Dynamic, context-aware access control for G Suite now generally available

What’s changing 

Context-aware access for G Suite is now generally available for G Suite Enterprise and G Suite Enterprise for Education domains. It was previously available in beta.

With context-aware access, you can set up different access levels based on a user’s identity and the context of the request (location, device security status, IP address). This can help you provide granular access controls without the need for a VPN, and give users access to G Suite resources based on organizational policies. For example, you could use it to:

  • Let only certain employees access Gmail outside of the corporate WiFi network. 
  • Allow access to Drive only if a user’s desktop device storage is encrypted. 
  • Permit users from a certain Organizational Unit (e.g. executives) to access apps on any network, but restrict access to apps for other OUs from outside the corporate network. 

Visit our Help Center for more information on how to use context-aware access. For more details on context-aware access and a number of other G Suite security announcements, please read our Cloud Blog post.

Who’s impacted 

Admins only

Why you’d use it

See this video for some ideas about how you could use context-aware access:

How to get started 


  • Admins: Use our Help Center to learn how to start using context-aware access. 
  • End users: No action needed 

Helpful links 

Help Center: Context-Aware Access overview 

Availability 

Rollout details 


G Suite editions

  • Available to G Suite Enterprise, G Suite Enterprise for Education, and Cloud Identity Premium 
  • Not available to G Suite Basic, G Suite Business, G Suite for Education, G Suite for Nonprofits, and Cloud Identity Free 

On/off by default?
This feature will be OFF by default and can be enabled at the OU level.