Google Workspace Updates: MDM

Use tokens as placeholders for user specific information when configuring managed iOS applications

Thursday, January 16, 2025

What’s changingIn May 2024, we launched the ability for admins to remotely configure managed iOS apps on end-user devices via Google Mobile Device Management. Beginning today, admins can use tokens in the app configurations for managed iOS apps. Tokens act as placeholders for information specific to a user or device that uses the app, such as a user's email address or their device serial number. Previously, configuration data was static, but this update gives admins the flexibility to configure devices dynamically according to various users and devices.

Creating the app configuration using XML information using a token placeholder

Getting started

Admins: Visit the Help Center to learn more about setting up iOS apps with managed configurations.
End users: Visit the Help Center to learn more about how your iOS device is managed.

Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on January 16, 2025

Availability

Available for Google Workspace:

Business Plus
Enterprise Standard and Plus
Enterprise Essentials and Essentials Plus
Education Standard and Plus
Nonprofits
Frontline Starter and Standard
Cloud Identity Premium

Resources

Use the Apple Volume Purchasing Program (VPP) to distribute apps for device enrollment and company owned devices

Tuesday, July 9, 2024

What’s changingIn November 2023, we announced the ability to purchase and distribute iOS apps to user-enrolled devices through Apple’s Volume Purchase Program. Beginning today, we’re expanding this functionality to include device enrollment and company-owned iOS devices.

Who’s impacted

Admins and end users

Why you’d use it

Admins can use the Volume Purchasing Program to efficiently curate a suite of work-related apps—both free and paid—for their team. This streamlined process not only simplifies the deployment of essential business apps but also ensures that employees have access to the right apps they need to be productive and efficient, all within the secure perimeter of our MDM platform. To further streamline the enrollment and app distribution process, we’re automatically installing mandatory apps during enrollment for company-owned devices. This latest update makes it easier for admins to deploy apps across various device types in their organization.

Additional details

Please note that Apple ID sign-in won't be needed in the company-owned iOS devices flow after configuring apps with VPP.

The automatic installation of mandatory apps during onboarding applies to all enrollment types and devices that violate mandatory apps compliance will be immediately blocked until the required app(s) are installed.

Getting started

Admins: This feature can be configured at the ___domain, OU, or group level. Visit the Help Center to learn more about setting up company-owned iOS devices and distributing iOS apps with the Apple VPP.
End users: Visit our Help Center for more information about how your iOS device is managed and getting approved work apps on your iOS device.

Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 9, 2024

Availability

Available to Google Workspace

Business Plus
Enterprise Essentials and Enterprise Essentials Plus
Enterprise Standard and Plus
Education Standard and Plus, and the Endpoint Education Upgrade add-on
Frontline Starter and Standard
Cloud Identity Premium

Resources

Block compromised mobile devices using context-aware access

Monday, May 6, 2024

What’s changing Using context-aware access, you now have the option to automatically block access to Google Workspace data from compromised Android and iOS devices. A device may be counted as compromised if certain unusual events are detected, including devices that are jailbroken, bypassing of security controls, modification of restricted settings, and more.

Creating a new rule to block compromised mobile devices

Blocking message for compromised iOS and Android devices

Getting started

Admins: Visit the Help Center to learn more about how to create context conditions and apply rules with compromised device signals, and our Developer documentation regarding custom access level specification. Compromised device events reports can be viewed in the security center by going to Security > Security center > dashboard > compromised device events.

Rollout pace

Block access to Google Workspace data: available immediately for both Android and iOS.
Remediation message: available immediately for Android, available on May 9, 2024 for iOS.

Availability

Available to Google Workspace

Enterprise Standard and Plus
Education Standard and Plus
Frontline Standard
Enterprise Essentials Plus
Cloud Identity Premium

Resources

Configure managed iOS apps for your users using Google Mobile Device Management

Wednesday, May 1, 2024

What’s changing Directly from the Admin console, admins can remotely set custom configs for managed iOS apps on end-user devices for their enterprise using Google Mobile Device Management. Managed configurations are applied using XML property lists and the same app can be configured differently across different domains, groups, or organizational units (OUs).

Creating the app configuration using XML information

Applying the configuration

Who’s impacted

Admins and end users

Why it’s important

Prior to this update, mobile app configuration was only available for managed Android devices. Beginning today, Workspace admins can use Managed App Configuration to set custom app configurations and deploy them to manage iOS devices across their organization. This gives admins the flexibility they need to create safety parameters that align with the various needs of users across their organization.

Getting started

Rollout pace

Rapid and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on May 1, 2024

Availability

Available to Google Workspace

Business Plus
Enterprise Standard and Plus
Enterprise Essentials and Essentials Plus
Education Standard and Plus
Nonprofits
Frontline Starter and Standard
Cloud Identity Premium

Resources

User enrollment for managed iOS devices is now generally available

Thursday, March 7, 2024

What’s changing In late 2023, we introduced user enrollment in beta, an additional option for iOS mobile management. User enrollment separates work and personal data on iOS devices, giving admins control over Workspace data on the device while users retain privacy over their personal data. Beginning today, user enrollment is now generally available. For more information, use our Help Center or reference our original announcement.

Getting started

Admins: Use our Help Center to learn more about separating work and personal data on iOS devices,
End users: The user enrollment process starts when a user signs-in to an app for the first time or re-signs into an app. They’ll be prompted to begin downloading the configuration profile, which will open in an internet browser with more instructions and information. Once the profile has been downloaded, the user will be directed to their devices settings to complete user enrollment.

Visit our Help Center for more information about how to install the Google Device Policy app and a configuration profile on your device, how your iOS device is managed and getting approved work apps on your iOS device.

Rollout pace

Rapid Release and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on March 7, 2024 with anticipated completion by the end of the month.

Availability

Available to Google Workspace Enterprise Plus, Enterprise Standard, Enterprise Essentials, Enterprise Essentials Plus, Frontline Standard, Frontline Starter, Business Plus, Cloud Identity Premium, Education Standard, Education Plus and Nonprofits customers.

Resources

Updates for managed iOS devices with the release of Chrome 121

Wednesday, January 3, 2024

What’s changingIn the coming weeks, we’ll be introducing several improvements to Chrome-on-iOS that will help admins more seamlessly apply policies and preferences across their users’ managed devices. This launch will align with the planned release of Chrome 121. Specifically, these improvements are:

Cross-device policy application: Whether it’s a company-owned or personal device, Chrome User Policies can be applied when a user signs into the Chrome browser with their managed account. This ensures a consistent and secure browsing experience across all devices.
Management notice for end-users: Managed end-users will begin seeing a management notice, informing them that their organization manages the account they are signing into. This transparency not only fosters trust but also keeps users informed about the security measures in place to protect their data.
Admin console integration: Admins can easily activate this functionality through the Admin console under the "Chrome on iOS" Browser setting. This centralized control allows admins to tailor policies to meet the specific needs of their organization, ensuring a customized and secure browsing environment for all users.

Getting started

We’ll remind you that your account is managed upon login and when you’re logged in.

Rollout pace

End user notifications

Rapid and Scheduled release domains: Extended rollout (potentially longer than 15 days for feature visibility) beginning on February 6, 2024

Admin console integration

Rapid and Scheduled release domains: Gradual rollout (up to 15 days for feature visibility) beginning February 12, 2024

Availability

Available to all Chrome Browser Cloud Management and Google Workspace customers

Resources

Updated grace periods for resolving policy violations in managed iOS devices

Thursday, December 7, 2023

What’s changing Ensuring only managed applications can access sensitive information is vital to security. Currently, when admins make a policy change that results in an app going from unmanaged to managed, if a policy violation is detected, a 24-hour grace period is given to users to comply with the change. After this grace period, users will lose the ability to access their Google Workspace account.

Moving forward, we’re adjusting a few components to how this grace period operates to boost compliance and prevent inadvertent circumvention. Specifically:

Grace Period

Situation

Next Steps

None

-The managed apps policy violation is detected during the device enrollment.

-The managed apps policy violation by an app is detected after 24 hrs from the moment the admin changes the policy.

Users will be prompted to install the app from the Google Device Policy app for IOS or they will lose access to Google Workspace.

Visit the Help Center to learn more.

24 hours

The managed apps policy violation by an app is detected within the 24hrs from the moment the admin changes the policy.

Who’s impacted

Admins and end users

Why it’s important

Improving these safeguards helps ensure that only managed applications can access sensitive organization information. If the managed applications do not meet the requirements of the access policies set by admins, managed application access to Workspace data is deactivated until users take the proper steps.

Getting started

Admins: Visit the Help Center to learn more about managing mobile apps for your organization.
End users: Visit the Help Center to learn more about managed iOS apps.

Rollout pace

Rapid Release and Scheduled Release domains: Available now.

Availability

Available to Google Workspace Frontline Starter and Frontline Standard, Business Plus, Enterprise Standard and Enterprise Plus, Education Standard and Education Plus; Enterprise Essentials and Enterprise Essentials Plus and Cloud Identity Premium customers

Resources

Google Workspace Admin Help: Manage mobile apps for your organization
Google Help: iOS App Management

Managed Android devices must upgrade to Android Device Policy during March 2023

Thursday, March 9, 2023

What’s changing In 2019, we announced that a new Android management client, Android Device Policy, would replace the legacy Google Apps Device Policy client. We’re now in the final stages of this upgrade.

All devices with the Google Apps Device Policy will lose access during March 2023 if they have not already upgraded. Existing Google Apps Device Policy app users must switch to Android Device Policy before then to continue syncing work data. Note that, per our last update, the new user registration flow on the legacy Google Apps Device Policy will be blocked and users may see errors during the registration process as of January 2022. Admins can act directly from the alert in the Admin console to identify users who need to upgrade.

Visit the Help Center to learn more about migrating to Android Device Policy and our previous announcement for more information.

Getting started

Admins: Admins can find devices which may need to act in the Admin console. Visit our Help Center to learn more about the differences between Android Device Policy and Google Apps Device Policy. Different devices may need to take different steps to upgrade:

Advanced management devices:

Basic management devices:

Find basic management devices by going to Admin console > Mobile devices and filtering for Type: Android and Management level: Basic.
Instruct users of these devices to upgrade the Android OS to version 6.0 Marshmallow or later.

End users: Affected users can visit our Help Center to learn how to transition devices from Google Apps Device Policy to Android Device Policy.

Rollout pace

Devices on the old agent will lose access during March 2023.
Android Device Policy is available now and all users should upgrade to avoid disruption.

Availability

This change impacts Google Workspace customers who use basic and advanced mobile management.

Resources

Google Workspace Updates Weekly Recap - January 7, 2022

Friday, January 7, 2022

New updates Unless otherwise indicated, the features below are fully launched or in the process of rolling out (rollouts should take no more than 15 business days to complete), launching to both Rapid and Scheduled Release at the same time (if not, each stage of rollout should take no more than 15 business days to complete), and available to all Google Workspace and G Suite customers.

Update

[2024]: We have completely rolled back this feature on web and there are no plans to relaunch this feature at this time. We will provide an update if and when one becomes available.

[February 2, 2022]: We have temporarily paused the rollout for this feature. We apologize for the delay and we will share an update once rollout resumes.

PPTX file limit increase in Google Slides You can now import PPTX files up to 300MB into Google Slides using Office Editing mode — previously, 100MB was the maximum. Once imported, you can save back your edits to the underlying PPTX file. | Available to all Google Workspace customers and users with personal Google accounts. | Learn more.

Previous announcements
The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.

Use a new enterprise certificate condition to set context-aware access rules for company-managed devices When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned. | Available to Google Workspace Enterprise Standard, Enterprise Plus, Education Standard, Education Plus, and Cloud Identity Premium customers. | Learn more.

For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

Use a new enterprise certificate condition to set context-aware access rules for company-managed devices

Friday, January 7, 2022

Quick launch summary When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned. By using new enterprise certificates as an alternative context-aware signal to determine if a device is a company-managed asset, you can set more specific context-aware policies that are appropriate based on the trustworthiness of the device.

The Admin console screen to configure context-aware access rules using enterprise certificate condition

Getting started

Rollout pace

This feature is now available for all eligible users.

Availability

Available to Google Workspace Enterprise Standard, Enterprise Plus, Education Standard, Education Plus, and Cloud Identity Premium customers
Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business, and Cloud Identity Free customers

Resources

Google Workspace Admin Help: Context-aware access overview
BeyondCorp Enterprise documentation: Configuring enterprise certificate conditions

Google Device Policy app ending support for iOS 11 soon

Tuesday, May 11, 2021

Quick launch summary The Google Device Policy app won’t support mobile devices running iOS version 11 or lower after August 2021. If your organization has advanced mobile device management (MDM) enabled, users must upgrade to iOS version 12 or higher to access new MDM features or to download the Device Policy app for the first time.

We will remove support for iOS 11 in the first release of the Device Policy app beginning September 2021. Therefore please ensure your users upgrade their devices by the end of August 2021 to avoid any disruption to their work.

Use our Help Center to find more information on minimum device requirements for Google mobile management.

New option to block devices with basic management from accessing your organization’s data

Wednesday, January 13, 2021

What’s changing We’re adding the ability for admins to manually block or unblock mobile apps from accessing their organization’s Google Workspace data on Android and iOS devices with basic mobile management. These actions can be automated using device management rules (for supported editions).

Who’s impacted Admins

Why it’s important Previously, admins had a limited set of actions they could perform with basic management—they could wipe an account or delete the device from inventory. However, they couldn’t block apps on those devices from accessing organizational data in the way that they could for devices with advanced mobile management. This launch makes that possible, helping to keep your organization’s data secure.
While the blocking action is the same for devices with basic and advanced management, advanced management allows you to proactively block devices based on the Require Admin Approval setting. With basic management, you can only do this on a per-device basis.

Getting started

New option to block a device available for devices with basic management

Once a device is manually blocked, admins can unblock the device

Those trying to access Google Workspace apps on a blocked device will see a message to contact the administrator for help

Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on January 13, 2021.

Availability

Available to Google Workspace Business Starter, Business Standard, Business Plus, Essentials, Enterprise Essentials, Enterprise Standard, and Enterprise Plus, as well as G Suite Basic, Business, Education, Enterprise for Education, and Nonprofits customers

Resources

Improved mobile device management rules experience in the Admin console

Wednesday, January 13, 2021

Quick launch summary

A new ___location for MDM rules: You can now manage rules at Devices > Security rules. Previously, MDM rules were managed at Admin console > Rules.
New rule options and creation workflow: You’ll see a new flow to create MDM rules, including new conditions which can trigger rules, and new device management and notification actions to take as a result.

Use our Help Center to learn more about managing MDM rules for your organization. Note that any previously created rules will continue to function as before. However, you’ll be able to use the new flow and options if you update the rules.

Getting started

Device management rules are now in the Security rules section of the Admin console

A sample screen from the new rule creation flow
Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on January 13, 2021

Availability

Available to Google Workspace Enterprise Standard, and Enterprise Plus, Enterprise for Education, and Cloud Identity Premium customers
Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, as well as G Suite Basic, Business, Education, and Nonprofits customers

Resources

Google Workspace Admin Help: Automate mobile management tasks with rules

Introducing two BeyondCorp Alliance partner integrations for improved context-aware access

Monday, November 2, 2020

What’s changing We’re announcing new integrations with our BeyondCorp Alliance partners Check Point and Lookout. The integrations, initially available in beta, are built using the Devices API and enable customers to use third party signals in context-aware access decisions.

Who’s impactedAdmins

Why it’s important In the BeyondCorp security model, device inventory, state, and security posture are central to making context-aware access decisions. So far our context-aware access solution obtained these signals from first party (i.e. Google) sources, such as Endpoint Verification. However our vision has always been to help customers to fully leverage their existing investments in security tools and controls, add key functionality and signals to Google’s context-aware access to achieve superior access control security posture for our customers. The BeyondCorp Alliance is a group of partners that share our Zero Trust vision and who are committed to working with us to help our joint customers make it a reality.

Today, we are excited to announce the first integrations (in beta) with our BeyondCorp Alliance partners Check Point and Lookout, to use third party signals in our context-aware access decisions. For example, the mobile threat defence system might detect malware on the device and notify Google about a reduced security assurance, and customer-defined access rules can reduce the level of access allowed from such devices, without impacting access for that user from other devices or for other users. The integrations are built using the new Devices API we announced earlier this year. The API was designed to be used by partners in the BeyondCorp Alliance to add device security metadata, and also by customers to manage their device fleet.

Getting started

Rollout pace

Rapid and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on November 2, 2020

Availability

Available to Enterprise Plus, Enterprise for Education, and Cloud Identity Premium customers
Not available to Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, and Enterprise Standard, as well as G Suite Basic, Business, Education, and Nonprofits customers

Resources

Google Workspace Updates blog: New device management API now generally available
Google Workspace admin Help Center: Set up third-party partner integrations
Devices API documentation

Streamlined and intuitive app management in the Admin console with new unified experience

Thursday, October 22, 2020

What’s changing We’re creating a single place to manage web and mobile apps in the Admin console. With the new ___location, we’ll also be updating the management interface to be more consistent and intuitive. You’ll find this at Admin console > Apps > Web and mobile apps. There, you’ll be able to see configured apps, search apps, add apps, manage user access, adjust settings, and more for:

Android apps. This was previously at Admin console > Devices > Mobile settings > App management > Manage apps for Android devices. Learn more about mobile app management.
iOS apps. This was previously at Admin console > Devices > Mobile settings > App management > Manage apps for iOS devices. Learn more about mobile app management.
SAML apps. This was previously managed at Admin console > Apps > SAML apps. Learn more about SAML app management.

You’ll no longer be able to manage apps in the previous locations. However, you’ll still manage the Android available apps and system apps settings in Admin console > Devices > Mobile settings.

Who’s impacted Admins

Why it’s important By reducing the locations you need to use to manage different categories of apps and creating simplified and consistent workflows, it will be quicker and simpler to manage app use and deployment for your organization.

Additional details

New ___location for web and mobile apps:

New and consistent experience to add web and mobile apps:

Unified settings and quick controls to view access and manage apps:

Getting started

Rollout pace

Rapid and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on October 21, 2020

Availability Mobile app management:

Available to Business Plus; Enterprise; Education and Enterprise for Education; G Suite Basic and Business; and Nonprofits customers
Not available to Business Starter, Essentials, and Enterprise Essentials customers.

SAML app management:

Available to Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education, Enterprise for Education, and Nonprofits customers

Resources

Google Workspace Admin Help: Manage mobile apps for your organization
Google Workspace Admin Help: Set up SSO with Google as your identity provider

Managed Android devices must upgrade to Android Device Policy by March 19, 2022

Wednesday, October 14, 2020

[Updates] March 7, 2023: All devices with the Google Apps Device Policy will lose access during March 2023. Existing Google Apps Device Policy app users must switch to Android Device Policy before then to continue syncing work data. Note that, per our last update, the new user registration flow on Google Apps Device Policy will be blocked and users may see errors during the registration process as of January 2022. See below for more information and instructions.
January 26, 2022: The new user registration flow on Google Apps Device Policy will be blocked and users may see errors during the registration process.

October 21, 2021: We have adjusted the timing for this change. Now, Google Apps Device Policy app won't be available for new enrollments beginning January 19, 2022. Existing Google Apps Device Policy app users must switch to Android Device Policy before March 19, 2022 to continue syncing work data. Previously, we stated that users must switch before October 26, 2021.
What’s changing Last year, we announced that a new Android management client, Android Device Policy, would replace the legacy Google Apps Device Policy client. We’re now discontinuing the legacy client.

To ensure that devices enrolled by users with advanced management will continue to sync and have access to data, users in your organization must switch to Android Device Policy before March 19, 2022. Google Apps Device Policy app won't be available for new enrollments beginning January 19, 2022. If users still have Google Device Policy on this date, they won't be able to sync their devices or access data.
To switch to Android Device Policy, users must have an Android 6.0 Marshmallow or later device that supports a work profile. For users with devices that don’t meet these requirements, consider switching to basic mobile device management.

Devices enrolled by users with basic management must move to Android 6.0 Marshmallow or later before March 19, 2022 to continue enforcing a screen lock. If a user's device can't be upgraded to Android 6.0 or later, their device will continue to sync and retain access to data, however it will not be able to enforce a screen lock.

Who’s impacted Admins and end users

Why it’s important The latest Android devices and operating system (OS) versions provide improved security features. Moving to Android 6.0 (Marshmallow) or newer can help ensure all devices are protected by the latest security features, and can take advantage of improvements in the Android enterprise experience.

Getting started

Admins: Admins can find devices which may need to take action in the Admin console. Visit our Help Center to learn more about the differences between Android Device Policy and Google Apps Device Policy. Different devices may need to take different steps to upgrade:

Advanced management devices:

Basic management devices:

Find basic management devices by going to Admin console > Mobile devices and filtering for Type: Android and Management level: Basic.
Instruct users of these devices to upgrade the Android OS to version 6.0 Marshmallow or later.

End users: Affected users can visit our Help Center to learn how to transition devices from Google Apps Device Policy to Android Device Policy.

Rollout pace

Rapid and Scheduled Release domains: All devices must complete the upgrade by March 19, 2022. Google Apps Device Policy app won't be available for new enrollments beginning January 19, 2022. Android Device Policy is available now for all users.

Availability

Available to Workspace Business Starter, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, and Enterprise Plus, as well as G Suite Basic, Business, Education, Enterprise for Education, and Nonprofits customers
Not available to Workspace Essentials

Resources

Google Device Policy app ending support for iOS 10 soon

Wednesday, September 16, 2020

Quick launch summary The Google Device Policy app won’t support mobile devices running iOS version 10 or lower after the end of 2020. If your organization has advanced mobile device management (MDM) enabled, users must upgrade to iOS version 11 or higher to access new MDM features or to download the Device Policy app for the first time.
We will remove support for iOS 10 in the first release of the Device Policy app in 2021. Therefore please ensure your users upgrade their devices before the end of the year to avoid any disruption to their work.
Use our Help Center to find more information on minimum device requirements for Google mobile management.

New device management API now generally available

Thursday, September 3, 2020

Quick launch summary Earlier this year, we announced that a new API to manage company-owned and personal mobile devices and desktop devices was available in beta. Now, we’re making that API generally available. There are no changes to the new API since we launched the beta.
The new Devices API enables you to manage mobile and desktop devices within your organization. It is intended to fully replace the existing Mobiledevices endpoint of the Admin SDK Directory API, and provides some significant additional functionality as described below. The Mobiledevices endpoint (aka “old API”) will continue to be supported.
The device management API implements the following new functionality not found in the Mobiledevices endpoint of the Directory API:

Support for desktop devices
Add company owned devices to the device inventory
Manage company-owned devices inventory
Manage desktop device inventory
Ability to manage devices under all management modes (Fundamental, Basic or Advanced)
Create and manage custom state with each user account on a device. This custom state can be used in making context-aware access decisions.

In addition, the following main functionality from the older API is also available in the new API:

Manage BYOD inventory for Android and iOS devices
Manage organizational user accounts on devices
Devices under Basic or Advanced management can be managed
Perform actions such as wipe on devices and organizational user accounts on devices
Search devices and organizational user accounts on devices

Find out more about the new API in our beta announcement.

Getting started

Rollout pace

Rapid and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on September 3, 2020

Availability

Available to all G Suite customers

Resources

API documentation

New device management API available in beta

Thursday, July 23, 2020

What’s changing We’re launching a beta for a new API to manage company-owned and personal mobile devices and desktop devices. It will work for devices managed via fundamental management, endpoint verification, Drive File Steam, and enhanced desktop security for Windows. Find out more about device management in G Suite.
The new API is part of the Cloud Identity API, and will eventually replace the Admin SDK Directory API used to manage mobile devices.

Who’s impacted Admins and developers

Why you’d use it The new API includes all the capabilities of the Admin SDK Directory API it will replace. In addition, it adds these new features over and above the Admin SDK:

Ability to create and manage company owned devices
Ability to manage Windows devices registered with the Google Credential Provider for Windows
Ability to manage desktop services such as those with the “Endpoint Verification” extension or those with Drive File Stream installed on them

Getting started

Rollout pace

Rapid and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 23, 2020

Availability

The beta is open to all G Suite customers.

Resources

Developer API documentation: https://cloud.google.com/identity/docs/apis

Simplify management of company-owned iOS devices with new Apple Business Manager integration

Tuesday, July 21, 2020

What’s changing We’re launching an integration between Google endpoint management and Apple Business Manager (formerly the Device Enrollment Program, or DEP). This makes it possible to securely distribute and manage company-owned iOS devices from the Google Admin console.
The integration will enable G Suite Enterprise, G Suite Enterprise for Education, G Suite Enterprise Essentials, and Cloud Identity Premium customers to set Google endpoint management as an MDM server on Apple Business Manager.

Who’s impacted Admins

Why you’d use it With the integration between Google endpoint management and Apple Business Manager:

Apple Business Manager setup in the Admin console

Getting started

Rollout pace

Rapid and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 21, 2020

Availability

Available to G Suite Enterprise, G Suite Enterprise for Education, G Suite Enterprise Essentials, and Cloud Identity Premium customers
Not available to G Suite Basic, G Suite Business, G Suite for Education, G Suite for Nonprofits, and G Suite Essentials customers

Resources

G Suite Admin Help: Set up company-owned iOS device management
Cloud Blog: Safety first: Announcing 11 new G Suite security features

Updates

Use tokens as placeholders for user specific information when configuring managed iOS applications

Use the Apple Volume Purchasing Program (VPP) to distribute apps for device enrollment and company owned devices

Block compromised mobile devices using context-aware access

Configure managed iOS apps for your users using Google Mobile Device Management

User enrollment for managed iOS devices is now generally available

Updates for managed iOS devices with the release of Chrome 121

Updated grace periods for resolving policy violations in managed iOS devices

Managed Android devices must upgrade to Android Device Policy during March 2023

Google Workspace Updates Weekly Recap - January 7, 2022

Use a new enterprise certificate condition to set context-aware access rules for company-managed devices

Google Device Policy app ending support for iOS 11 soon

New option to block devices with basic management from accessing your organization’s data

Improved mobile device management rules experience in the Admin console

Introducing two BeyondCorp Alliance partner integrations for improved context-aware access

Streamlined and intuitive app management in the Admin console with new unified experience

Managed Android devices must upgrade to Android Device Policy by March 19, 2022

Google Device Policy app ending support for iOS 10 soon

New device management API now generally available

New device management API available in beta

Simplify management of company-owned iOS devices with new Apple Business Manager integration

Filter by product

Filter by date

Subscribe by feed

Subscribe by email

Localized Google Workspace Updates

Useful Links

Join the official community for Google Workspace administrators

Learn about more Google Workspace launches