What’s changing
We’re introducing a new admin setting to control whether users can install and run any internal app from the Google Workspace Marketplace along with their allowlisted third-party apps. This added admin feature gives more controls to customize users’ access to trusted internal apps based on their company policies, security requirements and user needs.
Currently, admins can leverage Marketplace apps access settings to choose to allow users to access all internal and third-party apps or specific allowlisted internal and third party apps published in the Marketplace. Many organizations build internal apps and add-ons specifically for for their organization, and this added admin control saves admins time by allowing them to distribute all internally-built apps with a single click, rather than managing and allowlisting each one.
Who’s impacted
Admins, end users and developers
Why it matters
This requested feature enables admins to have added control over app access settings.
Additional details
With this new setting, admins can allow any internal app, but still limit the installation of third-party apps.
Internal apps are apps that are privately-published in your organization.
Getting started
- Admins:
- This setting will be OFF by default and can be enabled by going to the Admin console > Menu > Apps > Google Workspace Marketplace apps > Settings. Visit the Help Center to learn more about managing Marketplace apps on your allowlist.
- For organizations using API controls to restrict app access to the user data, consider checking the Trust internal apps setting to allow API access for all internal apps.
- End users: If enabled by their admin, you can install any internal app from the Marketplace by going to workspace.google.com/marketplace/mydomainapps.
Rollout pace
- Rapid Release and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on October 4, 2023
Availability
- Available to all Google Workspace customers