Android Enterprise hands IT the keys to AI agents

Google is treating AI agents as something a company manages rather than something it switches on. In its Android Enterprise update for 2026, published on 23 September, the company set out six areas of change for work devices, and the first of them is how much authority an IT department gets over automation on the phones it hands out.

AI agents with a leash

Gemini has grown into a tool that carries out multi-step tasks across applications using real-time on-screen context, which means it can work through a calendar, email and browser to find an answer and act on it without the user hopping between apps. On managed devices, that reach is now a policy question. Google says administrators can configure, restrict or disable AI automation across a fleet, and that work profile separation stops a personal agent from getting into corporate apps and data.

That last point is the one that will decide whether any of this gets used. Businesses have spent a decade keeping work and personal data on the same handset but in separate worlds, and an agent that reads the screen sits awkwardly across both. Building the boundary into the agent, rather than asking the agent to respect it, is the only version of this that survives a security review.

Glasses, headsets and the big screen

The XREAL Aura, a pair of wired XR glasses due in the fourth quarter, joins the manageable device list. IT teams will handle it alongside headsets such as the Samsung Galaxy XR and their ordinary phone fleet through the same EMM consoles, which are built on the Android Management API. Google's pitch is heads-up displays, integrated audio and AI assistance for staff who cannot look at a handset while they work.

Supported Android devices will also drive an external monitor, with a keyboard and mouse, into a multi-window desktop that can run separate apps on each screen. Management policies keep applying while the device is tethered, so a docked phone does not become an unmanaged computer. Quick Share picks up an updated tap-to-share path for contacts, media and business documents, again with administrative restrictions and work profile boundaries enforced.

Updates, patches and proof of identity

Unified Update Controls gathers three update channels that used to be handled separately, OEM over-the-air updates, Google Play system updates through Mainline, and Google Play system services, into one system where administrators can set rules for peak hours and change freeze windows. A Feedback API adds rollout telemetry alongside it later this year.

The security list is longer. Attestable Identifiers, due later this year, will let management and security partners verify a device's hardware identity for zero-trust access. Available Security Patch Level gets deterministic reporting so administrators can see exactly which patches a device is eligible for. Apps will have to ask permission before talking to local network devices, with admins able to pre-approve through the Android Management API, and digital certificates will be logged and checked against public ledgers so that a hijacked connection on a standard or kiosk device is easier to spot. Google says these features were highlighted at its Enterprise Summit.

Our opinion

The most interesting thing in this announcement is not any single feature. It is that Google has decided the agent needs a management console, and that virtual glasses now belong in the same fleet view as a work phone. For years the selling point of an assistant was that it did things without asking. Google's enterprise pitch is the opposite, and the company is right to make it: an agent with screen access inside a company is an insider threat with a helpful voice, and the only credible answer is a policy that can switch it off per department.

Read the dates carefully, though. The XREAL Aura is a fourth-quarter arrival, Unified Update Controls and the Feedback API land later this year, and Attestable Identifiers is a promise rather than a shipping feature. What Google has announced is a direction with timetables attached. Businesses that provision hardware on a three-year cycle should treat the AI automation controls as the part that matters today and the rest as a roadmap to hold the company to.