Compare Cloud Identity features & editions

See the tables below for the differences between Cloud Identity Premium Edition and the free edition.

Note: For a list of features for different G Suite editions, see Compare G Suite Editions. At the top of the list, click Product Suite to filter for a single product, such as Gmail or Google Calendar.

Choose between free and premium service

Open all   |   Close all

Device management

Note: License requirements are by user, not by device. Any users who want to sign in to a managed device must have a supported license for a feature to apply.

Fundamental endpoint management

The following features are available by default.

 

Cloud Identity Free

Cloud Identity Premium
Basic mobile device management
Basic passcode enforcement (mobile)
Remote account wipe (mobile)
Fundamental management for computers
Company owned computers
Remote sign-out (computers)
Endpoint verification
Google Credential Provider for Windows
Device inventory
Basic device reports
Network management
Android app management  

Advanced endpoint management

The following features require a Cloud Identity admin to enable advanced mobile management. Advanced endpoint management also includes all the features listed for Fundamental endpoint management.

 

Cloud Identity Free

Cloud Identity Premium
Advanced mobile device management  
Standard and strong passcode enforcement  
Mobile device security policies  
iOS app management  
Device approvals  
Block devices  
Remote device wipe (mobile)  
Android work profiles   
Advanced device reports  

Enterprise endpoint management

The following features require a Cloud Identity admin to enable advanced mobile management and are restricted to the Premium edition. Enterprise endpoint management also includes all the features listed for Fundamental endpoint management and the features listed for Advanced endpoint management.

 

Cloud Identity Free

Cloud Identity Premium
Company owned Android devices  
Company owned iOS devices  
iOS data protection  
Remote device wipe (Windows)  
Devices audit log  
Report inactive company owned devices  
Selectively distribute mobile apps  
Windows device management  
Management rules  
Mobile device certificates  
Context-Aware Access  
Directory
 

Cloud Identity Free

Cloud Identity Premium
Basic directory management
Organizational units and groups Unlimited  Unlimited
User lifecycle management ✔ *
Admin managed groups
Groups for Business
Google Cloud Directory Sync
(Synchronize Active Directory and LDAP directories
with Google)
Admin roles and privileges
Google Admin App for Android
Google Admin App for iOS
Admin SDK/API
Secure LDAP  

* The Cloud Identity free edition increases your user cap by 50. To learn more, see Your Cloud Identity free edition user cap.

Security
 

Cloud Identity Free

Cloud Identity Premium
User security management
Self-service password recovery
2-Step verification (2SV) including security key management
2SV enforcement controls
2SV enforcement controls with security key management
2SV enforcement controls with security key enforcement
Password strength alert
Password management
First-party session management  
Google security center  
Context-Aware Access  

Note: Some features in the security center, for example, data related to Gmail and Google Drive, aren't available with Cloud Identity Premium.

Single sign-on (SSO) and automated provisioning Reporting
 

Cloud Identity Free

Cloud Identity Premium
Admin audit log
Login audit log
Security reports
SAML audit log
Groups audit log
Token audit log
App reports
Account activity reports
Devices audit log  
Auto export audit logs to BigQuery  
Chrome Browser
  Cloud Identity Free

Cloud Identity Premium

User Policies/Reporting
Chrome Sync
Billing and support
 

Cloud Identity Free

Cloud Identity Premium
Billing  
Subscription and license management
Support Community Support 
(also includes 24x7 Email, Phone, and Chat if you paid for Cloud Platform support or G Suite)
24x7 Email, Phone, Chat
SLA   99.9%

Google, G Suite, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?