Enforce EMM policies on Android devices
Enabling this setting will require your Android users to install and configure an EMM application before being able to use their Managed Google Account. Without enabling this setting, Android users can add a Managed Google account outside of the Work Profile on their Android devices, thereby bypassing all EMM device policies for your domain. Before you turn this setting on, please inform your users of the change in their device policy.
If you're using G Suite as your EMM provider (i.e., if you're using the enterprise mobility management features in the Admin console), see Device Policy for Android in the G Suite help center. If you're using a third-party EMM provider, contact them for information on their device policy app.