To remotely manage Android mobile devices for your users, you’ll need to register an enterprise in JumpCloud’s Android Enterprise Mobility Management (EMM) solution. Android EMM and JumpCloud let IT Admins securely control access to company resources like email, calendar and contacts, and other company apps and data, while keeping personal user data private and secure. You can enroll and manage Android devices through the JumpCloud Admin Portal (and your end users can enroll via the JumpCloud User Portal), and you can also lock, wipe, and reset Android devices. Policies keep your devices secure and in compliance.
JumpCloud supports these types of Android devices:
- Personal devices:
- Personal devices are owned by the employee. You enable user enrollment of a device owned by an employee, and the user enrolls the device via the User Portal. You have full management and control of the apps, data, and settings in the device's work profile, but there is no visibility or access to the device's personal data. This distinct separation gives you control over corporate data and security without compromising employee privacy.
- Company-owned devices:
- Mixed Use - A work profile can enable work and personal use on a company-owned device. Your organization can have full control of the apps, data, and settings in an encrypted work profile, and can enforce policies to control settings for WiFi and block USB file transfers or disallow software apps that apply to a device's personal data. Any personal data on a company-owned device isn’t visible or accessible to your organization.
- Fully Managed - The device is used exclusively for work and you control and manage the entire device. This device does not use a work profile.
- Dedicated - This device is a subset of fully managed devices and is used for simple workflows. You can lock down the usage of the device to a single app or small set of apps, such as ticket printing or inventory management. This device does not use a work profile.
Prerequisites:
- You must have a company email address to register with Google.
Registering Your Org for Android EMM
Follow the instructions in the applicable section below, depending on whether you have an existing Google Admin account.
With an existing Google Admin account
To register your org for Android EMM:
- Log in to the JumpCloud Admin Portal.
- Go to DEVICE MANAGEMENT > MDM.
- On the MDM Home page, select the Google tab.
- Click Begin Registration. A new browser tab opens.
- Under Create Admin Account, enter your Google Admin account email address and click Next.
- On the Add Android Enterprise screen, click Continue to Admin console.
- On Review your payment plan, click CHECKOUT to add Android Enterprise to your org. Note: This is free, and you will not have to submit an actual payment.
- Click PLACE ORDER.
- You're asked if you want to manage your Android Enterprise devices using your enterprise domain. This binds your Google account to your JumpCloud instance. Click Allow.
- When the Google loading screen clears, you are directed back to the JumpCloud Admin Portal and can begin managing Android devices.
Without a Google Admin account
To register your org for Android EMM:
- Log in to the JumpCloud Admin Portal.
- Go to DEVICE MANAGEMENT > MDM.
- On the MDM Home page, select the Google tab.
- Click Begin Registration. A new browser tab opens.
- Under Create Admin Account, enter your Google Admin account email address and click Next.
If you do not have a Google Admin account:
- You can ask your IT Admin to add you to the account for your domain.
- You can sign up using a different domain. If you don’t have one, you can buy a new domain.
- You can use a Managed Google Play account (Gmail account), but there are limitations that Google imposes. Be advised that Google intends to deprecate this option in the future.
- You will receive an email to the address entered above to verify your account. In the email, click Verify email address.
- Once your email has been verified, return to the Google sign-up flow (you may be redirected back automatically) to enter your contact information and communication preferences.
- Create an account password.
- Click Allow and create account to confirm that you want to bind your org to Android Enterprise and create your account on the Google Admin console.
- Once your account is created, you are redirected to the JumpCloud Admin Portal from the loading screen.
- From the Admin Portal, you can verify that the connection between JumpCloud and Google is working by clicking Test Connection. The status should return CONNECTED.
Deleting Your EMM Registration
To delete your Android EMM Registration:
- Log in to the JumpCloud Admin Portal.
- Go to DEVICE MANAGEMENT > MDM.
- Select the Google tab, then click Delete under Android EMM Registration.
- Enter the number that appears in the dialog.
- Click Delete.
Deleting your Android EMM registration permanently removes the association between JumpCloud and Google's registration files. Devices will be unenrolled, policies will be disassociated, and end users will lose access to company-provided Android apps. Remove the registration only if you no longer want to use EMM to manage your Android devices.