Compare Google endpoint management feature sets

See also the feature availability for Cloud Identity editions

The device security and management features available in Google endpoint management depend on the Google Workspace edition your organization has. License requirements are by user, not by device. Any users who want to sign in to a managed device must have a supported license for a feature to apply.

Fundamental endpoint management

Supported editions for these features (except as noted): Frontline Starter and Frontline Standard; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, Education Plus, and Endpoint Education Upgrade; Essentials, Enterprise Essentials, and Enterprise Essentials Plus; G Suite Basic and G Suite Business; Cloud Identity Free and Cloud Identity Premium. Compare your edition

The following features are available by default.

Security settings	Device management	App management	Device details
Basic passcode enforcement (mobile) Google Credential Provider for Windows	Basic mobile device management Fundamental management for computers Endpoint verification Drive for desktop Block devices Remote account wipe (mobile) Remote sign-out (computers)	Public and private Android app curation	Basic mobile device and endpoint details Device reports Company-owned inventory: computers

 

Advanced endpoint management

Supported editions for these features (except as noted): Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; G Suite Basic and G Suite Business. Compare your edition

The following features require a Google Workspace admin to enable advanced mobile management. Advanced endpoint management also includes all the features listed for Fundamental endpoint management.

Security settings	Device management	App management	Device details
Standard and strong passcode enforcement Mobile device security policies Android work profiles Network management (mobile)	Advanced mobile management Zero-touch enrollment for Android devices Approve devices Remote device wipe Windows device management*	Public iOS app management Private Android web apps Selectively distribute mobile apps Android app settings	Advanced mobile device reports

^*Not available for G Suite Basic or G Suite Business

Enterprise endpoint management

Supported editions for these features (except as noted): Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade. Compare your edition

The following features require an admin to enable advanced mobile management. Enterprise endpoint management also includes all the features listed for Fundamental and Advanced endpoint management.

Security settings	Device management	App management	Device details
iOS data protection Mobile device certificates Context-Aware Access	Company-owned inventory: mobile devices* Company owned iOS devices Management rules BeyondCorp Alliance partner integrations	Private iOS app management	Devices audit log* Report inactive company owned devices*

* Also available for Business Plus and G Suite Business.