How can an administrator control access to the Salesforce1 mobile application?

Assign the Mobile User a standard profile.
Define which users have login access.
Create and assign a mobile configuration.
Enforce IP restrictions for mobile devices.