Require a managed Google Account on Android devices

Admins can now require company-owned Android devices with a work profile to be signed in with a managed Google Account, ensuring end users have full access to the organization's Google Workspace services.

The Android Restrictions Library Item includes a new managed Google Account setting with two modes: allow any managed Google Account from the organization's managed Google domain, or require a specific account entered as a static email address or a global variable such as $EMAIL.

Devices without a qualifying account prompt the end user to sign in, upgrading the device from its anonymous managed Google Play account. The Library Item exposes the compliance actions that block work apps or wipe the device when no qualifying account is signed in after a specified period.

For more details, see Configure the Android Restrictions Library Item.