Block installation of unmanaged mobile apps

As an admin, you can prevent users from installing mobile apps that aren't managed. An app is managed when you add it to the Web and mobile apps list.

Note:These settings don't remove or block apps already installed on devices. To prevent app access to Google services, you can use app access control:

  1. For individual apps of concern, you can block or limit access.
  2. For Google services that you want to hide from any app you don't explicitly trust (by adding to your Web and mobile app list), you can set the service as restricted.

Block unmanaged Android app installation

Supported editions for this feature: Frontline; Business Plus; Enterprise; Education Fundamentals, Standard, Teaching and Learning Upgrade, and Plus; G Suite Basic and Business; Cloud Identity Premium. Compare your edition

Requires advanced mobile management

  2. From the Admin console Home page, go to Devices.

  3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  4. On the left, click Mobile & endpoints and then Settings and then Android settings.
  5. ClickApps and data sharing and then Available apps.
  6. SelectOnly allowed apps.
  7. Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

Changes typically take effect in minutes, but can take up to 24 hours. For details, go to How changes propagate to Google services.

Block unmanaged iOS app installation

Supported editions for this feature: Enterprise; Education Standard and Plus; Cloud Identity Premium. Compare your edition

Supervised company-owned iPhones and iPads only

  2. From the Admin console Home page, go to Devices.

  3. On the left, click Mobile & endpoints and then Settings and then iOS settings.
  4. ClickApps and services and then App installation.

  5. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.

  6. Uncheck theAllow users to install appsbox. When unchecked, users can't access the App Store and apps bought on other devices can't download automatically. Users can still download allowed apps through the Google Device Policy app.

  7. Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

Related topics

  • Manage mobile apps for your organization
  • Control which third-party & internal apps access Google Workspace data


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?

How can we improve it?