able to install all the apps you want. If so, contact your admin.
Was this helpful?
How can we improve it?