Google Workspace Changes

We’re making it easier to apply context-aware access (CAA) policies with new insights and recommendations

We’ll proactively surface potential security gaps and suggest pre-built CAA levels which admins can deploy to remediate the security gaps.

Google Workspace launches the Policy API in open beta to programmatically audit security and compliance settings.

Google Workspace has introduced the Policy API in open beta, enabling super admins to programmatically access and audit service level settings and rules across the environment. The API is currently read-only and covers various categories such as authentication controls, Gmail, Drive, and Meet, as well as DLP rule configurations. This update streamlines security auditing and helps administrators align their settings with CISA's secure configuration baselines without manually navigating the Admin Console.

Now generally available: Migrate users’ emails from Google Workspace, Gmail and other IMAP enabled mail servers

Beginning today, this data migration experience is now generally available, helping admins migrate email data in a more secure, reliable, and efficient manner.

a new category within the Google Workspace Marketplace: Featured partner apps

Here, you can quickly find and install the most popular Google Workspace apps.

Introducing security advisor, a set of new insights and tools designed to enhance security for small businesses

a set of new insights and tools designed to enhance security for small businesses – including threat defense, account security, and data protection capabilities.

Additional iOS data exfiltration enhancement: account level data sharing between Google Workspace apps and non-Google Workspace apps on or off

Admins can now enable content sharing on personal Workspace accounts while preventing data sharing from corporate Workspace accounts on iOS devices.

Giving admins another layer of granular control for third-party apps. Specifically, you can now configure apps to be limited by selected OAuth 2.0 Scopes for Google APIs, such as Drive or Gmail scopes.

When your users sign in to third-party apps using the "Sign in with Google" option (single sign-on) or use OAuth to share their data with those apps, you can control what access those apps have to your organization’s Google data using app access controls.

Admins can now enable content sharing on personal Workspace accounts while preventing data sharing from corporate Workspace accounts on iOS devices.

Admins can now enable content sharing on personal Workspace accounts while preventing data sharing from corporate Workspace accounts on iOS devices.

Instructions for use in set device numbers. This has high compliance

The user need to take this info and apply a custom to their new accounts. This is a great and the new

Block compromised mobile devices using context-aware access

Using context-aware access, you now have the option to automatically block access to Google Workspace data from compromised Android and iOS devices.

User enrollment for managed iOS devices is now generally available

User enrollment separates work and personal data on iOS devices, giving admins control over Workspace data on the device while users retain privacy over their personal data.

Admins can manage and secure school accounts and mobile devices centrally with the Endpoint Education Upgrade.

Using the Endpoint Education Upgrade, admins can configure a wide range of account and device management features, helping to make your organization's data more secure across your users' mobile devices, desktops, laptops, and other endpoints.

Adds enterprise endpoint management features to your Google Workspace for Education edition.

Using endpoint management, admins can better manage and secure the phones and tablets used across their school directly from the Admin console.

Assign mobile device management admin privileges based on organizational unit

Admins can be assigned privileges for specific organizational units (OUs). This adds yet another layer of security by ensuring that access is scoped to the necessary OUs only.

Updated grace periods for resolving policy violations in managed iOS devices

Improving these safeguards helps ensure that only managed applications can access sensitive organization information.