Manage device enrollment limits by OU

This only applies to standalone Chrome Enterprise/Education and Kiosk & Signage upgrades, both perpetual and annual. It does not apply to bundled upgrades. For more details on upgrade options, see Order options for managing ChromeOS devices.

Customers with distributed deployments don’t have the option to manage license use across organizational units (OUs). This can lead to potential license shortages and unequal access to resources across the organization. For example, if a license is overused by one team, it can leave other teams with insufficient licenses for device enrollment.

As an admin, you can set device enrollment limits by OU to empower customers with distributed deployments to optimize license allocation and prevent overuse.

Other benefits include:

• Fair license allocation across your domain, based on OU needs
• Improved administrative control over license distribution
• Enhanced customer satisfaction

Before you begin

Super admins, who can perform all tasks in the Admin console, have the privileges needed to set device enrollment limits.

If you want to let users perform this task without giving them full access to the Admin console, you can create a custom admin role that has the permissions needed to let them perform only certain administrative tasks. Alternatively, you can add the required privileges to an existing custom admin role.

For details about how to create a custom role that grants the privileges that you want to assign to a user, go to Create, edit, and delete custom admin roles.

Assign the following specific privileges:

1. Manage ChromeOS Device Enrollment Limits—Selecting this privilege automatically selects the Organizational Unit Read privilege
2. Organizational Unit Read
3. View Reports—Required so that admins can see Reporting listed on the Admin console Home Page. Without this privilege, admins can't navigate to the Reports page from the Admin console Home Page—They can access it only by entering the URL in the Chrome address bar.

Set device enrollment limits by OU

Note: By default, there are no enrollment limits set for any OU.

Limit the number of devices that can be enrolled in an OU. Once the limit is reached, new devices can't be enrolled in that OU unless you increase the number of device enrollments allowed.

Note: If you have both perpetual and termed licenses, your perpetual licenses are used before the termed ones. If you set the limit to 0, that OU can't use any licenses.

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to Menu  Devices > Chrome > Reports > Device enrollment limits.

   Requires having the Chrome administrator privilege.

3. Click the specific OU that you wish to configure.
4. In the box that opens:
   1. Turn on the relevant license type: Chrome Enterprise/Education Upgrade or Kiosk & Signage Upgrade.
   2. To set the number of remaining device enrollments, enter a numerical value greater than or equal to 0 for the relevant license type.
5. Click Save to apply the device limit.

Identify device enrollment limits for OUs

Use filters to identify OUs where limits have been reached and need updating. You can search by:

• Organizational unit
• Device enrollments remaining:
  • Chrome Enterprise/Education Upgrade
  • Kiosk & Signage Upgrade

Note: Warning icons display beside zero values, indicating that the OU has reached its limit and needs an update.

Related topics

• Order options for managing ChromeOS devices
• Purchase upgrades for ChromeOS devices
• Use Chrome upgrades