Tag Archives: Admin Console

Alert center for G Suite generally available to help identify security threats

We’re making the alert center for G Suite generally available. The alert center provides a single, comprehensive view of essential security-related notifications, alerts, and actions across G Suite. The alert center was previously available in beta and helps G Suite organizations detect threats and take action to mitigate them.


Alert center provides a unified view of essential notifications 

The alert center brings together alerts on some of the most critical security concerns including account warnings, gmail phishing and malware, and device management. These alerts cover a number of scenarios. 

Account warning alerts: These will cover seven different scenarios, ranging from suspended accounts triggered due to suspicious activities to alerts on government-backed attacks.

Gmail phishing and malware alerts: We leverage machine learning to identify threat indicators and uncover malware threats. We surface alerts for potentially malicious IP addresses, even if these are placed on your trusted whitelist. We’ll also show potential phishing events, including those messages that have been quarantined or delivered.



Device management alerts: We look the various device attributes to determine if user device has been jailbroken or rooted. These alerts are surfaced, along with other device management alerts on suspicious device activity.



Google operations alerts: The Google operations alert provides details about security and privacy issues that are affecting your organization's G Suite services.

Alerts link to specific information and remediation steps 

For every alert, we include dedicated knowledge articles to help admins learn about the alert type. Where relevant, we also have links that admins can use to take actions to help remediate the threat. Links to these resources are accessible from the alert detail page within the Admin console. They can help admins take action right away to shield users and remediate incidents.

Alert center builds on security center functionality 

The unified view that the alert center provides will help all G Suite admins manage alerts more efficiently, and provide insights that help them assess their organization's exposure to security issues at the domain and user levels.

In addition, G Suite Enterprise edition domains can use the G Suite security center for integrated remediation of issues surfaced by alerts. From every alert in the alert center, admins at G Suite Enterprise domains will have a dedicated link that will trigger a pre-configured query in the investigation tool. This helps these admins go from detection to remediation with just a few clicks.

Launch Details 
Release track:
Launching to both Rapid Release and Scheduled Release

Editions: 
Available to all G Suite editions

Rollout pace: 
Gradual rollout (up to 15 days for feature visibility)

Impact: 
Admins only

Action: 
Admin action suggested/FYI

More Information 
Help Center: About the Alert center 
G Suite Updates blog: Get a unified view of essential notifications with the alert center Beta 


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Manage your Jamboard fleet directly from the Admin console

You can now manage your Jamboards, along with your users and other devices, all in one place. We’re moving Jamboard fleet management and administration into the Admin console under Device Management > Jamboards. This move creates a more consistent and intuitive resource management experience for G Suite admins.



This replaces the Jamboard Admin console, but all of its functionality to provision, deprovision, and see device health is still available and all of its settings will be preserved. We’ve also added new features like filtering for improved searching, pagination, and a refresh button.

Visit the Help Center for more information on viewing, modifying, and updating settings for your Jamboard in the Jamboard Admin console.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Manage your Jamboards

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Alerts for government-backed attacks to be sent by default starting October 10th

In August, we launched the option for G Suite admins to receive a security alert if we believed their users were being targeted by a government-backed attack. At the time, admins had to explicitly enable these alerts. We heard that many admins weren’t aware of this alert and so weren’t receiving this critical information. As a result, we’re going to turn these alerts ON for most admins starting October 10th, 2018.

Admins will receive a security alert if we believe their users are being targeted by a government-backed attack.

You’ll still have the option to turn these alerts OFF by navigating to Reports > Manage alerts > Government-backed attack warning in the Admin console—or you can simply opt out any time you receive an alert email.

You can disable these alerts in the Admin console.

Note that if you previously enabled and then disabled these alerts, they will remain off. If you’d prefer not to receive these alerts after October 10th, simply turn them on and then off again in the Admin console prior to that date. We won’t override alert preferences that have been explicitly changed prior to October 10th.

Launch Details
Release track: 
Launching to both Rapid Release and Scheduled Release on October 10th, 2018

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
G Suite Updates blog: Control government-backed attack alerts in G Suite
Help Center: Fix or stop government-backed attack alerts


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Reset passwords for and lock company-owned Android devices

G Suite admins in domains with Google Mobile Management enabled can already take actions to protect the data on their users’ mobile devices. For example, they can require devices to have screen locks and wipe devices when they’re lost or stolen. With this launch, we’re giving admins additional capabilities—they can now remotely reset the password on a company-owned Android device or lock the device entirely.


Reset device password

If a user forgets their device password, you may want to reset it for them.


Check out the Help Center for instructions on how to reset the password on a user’s device.

Lock device

If a user loses their device, you may want to lock it until it’s found. This will force users to enter the device’s password before using it.


Check out the Help Center for more info on locking user devices.

Please note that the reset password and lock functions can only be used in domains that have advanced mobile management enabled.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to G Suite Business and Enterprise editions, as well as Cloud Identity Premium

Rollout pace:
Extended rollout (potentially longer than 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Lock a device and reset its password


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Better insight into the managed mobile devices in your organization

As a G Suite admin, it’s important that you can easily view and obtain critical information about the mobile devices your organization manages. That’s why we’re making those details easier to find and utilize with our updated mobile device list in the Admin console.

Filter for key characteristics, take bulk actions, and more

This list, located at Device management > Mobile devices, is not only faster and easier to scan, it allows you to do the following:

  • Filter by several categories (e.g. user name, last sync date, compromised devices, etc.), and save the URL to apply the same filters later.
  • Search by keyword or serial number.
  • Add and remove columns, and increase the number of rows shown per page.
  • Download selected columns, export them to Google Sheets, and view the progress of that task.
  • Take action on multiple devices at once and directly from the device details page.

The mobile device list now shows all assigned mobile devices (both company-owned and personal) in one view.


More details about individual devices

Depending on the type of mobile management (advanced or basic) you have enabled for your organization, you can take some of the following actions when you click on a specific mobile device in the list:

  • Block, wipe, or delete the device or account.
  • See all of the apps installed on that device, and identify those that may be harmful.
  • Email the device’s user directly.
  • Learn if a device isn’t compliant and why.


Visit the Help Center to learn more about the new and improved mobile devices list, and the ways it can help you manage mobile devices in your organization.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Extended rollout (potentially longer than 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: View and manage mobile devices


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

New G Suite adoption and productivity insights tool launching in Beta

We’re launching Work Insights, a new tool to help you quickly assess the impact of G Suite on your organization by giving you visibility into the adoption of G Suite tools. Initially launching in beta, Work Insights is available to organizations with G Suite Enterprise or Enterprise for Education editions. G Suite admins can use this form to apply for the beta.

See the impact of G Suite in your organization 

With Work Insights, we aim to bring you executive-level insights into how G Suite is increasing collaboration and improving workplace culture at your organization. Use the Work Insights dashboard to see how your organization’s G Suite usage is changing over time in the following areas:
  • Adoption - which teams are adopting G Suite and which apps they use most frequently
  • Collaboration - how are teams working together through meetings, file sharing, and document co-editing
  • Activity - which apps teams are spending time in and how much time they’re spending in meetings
The metrics in the dashboard can help you determine how quickly your workforce is adopting G Suite, how teams are collaborating, if they’re using G Suite products as expected, and if you need additional training resources to help users understand a new workflow.

Compare across your organization

For each category of metrics, you can compare insights by organizational unit. You can also benchmark usage and adoption by comparing team-level statistics to overall company data. This can help you establish usage trends and see adoption patterns to get insights into differences across your organization.

Note that at the organizational level, team insights will only be shown for teams of 10 people or more.

See how G Suite is used across your organization


See how teams within your organization collaborate

Work Insights Beta now open

Work Insights is initially launching in beta to organizations with G Suite Enterprise and Enterprise for Education editions only, with access restricted to admins. See this form for more details and to apply.

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Investigation tool in G Suite security center now generally available

We launched the investigation tool as an Early Adopter Program (EAP) in July and are now making it generally available (GA). It will help G Suite admins and security analysts identify, triage, and remediate security threats within their organization. This tool builds on the existing capabilities in the security center to help admins:

  • Identify security issues within their domain using advanced search capability.
  • Triage threats targeting users, devices, or data.
  • Take bulk actions to limit the propagation and impact of threats.


Since our EAP announcement, we’ve been hard at work using the feedback from participants to improve the product. As a result, this release will have the following key new features:

  • Enhanced security to prevent insider risk - You can now require a second admin to verify large actions in the investigation tool.
  • More fine-grained visibility while investigating incidents - Email header analysis allows you to see important attributes and the delivery path for the email. We’ve also added visibility into Team Drive settings and the ability to modify access permissions directly from the tool.
  • Simplified interface - With user auto-complete, emails and names from your organization will be auto-completed as you type parameters in the investigation tool.
We hope the investigation tool helps you manage your organization’s data security. See the Help Center for more information on the tools available to provide visibility into security issues in your domain.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to G Suite Enterprise and Enterprise for Education editions only

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
G Suite Updates blog: Triage and remediate threats with new investigation tool in G Suite security center Early Adopter Program
G Suite blog: Gain deeper organizational insights with new features in G Suite

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Nine third-party applications added to the G Suite pre-integrated SAML apps catalog

With Single-Sign-On (SSO), users can access all of their enterprise cloud applications—including the Admin console for admins—after signing in just one time. Google supports the two most popular enterprise SSO standards, OpenID Connect and SAML, and there are many applications with pre-integrated SSO support in our third-party apps catalog already.

We’re now adding SAML integration for nine additional applications:

  • CloudBees 
  • Coralogix 
  • iMeet 
  • Central 
  • monday 
  • Oomnitza 
  • OfficeSpace 
  • Spoke 
  • Stella Connect 
  • Wdesk 


You can find our full list of pre-integrated applications, as well as instructions for installing them, in the Help Center.

Note that apart from the pre-integrated SAML applications, G Suite also supports installing “Custom SAML Applications,” which means that admins can install any third-party application that supports SAML. The advantage of a pre-integrated app is that the installation is much easier. You can learn more about installing Custom SAML Applications in this Help Center article.

Launch Details 
Release track: 
Launching to both Rapid Release and Scheduled Release

Editions: 
Available to all G Suite editions

Rollout pace: 
Gradual rollout (up to 15 days for feature visibility)

Impact: 
Admins only Action: Admin action suggested/FYI

More Information 
Help Center: Using SAML to set up federated SSO


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Get a unified view of essential notifications with the alert center Beta

Today, we’re launching the alert center for G Suite in Beta*. The alert center will offer a single, comprehensive view of essential notifications, alerts, and actions across G Suite. In response to these, admins can take actions to better serve and protect their organizations.

The alert center: a single place for important notifications 

The unified view that the alert center provides will help admins manage alerts more efficiently, and provide insights that help them assess their organization's exposure to security issues at the domain and user levels. In addition, G Suite Enterprise edition domains can use the G Suite security center for integrated remediation of issues surfaced by alerts. 

A sample view of the new G Suite alert center 

Notifications within the alert center can be broadly categorized into three groups: security threats, monitoring, and critical system alerts. At the Beta launch, the alert center will include these specific alerts:

  • Google Operations - provides information about G Suite security and privacy issues that Google is investigating that may impact your organization's G Suite services. 
  • Gmail phishing and spam - reports spikes in user-reported phishing, including links to samples and the list of recipients that are affected. 
  • Mobile device management - provides information on devices that are exhibiting suspicious behavior or have been compromised (available on G Suite Business and G Suite Enterprise editions) 

Beta program for the alert center now open 

We’re excited to open a Beta program to let G Suite customers try and provide feedback on the alert center functionality. The Beta is available to all G Suite customers. G Suite super admins may apply with their primary domain on behalf of their organizations. Apply to join the Beta here.

More Information 
Help center: About the alert center

* Beta is the new name for Early Adopter Programs



Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Making it easier to set up Android devices as company-owned

When employees set up their phones and tablets as company-owned devices, they give your organization full control over those devices—allowing you to apply policies regarding app installation, network settings, security options, and more. This helps protect your users and your corporate data.

If you have advanced mobile device management but don’t register your company-owned devices in the Admin console, your users must choose to set up their devices as company-owned.

To encourage more users to make this choice, we’ll start showing the screen below to all users who add their G Suite account to a new Android device before adding their personal account.

This change will start rolling out on September 19th, 2018; please note that it may take several weeks for it to take effect for all users.


Starting on September 19th, users will be asked if they own the device they’re setting up. Unless they explicitly state that they own the device personally, ownership will be auto-assigned to your organization.

Currently, your users only see this choice if your organization has Device Owner mode enabled. That option will disappear from the Admin console on September 19th.

Note that users will only see the screen and option above on new (and recently factory-reset) devices running Android 6.0 or higher.

Allowing users to install any app from the managed Google Play store

In addition to the change outlined above, we’re making it easier to install apps on company-owned Android devices and work profiles.

Currently, you have to actively whitelist apps to make them available to your users. Starting on September 19th, users with company-owned Android devices and work profiles will be allowed to install any app from the managed Google Play store by default. If you don’t want your users to do this, you can choose to restrict app availability to whitelisted apps.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release on September 19th, 2018

Editions:
Available to all G Suite and Cloud Identity Premium editions

Rollout pace:
Extended rollout (potentially longer than 15 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
Help Center: Set up Android devices your company owns


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates