Google Workspace Changes

Google Groups is introducing stricter internal and external classifications to enhance data security and privacy.

Google Groups is implementing stricter 'internal' and 'external' classifications, featuring clearer visual indicators for external members and changes to how emails are displayed. Admins gain more granular control over who can add external users. To prevent synchronization issues, group settings will now automatically update to allow external members when they are added via the Cloud Identity API, Admin SDK Directory API, or third-party identity providers.

Google Groups is introducing stricter internal and external membership classifications to improve data security.

Starting in Q2 2026, Google Groups will enforce stricter classifications for internal and external memberships. Groups that disable the 'Allow members outside your organization' setting will be strictly limited to internal members. Existing groups with external members that have this setting disabled will be automatically reclassified as external, with external additions restricted to admins. This change affects the Google Groups UI, Admin console, and various APIs (Cloud Identity, Admin SDK Directory API, and Groups Settings API), where attempts to add external members to internal groups will now result in errors.

Introduction of 'Who can modify group details' permission and expanded visibility of group settings.

Google Groups is introducing a new standalone permission, 'Who can modify group details,' which allows group owners and managers to precisely control who can edit the group's name and description, with options to grant this ability to owners, managers, or all members. Additionally, all group members will now be able to view the group settings page, although the ability to edit those settings remains dependent on the user's role and assigned permissions.

New 'Locked' feature for Google Groups to prevent unauthorized changes.

Google Groups now offers a 'Locked' feature, enabling administrators to restrict modifications to group attributes such as name, email address, and memberships. This is particularly beneficial for organizations synchronizing groups from external identity systems like Entra ID, ensuring consistency and preventing discrepancies. The 'Locked' status helps maintain data integrity by limiting who can make critical changes within Google Workspace, while not affecting access or content moderation settings. Super Admins, Group Admins, and custom roles with specific privileges can manage this feature.

Deprecation of custom roles for managing and viewing members and the 'Entire organization' setting for member management in Google Groups.

Google Groups is deprecating custom roles for 'Who can manage members' and 'Who can view members' permissions, aiming to reduce complexity and increase consistency across Workspace products. Additionally, the ability to set 'Who can manage members' to 'Entire organization' will no longer be supported. Starting September 15, 2025, users will be unable to add new custom roles for these permissions or set 'Who can manage members' to 'Entire organization'. By January 5, 2026, existing custom roles for these permissions will no longer apply, and groups with 'Who can manage members' set to 'Entire organization' will have this updated to 'all members'. Admins and group owners are advised to review and adjust group settings.

Existing custom roles and "Entire organization" setting for managing Google Groups members will no longer apply.

Starting January 5, 2026, existing custom roles configured for "Who can manage members" and "Who can view members" in Google Groups will no longer be active. Additionally, if "Who can manage members" is currently set to "Entire organization", this setting will automatically update to "all members". Administrators and group owners are advised to review and adjust their group settings, reassigning affected users to default roles that align with their permissions, such as managers or owners, or expanding member management capabilities to all group members.

Upcoming changes to permissions for managing and viewing custom roles in Google Groups, deprecating specific custom role capabilities and the "Entire organization" setting for member management.

Google Groups is undergoing changes to its permissions system, specifically impacting "Who can manage members" and "Who can view members" settings. Starting September 15, 2025, the ability to add new custom roles for these permissions will be removed, and setting "Who can manage members" to "Entire organization" will no longer be supported. By January 5, 2026, any existing custom roles for these permissions will cease to apply, and groups with "Who can manage members" set to "Entire organization" will have this setting automatically updated to "all members". This aims to reduce complexity and increase consistency across Workspace products.

Pin conversations on your Google Group

Users with moderation permissions can now pin conversations in a Google Group to highlight specific discussions for other users in the group.

Pin conversations on your Google Group

Users can already star, mark as read/unread, report, delete, or lock a conversation in a Google Group. Today, we’re excited to reintroduce the ability to pin a conversation

Updated keyboard shortcuts for Google Groups

Google Groups is introducing updated keyboard shortcuts to improve accessibility for users relying on keyboards, screen readers, braille devices, and screen magnification. Existing shortcuts will be replaced by these new ones over the coming weeks.

Updated keyboard shortcuts for Google Groups

Google Groups is designed to work with keyboards, screen readers, braille devices, screen magnification, and more. We’re excited to improve the accessibility of Groups by introducing updated keyboard shortcuts. Over the coming weeks existing keyboard shortcuts will be replaced by new shortcuts.

new roles of Groups Editor and Groups Reader offer delegated admin permissions for groups

The new roles of Groups Editor and Groups Reader offer delegated admin permissions for groups, and can use conditions to limit access to sensitive groups as needed.

Admins can now lock Google Groups to prevent sensitive changes to group attributes and memberships.

Google is introducing a 'Locked' label for Google Groups in open beta, allowing administrators to restrict modifications to group names, email addresses, and memberships. This feature is designed to help admins who sync groups from external identity systems, such as Entra ID, to prevent synchronization inconsistencies. When a group is locked, only Super Admins, Group Admins, and specific Group Editors can modify key attributes, while access and content moderation settings remain unaffected.

Admins can now label a Google Group as “Locked,” which will heavily restrict changes to group attributes and memberships.

Admins can now label a Google Group as “Locked,” which will heavily restrict changes to group attributes (such as group name & email address) and memberships. This will help admins who sync their groups from an external source and want to prevent getting out of sync, or who want to restrict changes to sensitive groups.

The Groups Admin role can now be assigned for security groups or non-security groups in open beta.

This change gives administrators more granular delegation of group admin responsibilities, helping limit access to the most sensitive groups to only those who absolutely need it.