Device approval
Admin approval for the device is a security measure that can help protect sensitive information and prevent unauthorized access to the work account data When users add a work or school account to their device, they see a message that an admin needs to review and approve the device. Once you authorize a device, the user can access their work account data on the device.
By implementing admin approval for device access, organizations can ensure that only authorized personnel have access to work account data, reducing the risk of data breaches or other security incidents. It also helps to enforce security policies and maintain compliance with industry regulations and standards.
Note: This Device policy is available only in Business Plus; Enterprise; Education Fundamentals, Education Standard, Education Plus; G Suite Basic, and G Suite Business;
Steps to turn on device approval:
- Log in to the Google Admin Console using your administrator credentials.
3. Select Security >> Device approvals.
4. We can be able to apply this setting to a particular organization Unit also.
5. Check the Require admin approval box. We can also add an email address to get notifications when users enroll their devices and require approval before they can access their work data.
NOTE: Instead of an individual email address, we can use a group email address that includes all administrators who can approve devices.
6. Click Save.Some company-owned devices are automatically approved and aren't blocked when you require admin approval:
- Company-owned devices that are registered by serial number are automatically approved, except Android devices with a work profile.
- If you limit access to Google Drive for desktop only to approved devices, any company-owned device that has Google Drive for desktop installed will be automatically authorized.
For further reference please refer to the article