Using the Google Admin console for Android Enterprise

Starting in 2024, all organizations who sign-up to use Android Enterprise will be provided with a managed Google domain and a managed Google account to access the Google Admin console.

In addition to Android Enterprise, the Google Admin console allows IT admins to manage a number of Google products for their organization (e.g. Workspace, Chrome Enterprise Upgrade, Chrome Browser Cloud Management) in one consolidated location. All settings relating to users, apps, and Google services are available in one single location and need only be configured once by the IT admin.

Setup

IT admins are required to register their organization with Google to take full advantage of the Android Enterprise features. For example, by registering with Google, organizations are able to access Managed Google Play and deploy applications to end-user devices.

IT admins will be redirected to the Android Enterprise sign-up flow by their chosen Enterprise Mobility Management (EMM) provider and follow the following steps:

1. Within the EMM console, the IT admin will find an option to “Setup Android Enterprise” or the like.
2. To perform the registration process, the IT admin will be redirected to Google.
3. To create their managed Google account, the IT admin enters their corporate email address which will be used. An email will be sent to this email address to verify ownership.
   1. If the email address is an existing Google account, the IT admin will be prompted to login to their existing account.
      1. If the account is an existing consumer account, you may be prompted to convert to a managed Google account. You can remove or download your personal data (using Google Takeout) prior to converting.
      2. If the account is an existing managed Google account, and the IT admin has admin privileges for the managed Google domain, the IT admin will be prompted to enable Android Enterprise for their managed Google domain by adding the Android Enterprise free subscription.
4. The IT admin enters their name and organization details and communication preferences.
5. The IT admin is asked if they would like to enable additional Google services to their managed Google domain (e.g. Workspace).
6. The IT admin is asked to set a password for their managed Google account.
   1. If the organization uses Microsoft as their primary identity provider, they may be asked if they wish to login using their Microsoft account.
7. The IT admin views and agrees to the Google and Android Enterprise agreements.
8. The IT admin confirms that they wish to allow their chosen EMM to manage their Android Enterprise devices. An EMM binding will be created to their managed Google domain.
9. The IT admin will be redirected to their EMM console and the setup process is complete.
10. A welcome email is sent to the IT admin containing more info about Android Enterprise and the other Google services that they selected.

Following completion of the setup process, the IT admin can manage their Android Enterprise devices through their EMM console. The IT admin will also have access to the Google Admin console to manage all their EMM bindings and other Google services used by their organization.

Note: If the IT admin encounters an issue during setup, they may be prompted to create a managed Google Play accounts enterprise. This will allow the organization to deploy Android Enterprise devices but managing other Google products will require a separate registration. Access to the Google Admin console is not supported for organizations using managed Google Play accounts enterprises. Read Access to Managed Google Play for more details.

Invite other admins

IT admins can enable access to the Google Admin console for additional admins. All new admins will require a managed Google account to access the Google Admin console. An IT admin may wish to provide access to their fellow colleagues within the IT team by following the steps:

1. In the Admin console, go to Menu Directory Users .
2. At the top of the page, click Invite user.
3. Enter the new user's email address.
4. The new user will be sent an email with steps to create an account.

After the new user has accepted the invite and created a managed Google account, the IT admin can enable access to the Google Admin console by making them an admin of the managed Google domain.

Read Make user an admin for more details.

Manage EMM bindings

The Google Admin console provides an overview of the active EMM bindings that are linked to the organization's Google managed domain. It is possible for an organization to have multiple EMM bindings - for example, to serve different territories, user groups or to test pre-release features.

To check the current EMM bindings:

1. In the Admin console, go to Menu Devices Mobile & endpoints Settings Third-party integrations.
2. Click Android EMM.

An IT admin can add or remove EMM bindings:

• To add an EMM binding, follow your EMM’s instructions on how to enable Android Enterprise management and bind to your existing managed Google domain.
• EMM bindings can be removed by clicking ‘Remove’ next to the entry in the EMM bindings table.

Domain verification

If you're the owner or IT admin for your organization's domain name, you can enable more features for your organization. You can set up enterprise devices using managed Google accounts after verifying your domain if supported by your chosen third-party EMM.

Read Verify your domain to unlock features for more details.

Note: As “Google Workspace Essentials Starter” is not available to customers who verify their domain, customers must adjust their Workspace subscription should they have enabled this product when signing-up for Android Enterprise.

If you don’t wish to upgrade to a paid version of Workspace following domain verification, you have two options:

Recommended approach

1. Prior to starting the domain verification process, navigate to Menu Billing Subscriptions
2. Remove the subscription to “Google Workspace Essentials Starter”
3. Add a subscription to “Google Workspace Enterprise Essentials (Free trial)”
4. Begin the domain verification process

Alternative approach

1. Begin the domain verification process
2. When asked to upgrade to the “Google Workspace Enterprise Essentials” product, exit the domain verification process.
3. Navigate to Menu Billing Subscriptions
4. Remove the subscription to “Google Workspace Essentials Starter”
5. Resume the domain verification process

Important: Attempting to remove “Google Workspace Essentials Starter” and not replacing it with another Workspace subscription (e.g. Google Workspace Enterprise Essentials (Free trial)) prior to starting the domain verification process may lead to issues during the verification process.

Cancellation and data deletion

After Android Enterprise has been enabled for your managed Google domain, it is not possible to remove it from your list of subscriptions.

However, organizations can remove all data related to Android Enterprise by removing all EMM bindings by navigating to Devices Mobile & Endpoints Settings Third-party integrations Android EMM Manage EMM providers. This will remove all data relating to Android Enterprise, regardless of the “Android Enterprise” product still being listed under your subscriptions.

An IT admin can also delete their managed Google domain and all associated data by navigating to Account Account settings Account management.