Google Workspace Changes

Consent re-confirmation for under 18 users accessing Additional Services will soon be required

Admins are always in control of which services their users have access to, and this gives admins an opportunity to ensure the right users have access to the right services.

The Policy API is now generally available, enabling super admins to audit security settings for Calendar, Gmail, and MFA.

The Policy API has transitioned from open beta to general availability, allowing super admins to programmatically access and audit Google Workspace environment service level settings and rules. This update expands auditing capabilities to include Calendar, Gmail, and Multi-factor authentication (2-Step Verification) settings. The API streamlines security management and integrates with CISA's SCuBA project to help organizations align with secure configuration baselines using tools like ScubaGoggles.

The Policy API is now generally available with support for auditing more security features

Admins can now use the API to audit more settings, specifically: Calendar, Gmail, Multi-factor authentication settings (2-Step Verification)

Developers can now add client-side form field validation to Google Workspace add-ons and Google Chat app cards.

Google Workspace add-ons and Chat app developers can now implement client-side input validation to improve data accuracy and user experience. The card UI now supports required form field validation for date-time pickers, multi-select menus, drop-down menus, and text input widgets via the Action API. Additionally, the Validation API now allows for input type, format, and length limit validation for text inputs, supporting types such as text, integers, decimals, email, and emoji.

help admins better understand how security policies affect their users' access to OAuth apps

This includes settings and policies such as API controls, endpoint management configurations, domain wide delegation and more.

Admins can now use tokens in the app configurations for managed iOS apps

Tokens act as placeholders for information specific to a user or device that uses the app, such as a user's email address or their device serial number.

Gemini AI features are now included in Workspace Business and Enterprise plans.

Google is integrating its generative AI capabilities, Gemini, directly into Workspace Business and Enterprise plans, removing the need for a separate add-on. This expansion includes AI-powered writing, summarizing, and content creation tools across Gmail, Docs, Meet, Drive, Sheets, Slides, and Chat, as well as access to Gemini Advanced and NotebookLM Plus. The rollout begins for Business editions on January 15, 2025, and for Enterprise editions on January 29, 2025.

limit third-party app access to specific OAuth 2.0 scopes for Google APIs

This prevents apps from gaining additional access without admin consent, even if they request new API scopes in the future. This helps ensure data access is restricted to only what admins deem necessary.

allow educators to request access to unconfigured third-party apps on behalf of their students

etting for admins to now allow educators and users who are over 18 years of age to request access to apps for themselves or on behalf of others (proxy requests).

Introducing a new workflow that allows educators to request access to unconfigured third-party apps on behalf of their students.

Administrators can now allow a group of trusted users to vet and request third party app access on behalf of other users. This allows admins to better control who requests access and create a more streamlined process for app approvals.

Educators can now request access to third-party apps on behalf of their students.

Google Workspace for Education is introducing a new workflow that allows educators and users over 18 to request access to unconfigured third-party apps on behalf of students (proxy requests). Admins can designate trusted users to vet these apps and manage the requests within the Admin console under Security > API Controls > App Access Control, where proxy requests are clearly labeled. This process streamlines app approvals and provides administrators with better control over who can request access for others.

Easier discovery of featured partner apps in Workspace Marketplace

Google has updated the Workspace Marketplace to make it easier for users to find and connect to featured partner applications.

We’re making it easier to apply context-aware access (CAA) policies with new insights and recommendations

We’ll proactively surface potential security gaps and suggest pre-built CAA levels which admins can deploy to remediate the security gaps.

Google Workspace launches the Policy API in open beta to programmatically audit security and compliance settings.

Google Workspace has introduced the Policy API in open beta, enabling super admins to programmatically access and audit service level settings and rules across the environment. The API is currently read-only and covers various categories such as authentication controls, Gmail, Drive, and Meet, as well as DLP rule configurations. This update streamlines security auditing and helps administrators align their settings with CISA's secure configuration baselines without manually navigating the Admin Console.

Now generally available: Migrate users’ emails from Google Workspace, Gmail and other IMAP enabled mail servers

Beginning today, this data migration experience is now generally available, helping admins migrate email data in a more secure, reliable, and efficient manner.