Google Workspace Changes

Admins can now assign mobile device management privileges based on specific organizational units (OUs).

Google Workspace is providing admins with more granular control over mobile device management by allowing privileges to be delegated for specific organizational units (OUs). This feature, which was previously in beta, is now generally available and includes enhancements to the device display to help admins manage their devices more efficiently.

Google Workspace admins can now use incremental exports for organizational data backups to Google Cloud Storage.

Google Workspace administrators can now utilize incremental exports to back up organizational data for Gmail, Drive, and Chat into their own Google Cloud Storage (GCS) buckets. This feature allows for periodic full backups (quarterly, semi-annually, or annually) and frequent incremental backups, reducing storage costs and completion times while mitigating data loss risks. The feature is available for Enterprise Plus customers with Assured Controls and Assured Controls Plus.

Expanded Admin password reset alerts to cover all administrator roles.

Google is expanding the 'Super Admin password reset' alert in the Alert Center to a broader 'Admin password reset' alert. Previously, alerts were only triggered for super admin password changes; now, the alert covers password resets for all administrator roles within an organization. This update is enabled by default and provides admins with increased visibility and control over privileged accounts to better respond to potential compromises.

Introducing mutate endpoints (Create, Update, Delete) for DLP rules and detectors in the Workspace Policy API.

Google is introducing mutate endpoints (Create, Update, Delete) to the Workspace Policy API for data loss prevention (DLP) rules and detectors. This update allows super admins to programmatically manage and fully automate the entire lifecycle of their DLP policies, from initial creation to real-time activation and deactivation, complementing the existing read-only capabilities.

New data loss prevention (DLP) capabilities for file attachments and proximity conditions are now generally available.

Google Workspace has introduced new DLP rules that allow administrators to target non-Workspace file attachments based on file names, extensions, and custom MIME types. Additionally, proximity matching is now available, enabling the detection of sensitive information when two predefined data types or strings appear within a specified distance (up to 1,000 characters) of each other. These rules can be applied across Gmail, Drive, and Chat to reduce false positives and better secure proprietary or financial data.