|Android for Work|
A user must have a Managed Google Account to enroll a device with Android for Work. This Android for Work account is connected to the domain that you registered with Google.
Android for Work account names are formed like an email addresses, for example user@your_android_for_work_domain.
When a user enrolls a device with Android for Work on the Self Service Portal, Sophos Mobile Control checks if an Android for Work account for the user already exists on the Google server. For this, the left part of the user’s email address in Sophos Mobile Control is combined with your Android for Work domain. If an account with that name does not exist, Sophos Mobile Control creates it.
Example: If the user’s email address in Sophos Mobile Control is user@your_company.com and your Android for Work domain is your_android_for_work_domain, Sophos Mobile Control checks the Google server for an account user@your_android_for_work_domain.
Other than creating an Android for Work account during enrollment, Sophos Mobile Control does not manage the account lifecycle. If you delete the user account in Sophos Mobile Control, the user’s Android for Work account remains.
You can manage the Android for Work accounts for your domain from the Google Admin console. If required, you can create Android for Work accounts from your LDAP directory, using Google Apps Directory Sync (GADS).