Block installation of unmanaged mobile apps (2024)

As an admin, you can prevent users from installing mobile apps that aren't managed. An app is managed when you add it to the Web and mobile apps list.

Note:These settings don't remove or block apps already installed on devices. To preventapp access to Google services, you can use app access control:

1. For individual apps of concern, you can block or limit access.
2. For Google services that you want to hide from any app you don't explicitly trust (by adding to your Web and mobile app list), you can set the service as restricted.

Block unmanaged Android app installation

Supported editions for this feature: Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; GSuite Basic and GSuite Business; Cloud Identity Premium. Compareyouredition

Requires advanced mobile management

1. Sign in to your GoogleAdminconsole.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to MenuDevicesMobile and endpointsSettingsAndroid.

   See Also

   Google Cloud appHow you're already using the cloud and don't even know it‘Where Does Cloud Storage Really Reside? And Is It Secure?’ (Published 2017)Block installation of unmanaged mobile apps

3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.

4. ClickApps and data sharingAvailable apps.
5. SelectOnly allowed apps.
6. Click Save. If you configured a childorganizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

Changes can take up to 24 hours but typically happen more quickly.Learn more

Block unmanaged iOS app installation

Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Cloud Identity Premium. Compareyouredition

Supervised company-owned iPhones and iPads only

1. Sign in to your GoogleAdminconsole.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to MenuDevicesMobile & endpointsSettingsiOS.

3. ClickApps and servicesApp installation.

4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.

5. Uncheck theAllow users to install appsbox. When unchecked, users can't access the App Store and apps bought on other devices can't download automatically. Users can still downloadallowed appsthrough the Google Device Policy app.

6. Click Save. If you configured a childorganizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

Changes can take up to 24 hours but typically happen more quickly.Learn more

Related topics

• Manage mobile apps for your organization
• Control which third-party & internal apps access Google Workspace data

_{Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companieswith which they are associated.}