Android for Work requirements Mobile devices running Android 5.0 and higher. A solution from aGoogle-approved enterprise mobility management (EMM) provider.

What is Android for Work?Android for Work is an enterprise mobility management (EMM) platform that lets companies deliver a secure, productive, and rich mobile experience to their employees. Solutions built on Android for Work include these benefits: Security and Data SeparationDevices in Android for Work deployments use hardware-based encryption and admin-managed policies to ensure business data stays separate and safe from malware while personal information stays private. Support for both employee-owned and company-provisioned devicesAndroid for Work users can safely use a single Android device for business and personal use, and companies can provision devices they own or configure work profiles on employee-owned devices. Remote ManagementAdmins can remotely control all work-related policies, applications, and data, and can wipe them from a device without touching the device owners personal data. Seamless User ExperienceAndroid for Work delivers a consistent experience across all devices, and lets users intuitively and effortlessly switch between work and personal apps. Business apps appear with personal apps in the launcher and recent apps list, but business app icons have badges that clearly distinguish them. Simplified Application DeploymentAdmins can use Google Play to find, whitelist, and deploy business apps to Android for Work devices. They can even use Google Play to deploy internal applications and resources. (See thePlay for Work help center.)Google provides an infrastructure that third-party enterprise mobility management (EMM) providers use to build Android for Work solutions. EMM providers are companies that offer advanced IT solutions for mobile device management (MDM), mobile application management, mobile expense management, and more. Companies must choose a third-party EMM provider to provide the tools to administer their Android for Work deployment.Android for Work setup overviewA companys IT admin must set up Android for Work before its employees can start using it. The setup differs depending on whether the company already used its domain name to sign up for another Google service.Android for Work setup for companies with a Google for Work service other than Google AppsAt this time, Google Apps for Work customers can't sign up for Android for Work with their Google Apps for Work domain. This functionality will be available soon.If the company already used its domain name to sign up for a Google service other than Google Apps for Work, such as Google Chrome for Work or Google Maps Coordinate, the IT admin who manages that Google service for the company must enable Android for Work from the Google Admin console as follows:1. Sign into the Admin console atadmin.google.comas a super administrator for the companys domain.Only super administrators, not delegated administrators, can enable Android for Work.2. In the sidebar underCommon Tasks, click Get more apps and services.3. SelectAndroid for Work and agree to its terms of service.4. ClickSecurity > Android for Work Settings > Generate token. The page displays an EMM tokena string of characters that EMM providers can use to connect orbindtheir Android for Work solution to the Google Account. The page also links to alist of approved vendorswho offer Android for Work solutions. Choose an EMM provider from this list, and contact them to find out how to share your companys EMM token with them.Companies that want to switch EMM providers must contact their current EMM provider and ask them to disconnect orunbindtheir Android for Work solution from the companys Google account. They must also generate a new token for the new provider after unbinding.After enabling an EMM providers Android for Work solution, the provider points the company's admin to its device policy controller (DPC) app on the Google Play Store. The company's mobile users must download the app to use their devices with the EMM providers Android for Work solution.The EMM provider also gives the company's admin access to the EMM providers mobile management tools to remotely administer the company's devices. In most cases, these tools let admins provision users, configure single sign-on, and more, but if they don't, some of these features are available in the Admin console. For more information, see these sections in the Google Apps for Work Administrator Help Center: Add users Security and privacyOnly a subset of the features these articles describe are available in your Admin console. If a feature doesn't appear where it's expected, it's probably only available for Google Apps for Work customers.

Android for Work setup for companies without any Google for Work servicesIf the company hasnt used its domain name to sign up for another Google service, an IT admin can sign the company up for Android for Work athttp://google.com/work/android/partners.Admins who are unsure if their company already has a Google service should still try to sign up for Android for Work anyway. The sign-up process indicates if the companys domain name is in use for another Google service. If this happens, the sign-up process stops, and the companys current Google admin mustenable Android for Work from the Admin console.The Android for Work sign up process has a domain verification step that requires admins to prove they have admin rights to their companys Intranet domain. For information on domains, seeWhat is a domain?in the Google for Work Help Center.When admins sign up for Android for Work, the on-screen instructions prompt them to:1. Create a Google admin account for the companys domain.2. Verify they have access to the companys Internet domain.3. Connect with an enterprise mobility management (EMM) provider. This step displays an EMM tokena string of characters that EMM providers can use to connect orbindtheir Android for Work solution to the Google Account. The page also links to alist of approved vendorswho offer Android for Work solutions. Choose an EMM provider from this list, and contact them to find out how to share your companys EMM token with them.Admins who cant finish the sign-up process after completing the first step can complete the remaining steps in the Google Admin console. The Admin console is a Web interface for managing a companys Google account, and has different features depending on the Google services the company uses. Admins can sign into the Admin console at admin.google.com with the username and password they used when creating the companys Google admin account.To complete domain verification from within the Admin console, seeVerify domain ownership in the Google for Work help center.To generate a new EMM token from within the Admin console or view an existing token, clickSecurity > Android for Work Settings. The page shows a token if one was generated in the last 30 days, or a button to generate a new token. The page also links to alist of approved vendorswho offer Android for Work solutions. After creating a Google account, admins have 14 days to verify domain ownership; otherwise, the Google account expires and the admins have to restart the sign-up process from the beginning. After generating an EMM token, admins have 30 days to share it with an EMM; otherwise, the token expires and an admin must generate a new one. Companies that want to switch EMM providers must contact their current EMM provider and ask them to disconnect orunbindtheir Android for Work solution from the companys Google account.After enabling an EMM providers Android for Work solution, IT admins use mobile management tools from the EMM provider to remotely administer devices, including provisioning users, setting policies, and so forth. EMM providers typically publish a device policy controller (DPC) app to the Google Play Store, and require users to download the app to use their devices with the EMM providers Android for Work solution.