Google adds Android Enterprise controls to restrict AI automation for IT admins

Google announced new Android Enterprise policies on Sept. 23, 2026, that allow IT administrators to control AI automation on managed devices. The update introduces capabilities to configure, restrict, or disable AI agents, aiming to help organizations adopt these tools while maintaining security over corporate data.

According to TechRepublic, these controls are designed to address the growing complexity of AI agents on Android devices. As Gemini gains the ability to perform complex tasks across apps, such as searching emails or checking calendars, the potential for accessing sensitive work data has increased, making administrative oversight a priority for businesses.

Implementation details and limitations

Google stated that Android Enterprise policies will give administrators control over AI automation across their device fleets. However, the company has not specified which devices or management platforms currently support these controls. TechRepublic reports that Google has also not published the specific policy settings or management commands required to implement these restrictions.

It remains unclear whether administrators can restrict individual agents, particular actions, or specific data sources. Because the technical details are not yet public, IT teams are advised to confirm available settings with Google or their enterprise mobility management provider before integrating these controls into their deployment plans.

Work-profile protections

A key component of the announcement is the reinforcement of work-profile separation. Google says built-in safeguards now prevent personal AI agents from accessing corporate apps and data within an Android work profile. This separation is critical for organizations that allow employees to use personal phones for work, as it keeps business applications and information distinct from personal activity on the same device.

TechRepublic notes that these safeguards help balance AI automation with enterprise security. By isolating work data, organizations can permit the use of AI features on personal devices without exposing sensitive corporate information to personal AI agents or apps that might otherwise access it.

What should you do?

IT administrators should review their current Android Enterprise management policies to understand how AI automation is currently handled. Since Google has not released specific configuration details yet, teams should monitor official channels for updates on supported devices and management commands. Organizations allowing BYOD should verify that work-profile separation is correctly configured to protect corporate data from personal AI agents.

What to do and how to stay safe: Google

• Review current Android Enterprise management policies to identify gaps in AI automation controls.
• Contact your enterprise mobility management provider to confirm support for the new AI restriction features.
• Verify that work-profile separation is correctly configured on all managed devices to isolate corporate data.
• Monitor official Google channels for updates on specific policy settings and supported device models.

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

When did Google announce the new Android Enterprise AI controls?

Google announced the new controls on Sept. 23, 2026, according to TechRepublic.

Can IT admins disable AI automation on managed devices?

Yes, Google says administrators can configure, restrict, or disable AI automation using Android Enterprise policies.

Do personal AI agents have access to work data?

No, Google says built-in safeguards prevent personal AI agents from accessing corporate apps and data within an Android work profile.