What’s changing
We’re expanding mobile device enrollment options for iOS devices to include user enrollment. User enrollment separates work and personal data on iOS devices, giving admins control over Workspace data on the device while users retain privacy over their personal data.
Additionally, admins can use the Apple Volume Purchase Program (VPP) to purchase and disturbed apps in bulk to user-enrolled iOS devices in their organization.
Who’s impacted
Admins and end users
Why you’d use it
Managing how Workspace data is accessed is a cornerstone of security. The new user enrollment option ensures end users can keep their personal data separate from their work data, while admins can ensure their users are using and accessing apps appropriately.
Using the VPP, admins can efficiently curate a suite of work-related apps—both free and paid—for their team. This streamlined process not only simplifies the deployment of essential business apps but also ensures that employees have access to the right apps they need to be productive and efficient, all within the secure perimeter of our MDM platform.
Getting started
Admins:
User enrollment:Use our Help Center to learn more about separating work and personal data on iOS devices.
Volume Purchasing Program:To begin, admins need to access Apple’s volume purchasing program with their Business Manager credentials. Through the VPP, admins can purchase app licenses that can be distributed to their employee’s devices in bulk.
From the Apple Business Manager, you can purchase app licenses in bulk.
Once purchased, admins will need to download the content token, which needs to be uploaded into the Admin console.
VPP tokens can be uploaded in the Admin console at Devices > Mobile and endpoints > iOS settings > Apple Volume Purchase Program (VPP).
For complete instructions, use this Help Center about distributing iOS apps with Apple VPP and applying settings for iOS devices.
End users:
The user enrollment process starts when a user signs-in to an app for the first time or re-signs into an app. They’ll be prompted to begin downloading the configuration profile, which will open in an internet browser with more instructions and information. Once the profile has been downloaded, the user will be directed to their devices settings to complete user enrollment.
Visit our Help Center for more information about how to install the Google Device Policy app and a configuration profile on your device, how your iOS device is managed and getting approved work apps on your iOS device.
Rollout pace
Rapid and Scheduled Release domains: Full rollout (1-3 days for feature visibility) starting on Nov 20, 2023
Availability
Available to Google Workspace Enterprise Plus, Enterprise Standard, Enterprise Essentials, Enterprise Essentials Plus, Frontline Standard, Frontline Starter, Business Plus, Cloud Identity Premium, Education Standard, Education Plus and Nonprofits customers
Resources
Google Workspace Admin Help: Distribute iOS apps with Apple VPPGoogle Workspace Admin Help: Separate work and personal data on iOS devicesGoogle Workspace Admin Help: Apply settings for iOS devicesGoogle Help: Set up Google Workspace on an iOS deviceGoogle Help: Get approved work apps on iOS devicesGoogle Help: How your iOS device is managed