Google Workspace Changes

VirusTotal integration now available in the security investigation tool for Gmail event logs.

Google Workspace administrators can now use the Security Investigation tool to view VirusTotal reports for Gmail event logs, providing deeper insights into potential security threats. The integration offers Standard reports (including file identification, threat reputation, and time spread) and Enhanced reports for paid VirusTotal subscribers (including multi-angular detection, IOCs, and interactive threat graphs). This allows admins to better investigate inconsistencies and malicious attachments to protect their users and data.

Control session length for Google Cloud Console and gcloud CLI is now generally available.

Google Workspace, Google Cloud Platform (GCP), and Cloud Identity admins can now set a fixed session duration for the GCP Cloud Console, gcloud command-line tool, and other applications requiring Cloud admin scopes. This feature, which is disabled by default and can be enabled at the OU level, requires users to re-authenticate once the session expires, reducing the risk of unauthorized access if a device is compromised.

Admins can now perform a domain-takeover to consolidate multiple Google Workspace Essentials instances on their domain.

Google Workspace admins can now use a 'domain-takeover' process to take control of all existing Google Workspace Essentials instances on their domain. This consolidation provides admins with centralized billing, additional management controls, and control over end-user access to services. The process ensures that users maintain uninterrupted access to their apps and services during and after the takeover. This feature is applicable to Google Workspace Essentials and Enterprise Essentials customers.

Admins can now view and manage smart displays and speakers in the Admin console.

Google has expanded endpoint management to include smart displays and speakers, providing admins with a more complete inventory of devices accessing work data. Admins can now view device type and user account information, sign users out of these devices, and for select editions, access device audit logs to monitor account registration changes, sync activity, and admin sign-outs.