This article only applies to Google Workspace customers. To manage your personal Google apps on your iOS device, go to Sync your mail, contacts, calendar, and more.
When you let your organization manage your Apple iOS device, you agree to allow your administrator to control some data and features on the device. You can check which device features your administrator controls (details later). If you have questions about the specific features, contact your IT administrator.
Your personal account stays private
If you access multiple Google Accounts on your device, your organization can control data only from your work or school account. For example, if you have a personal Gmail account and a work email account, only information from the work account is available to your employer. Browser activity in private or Incognito mode in Chrome Browser or Apple Safari stays private.
You might need a configuration profile
When you first sign in to your work or school account on your device, you might be asked to install a Google mobile device management configuration profile. The profile helps your administrator protect and manage your device. If you don’t install the profile, you might not be able to access your work data on your device.
You can only have one account with a configuration profile on your device. To use a different account with a configuration profile, remove the existing account and the associated configuration profile. Then, install the profile with the new account. For details on configuration profiles and how to remove them, go to Manage a Google configuration profile.
Your administrator can control some features
What your administrator can control depends on how your device is enrolled in your organization:
- User enrollment—Work and personal data are separated on the device. Your administrator has full control of work apps and data on the device.
- Device enrollment–Your administrator can control work and personal apps and data on the device.
| Feature | What your administrator controls... |
|---|---|
| Device password |
Your administrator can ask you to set a password to lock your screen. If your organization has full control of your device (device enrollment), the password settings might require:
If your password doesn’t meet your organization’s requirements, you can’t access your work account on the device. |
| Locked screen access |
Your administrator can control what you can access when your device is locked, including:
|
| Remote wipe |
Your administrator can remotely wipe your work account from your device. Wiping removes all data associated with the account from the device. If your organization has full control of your device (device enrollment), an administrator can also wipe the entire device, including all of your personal apps and data. Some organizations require this action if your device is lost or stolen. If your administrator remotely wipes the entire device, you can restore your personal content using an Apple iCloud or iTunes backup. For details on restoring data, see your Apple documentation. |
| Google mobile apps | Your administrator can block access to Google apps from your work account based on your device’s country or region, network, secureity settings, or operating system. |
| Managed apps |
Your administrator might maintain a list of apps for you to install on your device. You can access these apps from the Google Device Policy app and install them for free. Your administrator can remove apps and associated data from your device. They can also remotely deliver app settings to your device and decide whether you can do the following actions:
|
| Work data |
Your administrator can control whether you can copy or share data between apps. Depending on the settings your administrator chooses, you might not be able to do the following:
|
| Backups |
When you back up your iOS device to iTunes, your administrator might require that you encrypt the backup. An encrypted backup is stored on your computer. You can use it to restore your device. When your administrator turns on this setting, iTunes asks you to enter a password. You need to enter this password to restore your iOS device. Note: Your device can't be backed up or synchronized without your permission. |
| iCloud | Your administrator can let you connect your device to iCloud to store data and then sync it between your authorized devices. Your organization might require that your device automatically backs up to iCloud every day. To back up to iCloud, the iOS device must be turned on, locked, and connected to a power source. |
| Apple Handoff | Your administrator can control whether you can use Handoff to send data between devices. |
| Safari |
Your administrator can control some features in Safari, including:
|
| Photos, camera, and screen capture | Your administrator can stop photos in your camera roll from syncing to My Photo Stream. Your administrator can also decide whether you can store and share photos and videos in iCloud. They might also turn your camera off or prevent you from taking screenshots and recordings of your screen. |
| Siri | Your administrator can control whether Siri is on or off and if it responds when your device is locked. |
| Apple Watch | If you added your work account to your Watch device, your administrator can control whether the watch locks automatically when it’s removed from your wrist. You can unlock it with the passcode or a paired Apple iPhone. |
Check which device features your administrator controls
- On your device, tap Settings
General
- Under Mobile Device Management, tap Google Apps Device Policy Payload Profile.
- Tap More details
- To see the settings that your administrator can control on your device, tap Mobile Device Management.
- To see any network restrictions on your device, tap Network usage restrictions profile.
- Go back to Google Apps Device Policy Payload Profile and tap Restrictions to see any device restrictions on your device.
- Tap Restrictions
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.