Block installation of unmanaged mobile apps

As an admin, you can prevent users from installing mobile apps that aren't managed. An app is managed when you add it to the Web and mobile apps list.

Note: These settings don't remove or block apps already installed on devices. To prevent app access to Google services, you can use app access control:

1. For individual apps of concern, you can block or limit access .
2. For Google services that you want to hide from any app you don't explicitly trust (by adding to your Web and mobile app list), you can set the service as restricted .

Block unmanaged Android app installation

Supported editions for this feature: Frontline Starter , Frontline Standard , and Frontline Plus ; Business Plus; Enterprise Standard and Enterprise Plus ; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus ; G Suite Basic and G Suite Business; Cloud Identity Premium. Compare your edition

Requires advanced mobile management

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go toMenu  Devices > Mobile and endpoints > Settings > Android .

   Requires having the Services and devices administrator privilege.

3. (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how 
4. Click  Apps and data sharing Available apps.
5. Select  Only allowed apps.
6. Click Save.Or, you might click Overridefor an organizational unit  .

   To later restore the inherited value, click Inherit. 

Changes can take up to 24 hours but typically happen more quickly.  Learn more

Block unmanaged iOS app installation

Supported editions for this feature: Frontline Standard and Frontline Plus ; Enterprise Standard and Enterprise Plus ; Education Standard, Education Plus, and Endpoint Education Upgrade; Cloud Identity Premium. Compare your edition

Supervised company-owned iPhones and iPads only

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go toMenu  Devices > Mobile & endpoints > Settings > iOS .

   Requires having the Services and devices administrator privilege.

3. Click  Apps and services App installation.
4. (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how 
5. Uncheck the  Allow users to install apps box. When unchecked, users can't access the App Store and apps bought on other devices can't download automatically. Users can still download  allowed apps  through the Google Device Policy app.
6. Click Save.Or, you might click Overridefor an organizational unit  .

   To later restore the inherited value, click Inherit. 

Related topics

• Manage mobile apps for your organization
• Control which third-party & internal apps access Google Workspace data