Enroll Android with a QR code
One code carries one management mode and one policy. Every phone that scans that code receives the same mode.
Settings → Android → Enrollment, or Enroll device → Android.
Click Open Android service if you see this warning. Do Connect Google first.
Pick the mode before you create the code
| Management mode row | Which phone | After enrollment |
|---|---|---|
| Fully managed (company-owned) | A company phone an employee uses as a phone. | The whole device belongs to the organization. |
| Work profile allowed (BYOD / COPE) | A personal phone where only the work part is managed, or a company phone with a work profile. | A work profile. Lost Mode is not available on this profile. |
| Dedicated / kiosk (userless) | A single-purpose device, not tied to a personal account. | The same command class as a company phone. Kiosk does not turn itself on — it needs a kiosk policy. |
Create the code
Under Create enrollment token, choose Management mode.
Policy defaults to Enterprise default. If the phone should receive a different policy the moment it enrolls, choose a policy that is Active. Create policies on Policies.
Valid for is a number of hours, from 1 to 720. Then click Create token.
The Enrollment QR code block shows the code. The Valid label means it is still in date. Expired means create a new code. Enrollment link is the link for the same code, for a device that has already finished setup.
On the phone
A phone that was managed before: wipe it first. A new phone: on the setup screen, tap six times to open the scanner, then scan the code.
A phone already in everyday use: open the Enrollment link on that phone. Do not scan the code during setup.
Wait for the phone to appear under Devices. While Google is still installing, the phone already counts as enrolled. On the device page, Applied policy is the policy Google is enforcing. AMAPI policy is Compliant or Non-compliant — whether the phone matches that policy. It is not the name of a second policy.
Common questions
- The scan finished, but Devices does not show the phone?
- Wait for Google to report it, or go to Service settings and click Sync devices now if Live updates is Off.
- I want to change a work profile into a company-owned phone?
- You cannot change it on a phone already in use. Wipe it or remove management, then create a Fully managed code.
- I wiped the phone and scanned again. Does the list gain a second row?
- No. The same phone updates the existing Devices row, and the command history stays on that row. A wipe does not remove the row. For a new row with an empty history: Delete from MDM first, then enroll.
- Can a company phone enroll itself the way ADE does?
- Not yet. Android enrolls with a QR code or the Enrollment link.