Google Workspace Changes

Admins can now enforce password policies specifically for Android work profiles.

G Suite admins can now use Google Mobile Management to mandate password policies that apply exclusively to apps within Android work profiles on devices running Android 7.0 or higher. This allows organizations to secure corporate data with specific password requirements while allowing users to maintain their own security preferences for personal apps on the same device.

Google Mobile Management now supports managed configurations for Android apps

Google Mobile Management now allows IT admins to remotely set up "managed configurations" for Android apps. This feature enables admins to deploy complex settings, such as automatic VPN setup, directly to users' devices, reducing manual configuration steps and saving administrative time.

G Suite admins can now manage Android app runtime permissions.

G Suite admins using Google Mobile Management can now control runtime permissions for Android apps on work profiles or company-owned devices. Admins can set a global policy to automatically allow, deny, or prompt users for permissions, and can also configure specific runtime permissions for individual whitelisted apps, which takes priority over the global setting.

Private Android apps can now be published to up to 20 organizations.

Businesses using Google Mobile Management and other Enterprise Mobility Management (EMM) providers can now publish a single private Android app to up to 20 different organizations. This update allows developers to publish apps to domains other than their own, removes the requirement for developers to be admins of the target organizations, and simplifies the delegation of app publishing to third-party developers. Security is maintained as developers must have the target organization's Organization ID and an admin must approve the app.

Updated setup flow for company-owned Android devices to improve ownership assignment.

Starting February 12th, 2018, the setup flow for company-owned Android devices (running Android 6.0+) will be updated to encourage correct ownership assignment. Instead of requiring users to check a box to assign ownership to their organization, users will be asked if they own the device personally. Unless they explicitly state personal ownership, the device will be auto-assigned to the organization, provided the G Suite account is added before any personal account.

Prevent corporate data syncing on jailbroken iOS devices.

Google Mobile Management now allows G Suite admins to protect organization data by preventing users from syncing corporate data on jailbroken iOS devices. This feature can be enabled in the Admin console under Device Management > Advanced Settings > Security, provided that Advanced Mobile Management for iOS is enabled and users have the Google Device Policy app installed to regularly check the device status.