When creating a device-based access level in Google Access Context Manager, Device Policy attributes not an option via console

Question

I am attempting to follow this tutorial. My end goal is to apply device-based access levels on Identity-Aware Proxy (IAP)-secured resources, specifically App Engine. However, as the documentation states:

In the New Access Level pane, in the Conditions section, click Add attribute and then click Device Policy.

I do not see any Device Policy attribute. See screen shot below...

I believe I have properly enabled Endpoint Verification here. In Google Admin via Devices -> Mobile and endpoints I can see device info being collected.

My Google Admin account to Google Workspace Enterprise Plus and we have Cloud Identity Premium for GCP.

Any ideas why I am unable to see the Device Policy attributes when creating a new Access Level???

Answer 1

Application and VM protection with device attributes needs to purchase additional paid functions BeyondCorp Enterprise