Google Workspace Changes

Google Workspace expands Out-of-Domain file-level warnings to mobile apps, Chat Spaces, Google Groups, external service accounts, and email notifications.

Google has introduced several improvements to Out-of-Domain file-level warnings to help prevent accidental data exfiltration and phishing attacks. The 'External' badge is now available in Android and iOS apps for Drive, Docs, Sheets, and Slides. Additionally, the badge now triggers for documents shared via Chat Spaces and Google Groups with external users, documents accessed by external Google Cloud service accounts, and within both comment and file sharing email notifications.

Administrators can now apply a global context-aware access (CAA) policy to all SAML applications.

Google Workspace has introduced a default context-aware access (CAA) policy for all SAML applications, establishing a universal security baseline. This 'secure-by-default' posture automatically protects any SAML-based app that lacks a specific policy, reducing the administrative burden of manual configuration. The global policy supports both Monitor and Active modes, while specific application-level policies continue to take precedence for granular control. Admins can configure these settings in the Admin console under Security > Context-aware Access > General settings.

Small businesses can now seamlessly import up to 10 users from Microsoft to Google Workspace during setup.

Google Workspace has introduced a beta feature allowing very small and small-sized businesses and educational institutions to automatically import up to 10 users from Microsoft during the initial account setup process. After connecting to a Microsoft business account and completing domain verification, admins can import users in a single click. Additionally, emails, calendars, contacts, and OneDrive files can be migrated using the data import tool in the Admin console.

Introduction of the AI control center in the Admin console for managing AI and agent access to Workspace data.

Google has introduced the AI control center within the Admin console, providing enterprise organizations with a centralized dashboard to manage security, governance, and auditing for generative AI and agentic solutions. The center features four core modules to monitor AI access, manage product-specific security, handle fundamental security protections like classification labels, and review privacy and compliance standards. It is available for Enterprise Standard and Plus users.

Upcoming Photos management and bulk-deletion capabilities for admins.

Later this year, Google will introduce new Photos management and bulk-deletion tools in the admin console. These capabilities will provide administrators with better visibility into user data migration and allow them to proactively manage Photos content to optimize pooled Drive storage.