Skip to content
  • There are no suggestions because the search field is empty.

How to Manage User Devices in gPanel

Monitor and control connected user devices from your Google Workspace environment in gPanel for improved security and compliance.

Contents

Device Actions in gPanel

Approve

Block

Wipe Device

Wipe Account

Delete

The Devices section allows you to monitor the specific user's device activity and will list any current devices for this user.  

  1. Select the user from your user list by clicking on the user.
  2. Tap the Mobile Devices Tab
  3. Click on Devices from the menu of User Management options.
Mobile-Device

Device Actions in gPanel

Approve

  • Description: This action officially grants a device permission to access and sync corporate data and apps from the Google Workspace domain.
  • When used: It is used when a device is pending approval (which is the default status if you require admin approval). It tags the device as trusted, which is often a requirement for access policies.

Block

  • Description: This immediately revokes a device's access to Google Workspace data and apps. The user is signed out of all Google Workspace mobile apps on that device.
  • When used: This is used to temporarily secure data on a device that is lost or has violated policy, or to prevent a device from syncing data. The corporate data remains on the device, but the user cannot sign back in or sync until the device is unblocked.

Remote Wipe (or Wipe Device)

  • Description: This is the most extreme action, performing a factory reset of the entire mobile device. All data—both work-related and personal—is removed, and the device is restored to its original factory settings.
  • When used: This is primarily used when a device is permanently lost or stolen, or when a company-owned device is being decommissioned or reassigned, to ensure no sensitive corporate data remains accessible.

Remote Account Wipe (or Wipe Account)

  • Description: This is a selective wipe that removes only the user's work/school account and all associated corporate data and apps from the device. It leaves the user's personal data, apps, and files untouched.
  • When used: This is the standard action for a Bring Your Own Device (BYOD) scenario when an employee leaves the organization or stops using their personal device for work. It protects company data without deleting the employee's personal photos, messages, or apps.

Delete

  • Description: This action removes the device record from the gPanel inventory of managed devices. In most cases, the device can no longer sync work data, and the user must sign in again to re-add the device.
  • When used: This is typically used to clean up the devices list. Crucially, deleting a device does not remove work data (except for enrolled iOS devices). If the goal is data removal, a Wipe action must be performed instead.