Google Workspace Changes

General availability of email migration from Google Workspace, Gmail, and IMAP servers to Google Workspace accounts.

Google has announced the general availability of a data migration service that allows administrators to migrate users' email data from Google Workspace, Gmail, or other IMAP-enabled mail servers to another Google Workspace account. This service includes the ability to perform delta migrations, which smartly transfer newly generated or modified emails from the source without duplicating previously migrated content, providing a more secure and efficient migration experience.

Organizational unit attribute for external directory sync

When using Directory Sync, administrators can now map users from Azure Active Directory or Active Directory to specific organizational units within Google Workspace. This is achieved by adding an organizational unit as an attribute in the external directory, simplifying the synchronization of users across different organizational units.

Dynamic groups now supports negation queries

Administrators can now use negation in membership queries when creating or editing dynamic groups, enabling the exclusion of users from specific sub-organizations or job titles. Certain limitations apply to queries using the 'exists' macro with AND operators or NOT operators inside the macro.

Google Workspace admins can now track the carbon footprint and gross emissions of their organization's product usage.

Google Workspace has introduced a Carbon Footprint reporting tool within the Admin console, enabling administrators to monitor the gross emissions associated with the use of services such as Gmail, Google Meet, and Google Docs. The tool allows admins to view aggregated emission data over time, broken down by specific services and sorted month-over-month, helping organizations align their IT resource allocation with sustainability goals.

Introduction of the Conflict Accounts Management tool to automate the conversion of unmanaged accounts to managed accounts.

Google is introducing the Conflict Accounts Management tool within the Admin console to reduce the manual effort required to turn unmanaged accounts—personal accounts created using an organization's domain—into managed accounts. Admins can now specify preferences for resolving these conflicts, such as automatically inviting users to transfer their accounts, replacing unmanaged accounts with managed ones, or blocking the creation of new accounts if an unmanaged one already exists. This functionality is applied when users are provisioned using the public Directory API with the 'resolveConflictAccount' parameter set to true.

Admins can now use context-aware access to control Workspace API access for 1st and 3rd party applications.

Google Workspace admins can now implement context-aware access policies to block or allow users' access to Workspace Applications when accessed via other Google (1st party) and non-Google (3rd party) applications. These policies can be based on user identity and request context, such as location, device security status, and IP address, providing an additional layer of security to protect against data exfiltration.

Enhanced data export options and improved UI for Google Workspace admins.

Google Workspace is introducing more granular data export capabilities, allowing admins to export data for a specific user or a set of individual users (for Enterprise Plus, Education Standard, Education Plus, and Teaching and Learning Upgrade editions) instead of the entire organization. Additionally, the data export tool now features an improved user interface that provides more detailed export information, a longer history of exports, and filtered takeout options.

Set Context Aware Access policies for 1P & 3P applications to access Workspace APIs

Admins can now use context-aware access to block or limit first and third party API access to Google Workspace applications. This allows for setting access levels based on a user’s identity and the context of the request, such as location, device security status, and IP address, providing an additional layer of security against data exfiltration.

Google Workspace Admins can now sync users and groups from Azure Active Directory using Directory Sync.

Google Workspace Admins can now use Directory Sync to synchronize user and group data from Azure Active Directory to the Google Cloud directory. This provides an alternative to Google Cloud Directory Sync (GCDS) by eliminating the need to manage on-premises hardware and deployments. The feature is available in open beta for all Google Workspace and Cloud Identity customers, requiring Global Administrator privileges on the Azure Active Directory side to read full user profiles and group memberships.

Admins can now pin up to five links to the top of the navigation bar in the Admin console.

To improve navigation efficiency, Google Workspace admins can now pin up to five frequently used links to the top of the left-hand navigation menu in the Admin console. This feature helps admins save clicks and access relevant pages faster.

Added a Chrome Browser Cloud Management card to the Admin console home page.

Google has introduced a new Chrome Browser Cloud Management card on the Admin console landing page. This card allows administrators to view quick statistics, such as the number of enrolled browsers, and perform direct actions like enrolling new browsers or managing Chrome extensions without having to navigate through the full menu system.

Directory Sync now allows admins to replace the domain name for synced users and groups.

Google Workspace admins can now use Directory Sync to automatically replace the domain name for synced users and groups in their Google cloud directory. This enables synced users and groups to have a different domain name than the one used in the external directory. Admins can specify if the domain change should apply only to newly synced users and groups or to both new and previously synced entities.

Google Workspace enables passkeys as a simpler and safer passwordless sign-in alternative in open beta.

Google Workspace is introducing passkeys in open beta, allowing users to sign in to their accounts using fingerprints, face recognition, or other screen-lock mechanisms instead of passwords. Admins can enable this feature in the Admin console under Security > Passwordless, providing a more secure and faster authentication experience that is resistant to phishing and other online attacks.

Admins can now monitor abuse-related events in the Alert Center.

Google Workspace admins will now receive alerts in the Alert Center and via email regarding abuse-related events within their organization, including content marked as abusive or user access restrictions to apps. This update enables admins to more efficiently monitor abuse and take necessary actions, such as suspending users or restricting access to specific services.

Google Workspace admins can now control access to Bard (now Gemini) via the Early Access Apps setting.

Google Workspace admins now have the ability to enable or disable access to Bard (now Gemini) for their users through the Admin console under Apps > Additional Google services > Early Access Apps. This feature is off by default and can be enabled at the domain, organizational unit, or group level. It is important to note that services managed by the Early Access Apps control are Additional Google services and are not covered under the Google Workspace agreement, Data Processing Agreement, or HIPAA Business Associate Addendum.