Factory Reset Protection (FRP) is a security method that was designed to make sure someone cannot wipe and factory reset your device if it is lost or stolen. You have to be signed in with the original Google account of the device (the one you used to set it up) in order to factory reset it. This presents a problem for the admin when a device is returned and a user has enabled FRP. When the device is returned to the organization (user leaves the company for example), the admin is unable to set up the device again.

The Enterprise Factory Reset Protection profile allows you to create Google userIDs that are to set up the device or complete reset. This Google User ID allows you to reset the device without the original Google account. Obtain your Google userID using the People:get API to configure the profile.

To configure application control settings:

  1. Navigate to Devices > Profiles & Resources > Profiles > Add > Add Profile > Android

  2. Configure the General profile settings as appropriate.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  3. Select the Enterprise Factory Reset Protection payload.
  4. Configure the following settings to set the level of control for your application deployments:

    Setting Description
    Google user IDs Enter the Google user ID obtained from Google People:get.
  1. Select Save & Publish.