Android Enterprise Recommended EMMs

The EMM management app is available in Google Play and gives instructions for Work Profile enrollment when you download and open the app.

The EMM solution supports enrollment through an EMM-provided token that you enter directly in the device setup wizard.

The EMM solution supports enrollment through an NFC bump against an NFC tag.

The EMM solution supports enrollment by scanning an EMM-provided QR code during initial setup.

The EMM solution supports zero-touch enrollment. This feature lets you preconfigure devices that you purchase from authorized resellers for automatic enrollment in the EMM console during device setup.

The EMM solutions let you auto-populate registration details through zero-touch enrollment. They also restrict zero-touch enrollment to authorized users.

The EMM solution supports Work Profile enrollment that starts when you add a managed Google account to the device.

The EMM solution supports enrollment into company-owned device management, such as COPE or Fully Managed, that starts when you add a managed Google account during initial device setup.

The EMM solution lets you manage and configure zero-touch devices directly from an iframe within the EMM console.

The EMM solution lets you manage Work Profiles on company-owned devices. This lets you maintain full control of the hardware while keeping personal user data private.

The EMM solution supports the enrollment of dedicated devices without prompting for Google account authentication.

The EMM solution supports passcode restrictions, like a PIN, pattern, or password, to unlock a device.

The EMM solution supports separate passcode requirements to unlock a Work Profile.

The EMM solution supports advanced passcode rules, including complexity, length, and timeout limits across all device lock screens.

The EMM solution supports Smart Lock controls, like disabling trusted Bluetooth devices, facial recognition, or voice unlock.

The EMM solution supports remote device locks and full corporate data wipes.

The EMM solution supports automatic access restrictions if a device violates organizational security policies.

The EMM solution automatically enforces specific security policies. These include blocking access to Developer Options, keeping debugging modes disabled, and blocking app sideloading by restricting installations to Google Play and OEM-approved sources. On Work Profile devices, the system enforces this policy on both work and personal profiles.

The EMM solution automatically enforces security policies for dedicated devices. These include blocking boots into Safe mode and preventing users from exiting kiosk mode to access other device settings or apps.

The EMM solution uses the Play Integrity API to monitor device health for tampering. If validation fails, the EMM console triggers automated actions, like blocking enrollment or wiping data, based on admin-defined rules.

The EMM solution forces Google Play Protect to remain active to make sure the system conducts continuous malware scanning for work apps.

The EMM solution disables hardware features, like NFC sharing, USB storage, and external media, to help prevent data leaks.

The EMM solution collects and exports device security logs over a specified timeframe.

Enterprise binding

The EMM solution supports binding to Google device and app management infrastructure, which is a prerequisite to use managed Google Play.

Managed Google Play Account provisioning

The EMM solution can silently provision managed Google Play user accounts. These accounts map directly to actual users in the EMM console and let you distribute apps per user. These accounts do not give access to other Google services.

Managed Google Play device account provisioning

The EMM solution can create and provision managed Google Play device accounts. These accounts do not link to a single user and let you distribute apps per device. These accounts do not give access to other Google services.

Silent app distribution

The EMM solution supports silent app distribution without user interaction.

Managed configuration management

The EMM solution supports custom configurations for work apps on specific devices.

App catalog management

The EMM solution supports advanced store layout customization in the managed Google Play Store.

Programmatic app approval

The EMM solution supports the ability to search, approve, and manage work apps directly within the EMM console.

Basic store layout management

The EMM solution supports basic store layout management so employees can browse and install approved work apps.

Advanced store layout configuration

App license management

The EMM solution supports license tracking for private corporate apps directly in the EMM console.

Google-hosted private app management

The EMM solution supports publishing and management of Google-hosted private apps through the EMM console.

Self-hosted private app management

The EMM solution supports update and deployment management for self-hosted private apps through the EMM console.

API usage requirements

The EMM solution implements Android Management APIs at scale. This avoids traffic patterns that can negatively affect your ability to manage apps in production.

Advanced managed configuration management

The EMM solution supports advanced managed configurations and reviews feedback directly from installed apps.

Web app management

The EMM solution supports web app creation and deployment directly from the EMM console.

Managed Google Play Account lifecycle management

The EMM solution supports account lifecycle management to control user access to managed Google Play.

Application track management

The EMM solution supports application track management to control test app rollouts.

Advanced app control

The EMM solution supports advanced app controls to monitor, allow, or block installations in the personal profile.

Runtime permission policy management

The EMM solution supports default permission policy configurations, like prompt, allow, or deny.

Runtime permission grant state management

The EMM solution supports specific default responses for permissions that work apps request.

Wi-Fi configuration management

The EMM solution supports direct deployment of Wi-Fi networks and passwords to devices.

Wi-Fi security management

The EMM solution supports certificate-authenticated Wi-Fi deployments.

Advanced Wi-Fi management

The EMM solution supports advanced Wi-Fi lock downs to prevent users from changing corporate configurations.

Account management

The EMM solution supports account restrictions to prevent users from adding or modifying accounts.

Workspace account management

The EMM solution supports Workspace account management to specify which accounts can access corporate data.

Certificate management

The EMM solution supports certificate deployments for secure resource access.

Advanced certificate management

The EMM solution supports advanced certificate management, including app assignments and keystore lock downs.

Delegated certificate management

The EMM solution supports delegated certificate management through third-party apps.

Advanced VPN management

The EMM solution supports advanced VPN configurations to route work app traffic exclusively.

IME management

The EMM solution supports input method editor restrictions across both work and personal profiles.

Advanced IME management

The EMM solution supports input method editor controls on fully managed devices.

Accessibility services management

The EMM solution supports accessibility services management on the device.

Location Sharing management

The EMM solution supports location sharing restrictions to block app location access.

Advanced Location Sharing management

The EMM solution supports advanced location sharing controls for work apps.

Factory reset protection management

The EMM solution supports factory reset protection management for authorized admin accounts.

Advanced app control

The EMM solution supports app management restrictions to prevent users from uninstalling work apps.

Screen capture management

The EMM solution supports screen capture restrictions while work apps are open.

Disable cameras

The EMM solution supports camera disablements for work apps.

Network statistics collection

The EMM solution supports data usage monitoring for a device Work Profile.

Advanced network statistics collection

The EMM solution supports network statistics collection for a fully managed device.

Reboot device

The EMM solution supports remote reboots on managed devices.

System radio management

The EMM solution supports cellular and network setting controls.

System audio management

The EMM solution supports audio policy controls, such as forced mute controls.

System clock management

The EMM solution supports device time and timezone enforcement.

Advanced dedicated device features

The EMM solution supports advanced kiosk customizations for dedicated devices.

Delegated scope management

The EMM solution supports silent certificate grants and revocations.

Enrollment-specific ID Support

The EMM solution supports enrollment-specific ID configurations on company-owned hardware.

Managed provisioning customization

The EMM solution supports custom provisioning wizard branding and terms.

Enterprise customization

The EMM solution supports enterprise personalization inside the Work Profile.

Advanced enterprise customization

The EMM solution supports corporate branding on fully managed devices.

Lock screen messages

The EMM solution supports custom IT or support messages on the device lock screen.

Policy transparency management

The EMM solution supports custom guidance messages for IT-managed settings.

Cross-profile contact management

The EMM solution supports cross-profile contact sharing controls for Data Loss Prevention.

Cross-profile data management

The EMM solution supports cross-profile data transfer restrictions.

System update policy

The EMM solution supports custom system update policies for managed devices.

Lock task mode management

The EMM solution supports lock task mode pinning on dedicated kiosk devices.

Persistent preferred activity management

The EMM solution supports default app selections for specific actions.

Keyguard feature management

The EMM solution supports keyguard feature management before device unlock.

Advanced keyguard feature management

The EMM solution supports advanced keyguard feature controls on fully managed devices.

Remote debugging

The EMM solution supports remote debugging collections with user consent.

MAC address retrieval

The EMM solution supports remote MAC address retrieval.

Advanced lock task mode management

The EMM solution supports custom system UI visibility controls during app-pinning.

Advanced system update policy

The EMM solution supports system update freeze windows during critical periods.

Work profile policy transparency management

The EMM solution supports custom IT instructions if a Work Profile is deleted.

Connected app support

The EMM solution supports connected app integrations across profiles.

Maximum time without work data

The EMM solution supports time limit configurations for pausing the Work Profile.