A set of APIs and other tools provided by Google for developers to build enterprise management solutions for Android devices.
bring your own device (BYOD)
A personally owned device that an employee also uses for work. Work profiles, which separate work apps from personal apps, are the recommended deployment method for BYOD devices. For more information, see Employee-owned devices.
Formerly known as corp-liable device
A device owned and fully managed by an employee's organization. Company-owned devices can be set up exclusively for work use (fully managed), or to allow both work and personal use (fully managed with a work profile). For more information, see Company-owned devices for knowledge workers.
corporate-owned, personally enabled (COPE)
Deprecated. See fully managed device with a work profile.
Deprecated. See company-owned device.
corporate-owned, single use (COSU)
Deprecated. See dedicated device.
Formerly known as corporate-owned, single use (COSU)
A subset of company-owned devices that are locked down a limited set of apps to serve a dedicated purpose, such as a check-in kiosk or digital signage. For more information, see Company-owned devices for dedicated use.
A mode of operation that supports legacy deployments of pre 5.0 Android devices, and allows the EMM's DPC limited control of a device. Device admin will be deprecated from 2019. For more details, see Device admin deprecation.
The process of setting up management on a device.
device owner (DO)
Compare to profile owner
The DPC installed on fully managed and dedicated devices is referred to as the device owner.
device policy controller (DPC)
An app that controls local device policies and system applications on devices.
Enterprise mobility management (EMM)
An enterprise mobility management solution provider. EMMs provide a combination of MDM and MAM features for customers (enterprises or other organizations) to manage their mobile devices.
An application created by an EMM for IT admins to manage mobile devices and apps. EMM partners are responsible for maintaining and deploying an EMM console. For more information, see Integrate Android into your EMM solution.
An EMM that has followed the steps to release an Android EMM solution and has passed product review.
A token used to bind an EMM's solution to a customer's existing Google-managed domain. For details, see Google domain-based enterprise enrollment.
enterprise service account (ESA)
An account used to manage Play EMM API resources. For details, see Service accounts.
fully managed device
A device that is entirely managed by the user's organization, intended for company-owned devices that are used exclusively for work purposes. For more information, see Company-owned devices for knowledge workers.
fully managed device with a work profile
A fully managed device that is also provisioned with a work profile, intended for company-owned devices that are used for both work and personal purposes. For more information, see Company-owned devices for knowledge workers.
Google Accounts enterprise
Compare to managed Google Play Accounts enterprise
A type of enterprise that is linked to an existing managed Google domain. With this type of enterprise, end users access managed Google Play with their existing managed Google Accounts. For more information, see Customer onboarding.
In Android, the system used to process payments for apps. IT admins use Google Payments to purchase apps in bulk, and users use Google Payments to purchase apps using in-app billing.
G Suite account
Formerly known as Google Apps account
An account in a regular, customer-managed G Suite domain that is claimed and managed in the Google Admin console.
The process of setting up users' managed accounts on devices and synchronizing user information across databases.
mobile application management (MAM)
A set of features for managing mobile apps in an enterprise environment.
Enables IT admins to remotely configure apps in situations where the app developer provides a managed configuration schema.
managed Google Account
A Google Account that's managed by a managed Google domain.
managed Google domain
A domain managed by an Android Enterprise solution. This is different from a G Suite domain, which is a regular, customer-managed Google domain that's claimed and managed in the Google Admin console.
managed Google domain console
Google-provided console that an IT admin uses to generate an EMM token. In some cases, the admin also uses this console to manage user accounts associated with the domain. (G Suite and Cloud Identity customers use the Google Admin console for these tasks).
managed Google domain setup
The initial process your customer organization goes through to claim a managed Google domain, which you then bind to your Android Enterprise solution. For details, see Google Accounts.
managed Google Play
Formerly known as Google Play for Work
Content marketplace for Android enterprise apps. Admins use managed Google Play to purchase and manage apps. For more about managed Google Play, see the managed Google Play Help Center.
managed Google Play Account
Formerly known as Android for Work Account
An account that gives a user access to managed Google Play and apps whitelisted for them by their IT admin.
managed Google Play Accounts enterprise
Compare to Google Accounts enterprise
A type of enterprise that isn't linked to an existing managed Google domain. With this type of enterprise, end users access managed Google Play with managed Google Play Accounts, which are provisioned for them by their organization's EMM provider. For more information, see Customer onboarding.
See work profile
The term managed profile is used only in Android Open Source Project documentation and code, where it refers to the generic functionality of a managed corporate profile associated with the primary user account on an Android device.
master service account (MSA)
An account owned by the EMM and used to enroll customers. For details, see Service accounts.
mobile device management (MDM)
A set of features for managing device policies in an enterprise environment.
Open standard for authorization. You can use OAuth 2.0 with a service account to call Google APIs on behalf of an application instead of using credentials that belong to an end user.
On devices with a work profile, the area of the device outside the work profile.
Deprecated. See personal profile.
App visible only to selected users of a managed Google domain. For details, see Public, private, and self-hosted apps.
In the context of the Google Play EMM API, usually refers to a supported app in the Google Play store or managed Google Play store.
profile owner (PO)
Compare to device owner
For devices with work profiles, the DPC installed in the work profile is referred to as the profile owner.
On some Android devices, you can set up a secondary user account that has its own profiles. Adding a secondary user is not the same as adding another profile to a device's primary user.
Security Assertion Markup Language (SAML)
An identity-management protocol used in some identity provisioning scenarios.
A set of enterprise features organized by use case. For more information, see release a solution.
Deprecated. See fully managed device.
A self-contained profile on an Android device that isolates work apps and data from personal apps and data. For more details about work profiles, see What is a work profile? in the Help Center.
A method of assigning provisioning details for fully managed and dedicated devices. For more information, see Android zero-touch enrollment.