Manage system apps on visitor-endemic mobile devices

As an ambassador, you can block user access to some organisation apps on managed mobile devices. System apps are preinstalled apps such every bit Clock and Calculator for Android, or FaceTime and iTunes Store for iOS. Many of these apps can't exist uninstalled, only you lot can allow or cake access to them.

Block or allow Android organization apps

This feature is bachelor with Cloud Identity Premium edition. Compare editions

You can cake all Android arrangement apps, allow some, or specify a custom list. When you lot block arrangement apps, the apps aren't uninstalled, just users and other apps can't admission them.

Note:

  • Some system apps are critical to device function and can't be blocked. Review the list.
  • This setting applies only when a device is offset enrolled. If yous add or remove system apps to the allow or disable lists, these changes aren't applied to devices already enrolled in advanced mobile management.

Before you begin: To apply the setting for certain users, put their accounts in an organizational unit.

  2. From the Admin console Home page, become to Devices.

  3. To employ the setting to everyone, get out the meridian organizational unit selected. Otherwise, select a child organizational unit.
  4. On the left, click Mobile & endpoints and then Settings and then Android settings.
  5. Click Apps and information sharing and then System apps.
  6. Choose an option:
    • To make all system apps available, select Allow all. With this option, you tin can still block specific system apps. Employ this selection if you want to make most system apps bachelor.
    • To remove access to all system apps, select Disable all. With this choice, all but critical arrangement apps are blocked. If you want to allow specific apps, choose the next option.
      Notation: This setting doesn't remove access to Android apps you add to the Spider web and mobile apps list. For details, run across Add together mobile apps to your managed app list.
    • To remove access to virtually system apps, select Allow certain system apps. Then, to specify immune system apps, enter the app package name of the app you desire to allow and click Allow app. If you don't know the package name of an app, bank check the mobile device details in your Admin panel. If the app isn't listed, contact the device manufacturer or reseller.
  7. To override the preceding options and block specific organization apps, netherDisable sure organization apps, enter the app package name and then click Disable app. The apps you lot add here are blocked.
  8. Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit'south settings.

The alter typically takes consequence in minutes, just information technology might have upwardly to 24 hours to be reflected beyond all of your users' devices.

Block or allow iOS system apps (company-owned devices but)

This feature is bachelor with Deject Identity Premium edition. Compare editions

For supervised company-owned iOS devices, you lot can block user admission to many system apps, such every bit FaceTime, iMessage, and AirDrop. For details, see Apply settings for iOS devices.

Critical Android system apps

Some organisation apps are critical for a device to part correctly. Y'all tin can't disallow these critical system apps:

  • android
  • com.android.bluetooth
  • com.android.contacts
  • com.android.keychain
  • com.android.keyguard
  • com.android.launcher
  • com.android.nfc
  • com.android.telephone
  • com.android.providers.downloads
  • com.android.settings
  • com.android.systemui
  • com.android.vending
  • com.google.android.apps.enterprise.dmagent
  • com.google.android.deskclock
  • com.google.android.dialer
  • com.google.android.gms
  • com.google.android.GoogleCamera
  • com.google.android.googlequicksearchbox
  • com.google.android.gsf
  • com.google.android.gsf.login
  • com.google.android.inputmethod.latin
  • com.google.android.nfcprovision
  • com.google.android.setupwizard
  • com.google.android.webview
  • com.samsung.android.contacts
  • com.samsung.android.telephone


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other visitor and product names are trademarks of the companies with which they are associated.

Was this helpful?

How can we ameliorate it?