This feature is available with Cloud Identity Free and Cloud Identity Premium editions. Compare editions
As an administrator, you can see details about mobile devices that access your organization’s data through managed user accounts. You can see information about the device (such as device type and operating system), device security, user information, and installed apps.
Find a device
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Devices
Mobile & endpoints
- Click the row of the device you want to view details for.
Tip: If your organization has many mobile devices, use the search bar or click Add a filter to narrow your search. For details, see Find specific devices in the devices list.
Learn about device details
Expand all | Collapse all & go to top
Important: You see only properties that are supported by a device. For more details about company-owned iOS devices, view your company-owned device inventory.
| Property | Description | Management type | Supported platforms |
|---|---|---|---|
| Management level |
Level of mobile management the device is managed with—basic and advanced. |
Basic and advanced | Android iOS |
| Password status | Whether the device has a password. Value is On if a password is set. | Basic and advanced | Android 6.0 Marshmallow and later |
| Compromised status |
Whether the device is rooted or jailbroken—processes that remove restrictions on the device. Possible values: |
Advanced | Android Apple iOS |
| Encryption status |
Whether the device is encrypted. |
Basic and advanced | Android 3.0 Honeycomb and later |
| Camera status | Whether the device’s camera is enabled or disabled. | Advanced | Android iOS |
| First sync |
Date and time the device first synced corporate data. |
Basic and advanced | Android iOS |
| Last sync | The most recent date and time the device synced corporate data. |
Basic and advanced | Android iOS |
| Privilege |
Level of control your organization has over a managed device. Possible values: Device owner—The device is company-owned. It might be owned by your organization, or it might be a user's personal device that they set up as work-only. Your organization has full control of the device. Profile owner—The device has a managed work profile that’s separate from the user's personal space. Only your organization has control of the work profile. Device administrator—The user has a managed account in the personal space on their device. |
Basic and advanced | Android |
| User agent |
Version of the management agent on this device. Examples: Google Apps Device Policy 14.20.00, Android Device Policy 12.47.11.v29 |
Advanced | Android |
| Managed account on owner |
For devices with multiple users (such as tablets). Indicates whether the managed user account is on the device’s primary user profile. Possible values: Yes—Managed account is on the device’s primary user profile. Device privilege is Device owner or Device administrator. No—Managed account is not on the device’s primary user profile. Or, device privilege is Profile owner and the managed account is on the primary profile. |
Advanced | Android |
| ADB status |
USB debugging status of the device. Possible values: Enabled or Disabled. |
Advanced | Android |
| Unknown sources |
Indicates whether the device allows installation of non-Play Store apps from unknown sources. As an administrator, you can enforce a restriction on this setting. For details, see Unknown sources. Possible values: Enabled or Disabled. |
Advanced | Android |
| Developer options |
Indicates if the user can use developer options on their device. As an administrator, you can enforce a restriction on this setting. For details, see Developer options. Possible values: Enabled or Disabled. |
Advanced | Android |
| Verified boot |
Indicates whether the Android verified boot status is green. For details, go to Verified Boot. Possible values: Passed or Failed. |
Basic and advanced | Android |
| CTS profile match |
Indicates if the device passed Compatibility Test Suite (CTS) compliance checks. For details, go to Compatibility Test Suite. Possible values: Yes or No. |
Basic and advanced | Android |
| Has potentially harmful apps |
Whether potentially harmful apps were found on the device. These apps are often called malware. For details, go to Potentially Harmful Applications (PHAs). Possible values: Potentially harmful apps installed on the device, or No potentially harmful apps installed on the device. |
Basic and advanced |
Android |
| Verify apps |
Specifies if the Verify Apps setting is turned on or off. Verify Apps scans apps for threats when they’re installed from sources other than Google Play. It also periodically scans devices for potentially harmful apps. Verify Apps is turned on by default. For devices under advanced management, you can specify whether users can turn it off. For more information, see Apply settings for Android mobile devices. |
Advanced | Android |
| Property | Description | Management type | Supported platforms |
|---|---|---|---|
| Device ID |
ID assigned to the device when it enrolls for device management. Unlike the Device resource ID, the Device ID is not unique. However, it can be used to identify a device along with the device type and user’s email address. If a device enrolls more than once, more than one ID might be assigned to it. Example: 35407fa833a25163 |
Basic and advanced | Android iOS |
| Serial number |
Serial number of the device. Sometimes, you might also see a device's internal serial number. For Android devices with Android 12 or later and a work profile, the value is the enrollment-specific ID. Example: ZX1G428WVV, ce012345cdb67c0b089e |
Advanced | Android iOS |
| Ownership |
Whether the device is company-owned or the user’s personal device. For Android devices with Android 12 or later and a work profile, the value is always User owned, even if the device is added to the company-owned inventory. Possible values: Company owned, User owned |
Basic and advanced | Android iOS |
| Asset tag | Device asset tag assigned by the administrator. |
Advanced | Android (company-owned only) |
| Type | Sync type: Android, iOS, or Google Sync. | Basic and advanced | Android iOS |
| Operating system |
Name of the mobile operating system (OS). For Android devices, if an OS or security update is available but not installed, a Examples: Android 5.1.1, iOS 9.3.2 |
Advanced | Android iOS |
| IMEI |
International Mobile Equipment Identifier (IMEI) of the device. IMEI (GSM) is available on all devices that support SIM cards. The manufacturers provide the IDs, which are guaranteed to be unique. So, you can use them as unique identifiers for the device. IMEI is not available on Wi-Fi-only devices. Note: For Android devices in device admin mode, the user can change the permissions to block this information (the Phone permission is needed). Example: 35 331207 323711 9 |
Advanced | Android 6.0–11 iOS |
| Wi-Fi Mac Address |
Wi-Fi Mac address of the device. Note: The MAC address reported here should be used only for inventory management and is unlikely to be the MAC address used by the device to connect to Wi-Fi networks. |
Advanced |
Android 6.0 Marshmallow and later with Android Device Policy (company-owned or work-only devices only) iOS |
| Brand |
Company that markets the device. Example: Google |
Advanced | Android |
| Manufacturer |
Device manufacturer. Example: LGE |
Advanced | Android |
| Build number |
Build number of the supported device. Example: MTC19V is the build number for Nexus 5X/6P. |
Advanced | Android iOS |
| Kernel version |
Kernel version of the device’s OS. Example: 3.10.40-ge42477a for Android 6.0 |
Advanced | Android |
| Bootloader version |
Program that loads the OS into memory. Example: BHZ11e |
Advanced | Android |
| Hardware |
Type of the device’s hardware. Example: Bullhead |
Advanced | Android |
| Baseband version |
Version of the firmware responsible for the user’s mobile phone signal. Example: angler-03.62 |
Advanced | Android |
| OS security patch |
Date of the last OS security update, in the format YYYY-MM-DD. Example: 2016-08-05 |
Basic and advanced | Android 6.0 and later |
| Work profile |
Android device models that support work profiles. You can add, allow, or disallow work profiles on supported devices. Possible values: Supported or Unsupported. For details, see Add work profiles. |
Advanced | Android |
| Default language | Language displayed on the device. The user sets the language. | Advanced | Android |
| Device resource ID |
Unique identifier for the device. Example: x1y23z7a-123a-456b |
Advanced | Android iOS |
| Property | Description | Supported devices |
|---|---|---|
| Name | User’s name. As the domain administrator, you enter this name when you create the account. | Android iOS |
| Primary email | Email address of the managed user account on the device. | Android iOS |
| Secondary email | An address where the user can be reached outside your domain. | Android iOS |
| Phone number | User’s phone number. | Android iOS |
| Employee ID | Unique identifier for the employee. | Android iOS |
| Manager’s email | Email address of the user’s manager. | Android iOS |
| Department | User’s department. | Android iOS |
| Cost center | User’s cost center. | Android iOS |
Android—You can see all work apps that the user has installed on their Android device. Personal apps aren’t included.
iOS—You can see a list of any apps you added to the Web and mobile apps list that the user installed on their device.
| Property | Description | Supported devices |
|---|---|---|
| App name | Name of the app. | Android iOS |
| Version | Version of the app that’s installed on the device. | Android iOS |
| App ID | Unique identifier for the app. | Android iOS |
| SHA-256 | SHA-256 hash of the application package. | Android |
These values are reported when you Set up third-party partner integrations.
Note: For iOS devices, occasionally the device state might be unavailable. Learn more
| Property | Description | Supported devices |
|---|---|---|
| Service | The name of the BeyondCorp Alliance partner. | All managed devices |
| ID | The ID assigned to the device by the partner. | All managed devices |
| Health | A simple health score (Unspecified, Very Good, Good, Neutral, Poor, or Very Poor) provided by the partner. | All managed devices |
| Managed state | If the device is managed by the partner service. Value can be Managed, Unmanaged, or Unspecified. | All managed devices |
| Compliance state | If the device is compliant with the partner service's requirements. Value can be Compliant, Non-compliant, or Unspecified. | All managed devices |
| Asset tags | Tags assigned to the device by the partner, either automatically or by admin configuration. | All managed devices |
Related topics
- View assigned mobile devices
- See a user’s managed devices (Google Workspace only)
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.