Account
Settings
The Settings page (Dashboard → Settings) summarizes account and license information, and provides actions to manage billing, platform setup (Android Management and Apple Management), and optional directory/token integrations.
License banner (expiring / expired)
When your license is expiring, expired, or terminated, a prominent banner is shown at the top of the page. Depending on your subscription state, it provides either a Manage billing action (Stripe customer portal) or a Buy license action.
When the license is expired, the account becomes limited to device disenrolling only. After the grace period, the account may be canceled and devices can be automatically disenrolled.
Enterprise manager access
The Enterprise manager access card is shown only for enterprises managed by a multi-tenancy account (for example, a managed service provider). It lets you see which manager accounts can operate on your enterprise and control their access.
The card shows:
- The owner of the enterprise. The owner always has access and its access can't be revoked.
- Each manager account of the multi-tenancy account, labeled as Main manager or Sub-account, with its name, username, and access status (Granted, Revoked, or Not granted).
Grant and revoke access
Use Grant to allow a manager account to enter and manage your enterprise, and Revoke to remove that access. Each action asks for confirmation. A manager whose access is revoked can no longer operate on the enterprise, even if it is currently working on it.
- As the enterprise administrator, you can grant or revoke access for any listed manager account.
- The main manager can grant or revoke access for its own sub-accounts, but only while its own access is granted. It can't grant access to itself, and it can't revoke its own access.
Revoking access for the Main manager also revokes access for all of its sub-accounts. When this applies, the confirmation dialog lists the sub-accounts that will lose access.
Account information
The Account Information card shows read-only fields:
- Username
- Enterprise name
- Enterprise id
Change password
If you are not signed in with Google, Apple or Microsoft, the card also shows a Change password action. This opens a dialog to continue with the password change flow.
You can also change your password at any time from the user menu in the top toolbar, using Change password. This is useful for multi-tenancy accounts, which can change their password without entering an enterprise.
If an administrator created your account or reset your password, you sign in with a temporary password and must choose a new password before continuing.
License information
The License Information card shows the current license state and your device limit. It also provides actions to contact sales and to manage billing or buy a license.
- License status: shown as Active or Expired (with an icon badge and tooltip).
- Free trial: shown when the account is currently in trial mode.
- Licensed devices: maximum number of devices allowed by the license. The need more devices? link opens a message to contact support.
- Next scheduled renewal: shown for active subscriptions that renew automatically. Otherwise the card shows the Expiration date.
Android Management
The Android Management card shows Android Management status for your enterprise. If Android Management is not configured yet, the card provides a Setup Android Management action that opens the setup flow.
Configured state
When Android Management is configured, the card can show:
- Management id
- Binding type: identifies whether the enterprise uses a Managed Google Play account or a Managed Google domain.
- Synced with Google Workspace (badge shown when directory sync is active)
- Sync with Google Workspace (shown when directory sync is not configured; opens the instructions panel at the bottom of the page)
Android enterprise binding
Android Management can be associated with either a Managed Google Play account or a Managed Google domain. The Binding type field shows which option is currently associated with your enterprise.
A Managed Google Play account is a lightweight Android Enterprise account. It is suitable for managing Android devices and apps through Cerberus Enterprise, but it is separate from a Google Workspace or Cloud Identity organization. It does not provide the central Google administration experience available with a managed Google domain.
A Managed Google domain associates Android Enterprise with your organization’s Google identity. IT administrators can manage Google products such as Google Workspace, Cloud Identity, and Gemini from the Google Admin console, while continuing to manage Android apps and policies in Cerberus Enterprise. This provides a more streamlined, integrated approach to Android management and enables Google Workspace-based enrollment and user-management workflows.
When the enterprise uses a Managed Google Play account, the Settings card provides Upgrade to managed Google domain and an information action. The upgrade opens Google’s guided process to move the existing Android enterprise to a managed domain.
During the upgrade, Google can bind an existing Google Admin account associated with your work email address or create a new free Google Admin account automatically. Use a work email address such as name@enterprise.com to continue through Google’s guided setup.
Apple Device Management
The Apple Device Management card shows Apple device management (MDM) status for your enterprise. If Apple management is not configured yet, the card provides a Setup Apple Management action that opens the setup flow.
Configured state
When Apple management is configured, the card can show:
- Apple id
- Apple Push Certificate expiration: shows the expiration date and an icon badge. If the certificate is expiring/expired, the badge is clickable and opens renewal instructions.
- ABM Token expiration: shows the Apple Business Manager token expiration (with a clickable badge when action is required).
- VPP Token: shows organization name and expiration for the Apple Volume Purchase Program token (with a clickable badge when action is required).
- Apple Business Manager Portal: link shown when an ABM token is present.
- Sync with Apple Business Manager and Sync with Apple Volume Purchase Program: shown when tokens are missing.
Apple management requires the APNs certificate setup. If needed, see Apple Management setup (APNs).
Preferences & Privacy
The Preferences & Privacy card contains a marketing preference toggle and links to the Terms of Service and Privacy Policy. Use Save preferences to apply changes (a progress indicator is shown while saving).
Send feedback
When subscriptions are enabled for the account, the page can show a Send feedback card with links to: Make a feature request and external review platforms.
Inline setup and renewal instructions
At the bottom of the page, the dashboard can show expandable instruction panels depending on the current state (for example when a certificate/token is missing or expiring).
Renew Apple Push Certificate (APNs)
When the APNs certificate is expiring or expired, the page shows a panel with steps to download a CSR, renew the certificate on Apple’s portal, and upload the new certificate into Cerberus Enterprise.
Sync with Apple Business Manager (ABM)
When the ABM token is missing, expired, or expiring, the page shows a panel with steps to download a token from Apple Business Manager and upload it into Cerberus Enterprise.
Sync with Apple Volume Purchase Program (VPP)
When the VPP token is missing, expired, or expiring, the page shows a panel with steps to download a content token from Apple Business Manager and upload it into Cerberus Enterprise.
Sync with Google Workspace
When Google Workspace directory sync is not configured, the page shows a panel that explains the integration and provides an authorization button. It also lists the required Google OAuth scope: https://www.googleapis.com/auth/admin.directory.user.readonly.
For initial Android setup, see Android Management setup.