We’re introducing an expanded set of native Apple Mobile Device Management (MDM) settings to Google Endpoint Management, providing administrators with more granular control over how iOS devices are configured and secured. These new settings—spanning categories such as Apps and Services, Device Features, Data Sharing, and Backup & iCloud Sync, etc—allow admins to manage critical device behaviors directly from the Google Workspace Admin console. This update allows organizations to efficiently harden their security posture for both corporate-owned and BYOD iOS devices. With this launch, these settings will become generally available.See below for a detailed list of the new settings by category.Apps and Services – Writing tools, App clips, App installation from web, App installation from alternative marketplaces, Apps to be hidden, Locking apps, In app purchasesSafari – Safari history clearing, Safari private browsingDevice Features – Auto unlock, Call recording, Auto dim, Default browser modification, Personalized advertising, eSIM outgoing transfers, OTA PKI updates, iPhone mirroring, Satellite connection, RCS messaging, Unpaired external boot to recovery, Untrusted TLS prompt, Limit ad tracking, AirPlay outgoing requests pairing password, Preserve eSIM on eraseBackup and iCloud Sync – Enterprise book backupAuthentication – Fingerprint for unlockData Sharing – Managed pasteboardGetting startedAdmins: Visit the Help Center to learn more about these settings.Rollout paceRapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on June 4, 2026AvailabilityAvailable to all Google Workspace customers with Google Endpoint ManagementResourcesGoogle Workspace Admin Help: Settings for iOS devices