Google Workspace Changes

New 'Inspect Groups' function to view direct and indirect group memberships in the Admin console.

Google Workspace has introduced the 'Inspect Groups' function in the Admin console, allowing administrators to easily view direct and indirect group memberships. This feature enables admins to see an expanded view of all memberships in a nested group structure, validate whether a specific user is a member of a group, and list all groups a user belongs to along with their membership relation (direct, indirect, or both).

Security groups are now generally available for Google Workspace admins.

Security groups are now generally available, allowing administrators to regulate, audit, and monitor groups used for permission and access control. This feature enables admins to apply a security label to groups to distinguish them from standard email-list groups, providing guarantees that external groups cannot be added as members and that security labels cannot be removed once assigned.

Improved insights and quick actions on Users, Domain, and Billing home cards in the Admin console.

Google is enhancing the Admin console homepage by adding important notifications and improved guidance within the Users, Domain, and Billing home cards. These updates are designed to help administrators more easily complete their setup process and stay on top of managing Google Workspace for their organization.

New settings section for single sign-on (SSO) for SAML applications.

Google is introducing a dedicated section in the Admin console for managing single sign-on (SSO) settings for SAML applications where Google acts as the Identity Provider (IdP). While the core functionality remains the same, the update provides a more streamlined experience for managing certificates and downloading IdP metadata.

Updated 2-Step Verification (2SV) controls in the Admin console.

Google is updating the 2-Step Verification (2SV) controls in the Admin console, introducing a dedicated "2-Step Verification settings" section under Security. Key improvements include the ability to enable or disable 2SV enrollment for specific organizational units (OUs) rather than just the whole domain, new interfaces to prevent admins from accidentally locking themselves out, and a more streamlined overall user interface.

Enhanced security and management for Windows 10 devices are now generally available via the Admin console.

Google has announced the general availability of the Google Credential Provider for Windows (GCPW), allowing admins to manage and secure Windows 10 devices through the Admin console. All G Suite and Cloud Identity customers can now enable SSO for Windows 10 logins using G Suite credentials. Additionally, G Suite Enterprise, G Suite Enterprise for Education, and Cloud Identity Premium customers can manage device compliance, perform remote wipes, and push configuration updates to Windows 10 devices from the cloud.

New interface for domain management in the Admin console

Updated the interface used to manage primary domain, secondary domains, and domain aliases with a more complete information, grouped action buttons, and a new side panel.

New interface for domain management in the Admin console.

Google has updated the interface used to manage primary domains, secondary domains, and domain aliases in the Admin console. The new interface provides more complete information and descriptions of domain states, introduces grouped action buttons for tasks such as verifying domains and setting up MX records, and adds a side panel for managing domains registered through Google, including renewals and advanced DNS settings.

Important changes to less secure apps and account recovery management in the Admin console

Making some updates to how less secure app (LSA) settings and account recovery (AR) settings are managed in the Admin console. The updates include a new interface, which reorganizes the settings to make them easier to find and change, and a new system to apply group-based policies in these areas.

Updates to Less Secure Apps (LSA) and Account Recovery (AR) settings management in the Admin console.

Google is updating the Admin console's interface for managing Less Secure Apps (LSA) and Account Recovery (AR) settings to make them more streamlined and easier to find. Additionally, a new group-based policy system is being introduced for these settings, allowing admins to manage policies exclusively using groups rather than a combination of OU-based policies and group-based exceptions. Existing settings will be migrated automatically for most customers.

Updates to Admin console apps page interface

Making minor changes to the apps page in the Admin console, including performance improvements, consolidated settings for Marketplace apps, and visual updates.

Updates to the Admin console apps page interface for improved performance and navigation.

Google is making minor changes to the apps page in the Admin console to improve performance, including faster page loading. Key interface updates include moving Marketplace app settings to the Marketplace Apps card, relocating G Suite terms of service links to the bottom of the page, and implementing visual updates for clearer text and improved navigation.

The data region reporting dashboard has been relocated.

The location of the data region reporting dashboard has moved from Admin Console > Dashboard to Admin Console > Reports > Data Regions.

Group-based controls for data regions are now available.

Administrators can now set data regions for specific groups of users within their organization. Previously, this could only be enabled by organizational unit (OU), and this update provides more flexibility without requiring changes to the organizational structure.

Google Keep primary data and backups are now covered by data regions.

Data regions coverage has been extended to include Google Keep's primary data at rest and backups, bringing the total number of covered apps to 11. Keep data will automatically migrate to comply with existing data location policies upon rollout.