Google Workspace Changes

Google Workspace now supports inbound SCIM APIs for automated identity lifecycle management with external IdPs.

The new inbound SCIM support enables Google Workspace to act as a SCIM Service Provider, allowing identity providers, HR systems, or custom apps to automatically provision, update, and deactivate users and groups in real time. This eliminates manual account management, ensures day-one productivity for new hires, provides instant deprovisioning for departing employees to enhance security, and simplifies admin tasks with one-click token generation and controls to lock synced groups from external sources.

Google Workspace is updating app icons for a modern visual design.

Google is introducing a fresh visual identity for Google Workspace app icons across Gmail, Calendar, Chat, Meet, Drive, Docs, Slides, Sheets, Vids, Keep, Forms, Voice, Sites, and Tasks. These updates aim to provide a more distinct identity and consistency across the product suite without altering core functionality or administrative controls.

Assignments LTI™ is now available for Moodle.

Assignments LTI™ allows educators using Moodle to securely distribute, analyze, and grade student work while utilizing originality reports to ensure authenticity. Moodle administrators can benefit from a streamlined setup process via the LTI Dynamic Registration specification.

Google Workspace MCP server is now in public developer preview.

The Workspace MCP server provides a standardized bridge for AI agents to safely access Workspace capabilities. It includes dedicated tools for Gmail (drafting, searching), Drive (file fetching, permissions), Calendar (event management), Chat (message searching, replying), and a People dictionary for contact management.

Introduction of a standardized tiering model for Workspace agent tools and APIs.

To address risks associated with large-scale agentic actions such as API abuse and data egress, Google is introducing a standardized tiering model for all agent tools and APIs. This framework allows the majority of developers to continue innovating without friction while providing a predictable scaling path for high-volume applications.

Introducing Data Import for easier, faster, and higher-fidelity migration to Google Workspace.

Google is introducing Data Import, a new Google Workspace data migration tool for enterprises. This tool enables easier, faster, and higher-fidelity data migrations for emails, calendars, and contacts at no additional tool cost. It's a cloud-native solution accessible from the admin console, offering quicker migration speeds and no additional infrastructure costs. Additionally, a new migration planning utility is available to help with change management and forecasting for large-scale enterprise migrations from Microsoft 365 to Google Workspace.

Users in the US and Canada with Business editions can now purchase the AI Expanded Access add-on directly.

Google Workspace is introducing a new capability that allows end users in the United States and Canada with Business Standard or Business Plus editions to purchase the AI Expanded Access add-on directly using their own payment method. This update aims to reduce bottlenecks by allowing motivated users to obtain higher access to advanced AI tools—such as Gemini, NotebookLM, Veo 3, and Google Vids—without requiring IT administrator procurement. Administrators maintain full control and can disable the feature or cancel subscriptions through the Admin console.

Enhanced Workspace audit logs with improved filtering for resource fields, updated application and network fields, expanded AdminSDK filtering, and a new OwnerDetails field.

Google Workspace audit logs are receiving several significant enhancements. These include improved log filtering capabilities for resource fields within the security investigation tool for Gmail and Google Drive, allowing more granular searches using classification labels. Additionally, updated application and network fields are now available in the Workspace audit log integration with Google Security Operations (SecOps). The AdminSDK Activities.List method has expanded filtering options for RegionCode and OAuthClientId. Finally, a new OwnerDetails field, detailing the owner's type and identity, is being added to events published to the AdminSDK and BigQuery, providing richer insights into resource ownership.

Whisk is being discontinued and its best capabilities are moving to Flow, Google's unified platform for AI-powered image and video creation, by April 30, 2026.

On April 30, 2026, Whisk will be discontinued, and its key features will be integrated into Flow, Google's unified platform for AI-powered image and video creation. Users with active Whisk accounts will receive an email and in-product notifications guiding them to migrate their content to Flow or download it, as all remaining media in Whisk libraries after this date will be permanently deleted. Existing AI credits are automatically available in Flow. Users in regions where Flow is not yet supported will lose access to Whisk without a migration path and should download their content before the deadline.

Introduction of the AI Expanded Access add-on for higher usage limits of advanced AI features.

Google is introducing the AI Expanded Access add-on for Business and Enterprise plans, providing a middle tier between standard access and AI Ultra Access. This add-on unlocks higher usage limits for advanced AI capabilities, including image generation with Nano Banana Pro, video generation with Veo 3.1, deep reasoning in Gemini 3 Pro, and enhanced source library processing in NotebookLM.

SecOps data connector is now available for Google Workspace for Education Plus and Standard.

Google is expanding the availability of the SecOps data connector to customers using Google Workspace for Education Plus and Education Standard. This feature allows organizations to seamlessly forward activity logs from Gmail, Drive, Calendar, and other Workspace services into the Google SecOps platform to enhance threat detection, streamline incident response, and maintain compliance archives.

New admin control to disable Apple Intelligence Writing Tools in Google Workspace iOS apps.

Google Workspace is introducing a new administrative setting in the Google Admin console that allows administrators to disable Apple Intelligence Writing Tools (which include proofreading, rewriting, and summarizing text) within participating iOS and iPadOS apps, including Gmail, Drive, Docs, Sheets, Slides, Meet, and Chat. This control is intended to enhance security and mitigate risks by ensuring sensitive data is handled according to organization policies and data loss prevention (DLP) standards on managed devices.

New admin control to manage Apple Intelligence Writing Tools in Google Workspace iOS apps.

Google is launching a new administrative control for admins to disable Apple Intelligence Writing Tools within Google Workspace apps on iOS devices (Gmail, Drive, Docs, Sheets, Slides, Meet, and Chat). This feature, part of Apple Intelligence in iOS 18.1+, allows users to proofread, rewrite, or summarize text. The new setting in the Google Admin console, "Allow Writing Tools for work data," will be on by default. Disabling it prevents users from accessing these tools, enhancing data protection and mitigating conflicts with DLP policies.

Expanded Workspace audit logging datasets and in-depth filtering are now available via Admin SDK (Reports API).

To support more granular incident investigations, Google is expanding the Workspace audit logging datasets available on the Admin SDK (Reports API) to include additional datasets such as Admin data action logs, Contacts logs, Assignments logs, Directory Sync logs, Profile logs, Graduation logs, LDAP logs, Meet hardware logs, Takeout logs, Tasks logs, Cloud search logs, Access evaluation logs, and Data migration logs. Additionally, the Reports API now supports in-depth filtering on resource details, allowing users to filter by labels and resources from their audit logs for fetching more granular information. These granular audit logs are crucial for organizations to investigate cybersecurity incidents and understand their data usage, with these changes significantly expanding the depth of analysis possible.

Enhanced Admin audit log events with improved schema and event modeling for better clarity and detail.

Google is updating the schema and event modeling for several Admin audit log events, particularly those related to account security, Gmail, and Drive settings, as well as other admin-defined setting audit logs. These enhancements are designed to make the logs more comprehensible, detailed, and accurate. The changes include modifications to event names, event types, and the overall volume of the affected log events. While some legacy events may become redundant, both new and old events will remain available during the transition period to allow administrators to adjust their existing queries, alerts, and reports. This update significantly improves the depth of analysis possible for cybersecurity incident investigation and data usage understanding.