Configure member restrictions for groups, now generally available

Quick launch summary

In October 2021, we announced an open beta for group level controls that allow admins and end users who are group owners to restrict group memberships based on internal or external members and member type (service account, user, group). This feature is now generally available.

Member restrictions allow admins and end users who are group owners to limit group inclusion in several important ways:

  • Restrict group membership to only Internal or external members of an organization
  • Restrict by Member type - e.g. service accounts, users, and other groups.

The Cloud Identity Groups Memberships API can be used to check the state of memberships, which makes finding violating memberships easier

See the original announcement for more information.

Getting started

Rollout pace


  • Available to Google Workspace Enterprise Standard, Enterprise Plus, Education Plus, and Cloud Identity Premium customers
  • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as G Suite Basic and Business customers