Apply settings for iOS devices

Supported editions for these features (except as noted): Frontline Starter and Frontline Standard; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, Education Plus, and Endpoint Education Upgrade; Essentials, Enterprise Essentials, and Enterprise Essentials Plus; G Suite Basic and G Suite Business; Cloud Identity Free and Cloud Identity Premium. Compare your edition

As an administrator, you can decide how people use their work account on managed iPhones and iPads. For example, you can prevent data from being copied from a managed app to an unmanaged app (Data protection), turn off certain apps, and control what work data syncs to built-in iOS apps.

Find the settings

Before you begin: If you need to set up a department or team for this setting, go to Add an organizational unit.

  1. Sign in with an administrator account to the Google Admin console.

    If you aren’t using an administrator account, you can’t access the Admin console.

  2. Go to  Menu and then Devices > Mobile & endpoints > Settings > iOS.

    Requires having the Services and devices administrator privilege.

  3. Click a settings category and setting. Learn about the settings in the following section.
  4. (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how
  5. Turn on or off the setting.
  6. Click Save. Or, you might click Override for an organizational unit.

    To later restore the inherited value, click Inherit

Changes can take up to 24 hours but typically happen more quickly. Learn more

iOS settings index

Basic mobile management

Data protection applies to devices under basic and advanced mobile management.

Advanced mobile management

Supported editions for this feature: Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; G Suite Basic and G Suite Business; Cloud Identity Premium. Compare your edition

To use these settings, set up advanced mobile management for iOS devices.

Some settings apply only to supervised company-owned devices:

All iOS devices under advanced management Supervised company-owned iOS devices only
  • Company-owned iOS device setup—Control how company-owned iOS devices are enrolled and which setup screens are shown.
  • Device features—Restrict how users can personalize their device and use certain features such as AirDrop, ScreenTime, and factory reset.
  • Networks—Restrict the cellular, Bluetooth, eSIM, Personal Hotspot, VPN, and Wi-Fi settings users can change.
  • Apps and services—Restrict app installation, removal, and changes to settings.
  • Apple apps—Restrict use of iOS apps, including FaceTime, iMessage, Game Center, and Podcasts, and restrict access to explicit content in iTunes and Apple Books.
  • Authentication—Control what authentication methods users can edit and control password sharing and autofill.
  • Connections—Restrict pairing and printing.
  • Keyboard and dictionary—Restrict use of spellcheck, autocorrect, QuickPath, and Look Up.

 

Expand all  |  Collapse all

Apple certificates

Apple Volume Purchase Program (VPP)

Account Configurations (Google Workspace only)

Expand section  |  Collapse all & go to top

Enrollment

Lock Screen

Expand section  |  Collapse all & go to top

Data sharing

To use most of these settings, you must set up advanced mobile management for iOS devices. However, advanced mobile management isn't required to use the Data actions setting.

Expand section  |  Collapse all & go to top

Backup and iCloud Sync

Note: iOS device users need to give permission for automatic backup and sync using these settings.

Expand section  |  Collapse all & go to top

Photos

Expand section  |  Collapse all & go to top

Advanced Security

Expand section  |  Collapse all & go to top

Safari

Expand section  |  Collapse all & go to top

Company-owned iOS device setup

Company-owned devices only

Expand section  |  Collapse all & go to top

Device features

Supervised company-owned devices only except for Diagnostics

Expand section  |  Collapse all & go to top

Networks

Supervised company-owned devices only

If you restrict Wi-Fi networks and mobile data, make sure that at least one Wi-Fi network is allowed in your organization's network settings. Otherwise, devices might not be able to sync policies and eventually lock out all users.

Expand section  |  Collapse all & go to top

Apps and services

Supervised company-owned devices only

Expand section  |  Collapse all & go to top

Apple apps

Supervised company-owned devices only

Expand section  |  Collapse all & go to top

Authentication

Supervised company-owned devices only

Expand section  |  Collapse all & go to top

Connections

Supervised company-owned devices only

Expand section  |  Collapse all & go to top

Keyboard and dictionary

Supervised company-owned devices only

Expand section  |  Collapse all & go to top

Want more mobile device settings?


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?

How can we improve it?
9046660110280566210
true
Search Help Center
true
true
true
true
true
73010
false
false
false
Search
Clear search
Close search
Main menu
false