Android Enterprise Mobility Management (EMM) enhances control over your organisation's Android devices, providing comprehensive device management and the ability to silently install or remove applications.
Preparing Your Organisation for EMM
To set up Android Enterprise using Google Accounts, your organisation must meet the following requirements:
- Managed Google Domain: Each domain can only be linked to one EMM console, and the organisation must complete a verification process to prove domain ownership.
- Existing Google Workspace Infrastructure: Organisations already utilising Google Workspace can leverage existing domains and user identities. Google Workspace accounts automatically include enterprise IDs, with employees managed via Google Accounts.
Setup Instructions
Access Mobile Guardian Dashboard:
- Sign in to the Mobile Guardian business dashboard.
- Click Settings in the left panel and select Android Settings.
- Click Google Workspace Account Enrollment.
Sign In to Google Admin Console:
- In a new tab, sign in to the Google Admin Console admin.google.com as a super administrator.
Configure Third-Party Integrations:
- Navigate to Devices > Mobile & endpoints > Settings > Third-Party integrations.
- Select the target Organizational Unit (OU) for EMM deployment.
- Check the box labelled Enable third-party Android mobile management.
- Select Add EMM provider or Manage EMM providers.
Generate Authentication Token:
- Copy the existing token, or click Generate Token to create and copy a new one.
If Android Enterprise is already configured, you cannot view or generate a new token. Ensure the correct EMM provider is selected.
Update Mobile Guardian Dashboard:
- Enter the Google domain admin email address used for the Admin Console.
- Paste the authentication token generated in the previous step.
Finalise Settings and Binding:
- Save the Android EMM settings.
Confirm that the Enterprise ID shown on the Mobile Guardian dashboard matches the ID displayed in the Google Workspace EMM Third-Party Integrations window (refresh the browser if it does not appear immediately).
- Select the correct Enterprise ID from the dropdown menu and click Save or Override to bind Mobile Guardian to your Google Workspace Organisational Unit.
Deployment & Configuration
Upon successful setup, you will be redirected to the Mobile Guardian settings page displaying your enterprise profile details. From here, you can manage global policies for corporate Android devices, including default app runtime permissions and system update schedules.
Corporate-Owned Single-Use (COSU) Mode
For dedicated business use cases, you can lock fully managed devices into COSU (kiosk) mode. This restricts employee access exclusively to the Mobile Guardian interface and approved corporate applications configured in the Mobile Guardian Launcher or the My Catalogue tab on the device.
Potential Setup Blockers
Addressing these common configuration conflicts prior to setup will prevent enrollment errors:
- Universal Settings Conflict: Ensure Universal Management is disabled in the Google Workspace Console under Devices > Mobile & endpoints > Settings > Universal settings > General.
- Existing EMM Providers: Verify that no other EMM or MDM providers (including Google Mobile Management) are currently active for your Organisational Units. Any existing provider configurations must be removed before proceeding.