What's included
ChromeOS fleet
Every enrolled ChromeOS device across your customers in one inventory — serial, model, OS version, and sync state. Device actions run from the same list, each behind an explicit confirmation.
Mobile devices
Approve, block, or wipe mobile devices without switching into each customer's Admin console. Every action asks for explicit confirmation before it runs — nothing fires on a misclick.
Workstations
An endpoint inventory that merges Google's mobile-device and Cloud Identity endpoint records into one workstation view, deduplicated so the same machine never appears twice.
Managed Chrome browsers
A read-only inventory of each customer's Chrome Browser Cloud Management fleet — enrolled browsers and the machines they run on, alongside the rest of the device estate.
Cross-tenant device search
Find a device without knowing which customer owns it: at the all-tenants scope the device pages aggregate every fleet, and each row is tagged with its owning tenant.
Security actions audited
Wipe and deprovision-class actions are recorded in the per-tenant audit log — a tamper-evident, hash-chained record of who did what, where, and when.
Some device classes depend on the customer's Google Workspace edition — Chrome browser management and Cloud Identity endpoint data are not available everywhere. Where a source is unavailable, the page stays visible with the gap named, rather than hiding the feature.
Run every fleet from one screen
Device data is read live from Google's APIs the moment a customer is connected — nothing stored at rest, no agent to deploy.