Intune BYOD & google mail. Restrict users from using personal app

Question

Hi all,

My company uses google mail services (as a part of google workspace) and we want to manage employee's Android Enterprise devices via Intune.

When I enroll a BYOD android with Intune I can use my google workspace account both in private and corporate profile.

How to deny using corporate gmail account in private Android profile with the help of Intune? All recommendations I have seen were about Exchange, not google or others.

Answer 1

To my knowledge, there is no way to accomplish this as the built-in Google Mail app has no configuration or policies that can be applied to it to restrict this and since the mail service does not use AAD, conditional access cannot be used either.

Asking in Google Android forum may get a different answer on whether or not the mail app has any configuration possibilities. If it does and assuming they are standard app config policies, then Intune should be able to push them out, but as noted, I don't think there are.

Answer 2

Agree with Jason, what Intune can do with Email setting is only add and remove accounts, factory reset protection emails or something as follows:

Android Enterprise device settings to configure email, authentication, and synchronization in Intune
Android Enterprise device settings to allow or restrict features using Intune

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.