Tag Archives: Admin Console

Updated user interface for managing email quarantines

Quick summary 

In the coming weeks, you will see a new user interface when using the email quarantine tool. This update will bring the email quarantine experience inline with other tools in the Admin console, making it more intuitive to navigate and use. Quarantines help minimize data loss, protect confidential information, and manage message attachments. 


Some improvements you’ll notice are: 
  • A collapsible side panel for filtering quarantines 
  • A paginated table view displaying quarantines with custom names row by row 
  • The option to view the original, raw content of a selected message for easier referencing. 

Quarantines with custom names are displayed row by row


Original, raw content can be viewed for each quarantine



Getting started 

  • Admins: The admin quarantine can be found in the Admin console at Apps > Google Workspace > Gmail > Manage Quarantines. Visit the Help Center to learn more. Visit the Help Center to learn more. 
  • End users: There is no end user impact. 

Rollout pace 


Availability 

  • Available to all Google Workspace editions, as well as legacy G Suite Basic and Business customers 

Resources 



Google Workspace Updates Weekly Recap – August 12, 2022

New updates

Unless otherwise indicated, the features below are fully launched or in the process of rolling out (rollouts should take no more than 15 business days to complete), launching to both Rapid and Scheduled Release at the same time (if not, each stage of rollout should take no more than 15 business days to complete), and available to all Google Workspace and G Suite customers. 


Delegate access to a shared inbox using a group address 
You can now give an entire Google Group access to your Gmail account through mail delegation. With this feature, delegated users can read, send, and delete messages on the account owner's behalf. We hope this will enable teams to more effectively process incoming requests and tasks via a single shared email address. | Available to Business Starter, Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Frontline, Nonprofits, and legacy G Suite Basic and Business customers only. | Learn more. 


Granular controls for app allowlisting in the Google Workspace Marketplace 
Admins can now choose which Google Workspace Marketplace apps are available to be installed by users in a particular department (OU) or group by managing Marketplace apps on their allowlist. Previously, admins could only manage the allowlist for an entire domain. Additionally, the Marketplace apps access settings, Allow all apps, Allow selected apps, and Block all apps, can now be set for your entire organization or for an OU or group. This new functionality provides a solution when only a subset of domain users need permissions to install certain Marketplace apps. Examples include Chat apps required for your Engineering organization and IT security group or Classroom add-ons required for high-school teachers. | Available to Business Starter, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Frontline, Nonprofits, and legacy G Suite Basic and Business customers only. | Learn more. 


Seamlessly delete subsets of Sites 
Site editors can now delete a page with subpages and delete pages that were copied into another site during a partial site copy. | Roll out to Rapid Release began August 8, 2022; launch to Scheduled Release planned for August 29, 2022. | Learn more. 



Previous announcements 

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.


Office Building support for Working Locations 
We’ve added the ability to select a specific office building as your working location. | Available to Google Workspace Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Nonprofits, and legacy G Suite Business customers only. | Learn more. 


Improving data privacy with Client-side encryption for Google Meet 
We’ve added Workspace Client-side encryption to Google Meet, giving customers increased control over their data. | Available to Google Workspace Enterprise Plus, Education Standard, and Education Plus customers hosting client-side encrypted calls only. | Learn more. 


Stronger protection for sensitive Google Workspace account actions 
There are now stronger safeguards for sensitive actions taken in your Google Workspace account. These apply to actions that, when done by hijackers, can have far reaching consequences for the account owner or the organization it belongs to. | Learn more. 


The Google Meet and Google Duo app icons are changing, additional information for Google Workspace users 
As part of the announcement that we are upgrading the Duo experience to include all Google Meet features, users will now begin to see their app name and icon update to Google Meet. | Learn more. 


Better location context for events and RSVPs in Calendar 
We’ve made it even easier to use RSVPs in Google Calendar and let others know how you’re planning to join a meeting. | Available to Google Workspace Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Education Standard, Teaching & Learning Upgrade, Nonprofits, and legacy G Suite Business customers only. | Learn more. 


Improved notifications when editing Microsoft Office files in Docs, Sheets, and Slides 
We’ve rolled out a series of improvements to the notifications you see when editing a Microsoft Office-formatted file with Office editing mode. | Learn more. 


Unified experience for Gmail logs in BigQuery, configure your existing Gmail logs to route to Workspace logs 
In the coming months, we will move the location of the existing Gmail logs in BigQuery to Google Workspace logs and reports in BigQuery. | Available to Google Workspace Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Plus, Education Standard customers only. | Learn more. 


Google Meet call control for USB peripheral devices
We've introduced additional call control for Google Meet which will allow you to toggle between mute and unmute using headsets, speaker microphones, and other USB peripheral devices. | Learn more. 


Control visibility of admin alerts with admin role privileges
There is a new control that allows super admins to create a custom rule which ensures only admins with the DLP privilege can see DLP alerts. | Learn more.


For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

Google Workspace Updates Weekly Recap – August 12, 2022

New updates

Unless otherwise indicated, the features below are fully launched or in the process of rolling out (rollouts should take no more than 15 business days to complete), launching to both Rapid and Scheduled Release at the same time (if not, each stage of rollout should take no more than 15 business days to complete), and available to all Google Workspace and G Suite customers. 


Delegate access to a shared inbox using a group address 
You can now give an entire Google Group access to your Gmail account through mail delegation. With this feature, delegated users can read, send, and delete messages on the account owner's behalf. We hope this will enable teams to more effectively process incoming requests and tasks via a single shared email address. | Available to Business Starter, Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Frontline, Nonprofits, and legacy G Suite Basic and Business customers only. | Learn more. 


Granular controls for app allowlisting in the Google Workspace Marketplace 
Admins can now choose which Google Workspace Marketplace apps are available to be installed by users in a particular department (OU) or group by managing Marketplace apps on their allowlist. Previously, admins could only manage the allowlist for an entire domain. Additionally, the Marketplace apps access settings, Allow all apps, Allow selected apps, and Block all apps, can now be set for your entire organization or for an OU or group. This new functionality provides a solution when only a subset of domain users need permissions to install certain Marketplace apps. Examples include Chat apps required for your Engineering organization and IT security group or Classroom add-ons required for high-school teachers. | Available to Business Starter, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Frontline, Nonprofits, and legacy G Suite Basic and Business customers only. | Learn more. 


Seamlessly delete subsets of Sites 
Site editors can now delete a page with subpages and delete pages that were copied into another site during a partial site copy. | Roll out to Rapid Release began August 8, 2022; launch to Scheduled Release planned for August 29, 2022. | Learn more. 



Previous announcements 

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.


Office Building support for Working Locations 
We’ve added the ability to select a specific office building as your working location. | Available to Google Workspace Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Nonprofits, and legacy G Suite Business customers only. | Learn more. 


Improving data privacy with Client-side encryption for Google Meet 
We’ve added Workspace Client-side encryption to Google Meet, giving customers increased control over their data. | Available to Google Workspace Enterprise Plus, Education Standard, and Education Plus customers hosting client-side encrypted calls only. | Learn more. 


Stronger protection for sensitive Google Workspace account actions 
There are now stronger safeguards for sensitive actions taken in your Google Workspace account. These apply to actions that, when done by hijackers, can have far reaching consequences for the account owner or the organization it belongs to. | Learn more. 


The Google Meet and Google Duo app icons are changing, additional information for Google Workspace users 
As part of the announcement that we are upgrading the Duo experience to include all Google Meet features, users will now begin to see their app name and icon update to Google Meet. | Learn more. 


Better location context for events and RSVPs in Calendar 
We’ve made it even easier to use RSVPs in Google Calendar and let others know how you’re planning to join a meeting. | Available to Google Workspace Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Education Standard, Teaching & Learning Upgrade, Nonprofits, and legacy G Suite Business customers only. | Learn more. 


Improved notifications when editing Microsoft Office files in Docs, Sheets, and Slides 
We’ve rolled out a series of improvements to the notifications you see when editing a Microsoft Office-formatted file with Office editing mode. | Learn more. 


Unified experience for Gmail logs in BigQuery, configure your existing Gmail logs to route to Workspace logs 
In the coming months, we will move the location of the existing Gmail logs in BigQuery to Google Workspace logs and reports in BigQuery. | Available to Google Workspace Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Plus, Education Standard customers only. | Learn more. 


Google Meet call control for USB peripheral devices
We've introduced additional call control for Google Meet which will allow you to toggle between mute and unmute using headsets, speaker microphones, and other USB peripheral devices. | Learn more. 


Control visibility of admin alerts with admin role privileges
There is a new control that allows super admins to create a custom rule which ensures only admins with the DLP privilege can see DLP alerts. | Learn more.


For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

Control visibility of admin alerts with admin role privileges

What’s changing 

We’re introducing a new control that allows super admins to create a custom rule which ensures only admins with the DLP privilege can see DLP alerts. Previously, DLP alerts were visible to all admins — this change helps ensure the right people have access to list, update, or delete alerts. Further, this cuts down on the visibility of alerts that aren’t relevant to specific admins. 



Getting started 


Rollout pace 

  • This feature is available now for all users. Availability Available to all Google Workspace customers, as well as legacy G Suite Basic and Business customers 

Resources 

Unified experience for Gmail logs in BigQuery, configure your existing Gmail logs to route to Workspace logs

What’s changing 

In the coming months, we will move the location of the existing Gmail logs in BigQuery to Google Workspace logs and reports in BigQuery. This change will only impact existing Google Workspace customers, who have BigQuery Export enabled. New customers will be guided through setting up a Workspace BigQuery project for Gmail logs. 


While this change is happening, for a brief period of time, Gmail data will be exported to both the Gmail logs and the Workspace logs — existing Google Workspace customers who are impacted will receive an email notification with more information in the coming weeks. 

Gmail logs in BigQuery 



                
 Migrating to Unified Workspace logs in BigQuery







Who’s impacted 

Admins


Why it’s important 

This change will create a single space to access all of your Google Workspace audit events and eliminate the need to switch between various sources of truth. 


Once this merger is completed, you will not be able to use Gmail logs in BigQuery in the Admin console. Visit the Help Center for more information, including detailed step-by-step instructions on handling this change. 


Additional details

Temporary dual export period and BigQuery storage requirements 
Once Gmail logs are set to be exported to Workspace Logs, this data will temporarily exported to two destinations: 
  • Your previous, Gmail-only BigQuery project 
  • Your new or existing Workspace BigQuery project, which stores data for all Google Workspace applications 

This will also impact your BigQuery quotas limits and how often they have to refresh, as well as the cost associated with exporting logs to BigQuery. To avoid impact on your quotas and duplicative data, we strongly recommend turning off Gmail log exports to your Gmail-only BigQuery projects. 


Getting started 


Rollout pace 


Availability 

  • Available to Google Workspace Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Plus, Education Standard 
  • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers 

Resources 

The Google Meet and Google Duo app icons are changing, additional information for Google Workspace users

What’s changing 

In June 2022, we announced that we are upgrading the Duo experience to include all Google Meet features, creating a single solution service for both video calling and meeting. 


Meeting features have been rolling out to the Duo app over the last several weeks, and now users will begin to see their app name and icon update to Google Meet. Visit the Help Center for more information on this change, and the Keyword for the latest on the upgraded experience. 



Additional details 

We’d like to share more information about about what this change means for Google Workspace users: 


Personal Google accounts are already accessible in Google Meet today, allowing users to switch between personal and work accounts as needed. As before, a user's ability to access domain-specific meetings with the personal Google accounts is determined by the privacy setting configured by their admin. 


Users will only see Duo features— like calling or messages—on their Google account through work if Duo is enabled via the Additional Google services control. 


Getting started 

  • Admins: As the admin, you can: 
    • Manage Duo video calling access features by turning off the Additional Google services control. If you turn OFF the Additional Google Services control for your users, you’ll also disrupt any apps without individual ON/OFF switches. Note: This applies to Duo video calling features only, this will not impact Meet functionality. 
    • If your organization uses a mobile device management system, and Duo is currently blocked, we strongly recommend allowlisting Duo so users can install the new Meet app. 
    • Control Google Meet access using the Admin console. To prevent your users from losing access, we recommend keeping Google Meet ON for your organization.  
    • Visit the Help Center to learn more about how Duo is being upgraded. 


  • Education Admins: 
    • Users under 18: Duo is currently restricted for users under 18. Admins do not need to change any settings to ensure that under 18 users will continue to not have access to Duo calling features when the Duo app is updated. 
    • Users over 18: If you have the Additional Google services control enabled, users over 18 will have access to Duo calling features when the app name and icon changes to Meet. 
      • If you do not want over 18 users to have access to Duo calling features, turn the Additional Google services control off which will prevent users from using all Additional Services that do not have an individual ON/OFF control.

Rollout pace 


Availability

  • All Google Workspace customers, as well as legacy G Suite Basic and Business customers 
  • All users with personal Google Accounts 

Resources 

Stronger protection for sensitive Google Workspace account actions

What’s changing 

We’re introducing stronger safeguards for sensitive actions taken in your Google Workspace account. These apply to actions that, when done by hijackers, can have far reaching consequences for the account owner or the organization it belongs to. 


Google will evaluate the session attempting the action, and if it’s deemed risky, it will be challenged with a “Verify it’s You” prompt. Through a second and trusted factor, such as a 2-step verification code, users can confirm the validity of the action. For example, if a malicious actor gains access to your account and attempts to change the name on your account, the action will be blocked until the true account owner can verify that this was intentional. 


Note that this feature only supports users that use Google as their identity provider and actions taken within Google products. SAML users are not supported at this time. See below for more information. 



Who’s impacted 

Admins and end users 


Why it matters 

This added layer of security helps to intercept bad actors who have gained access to a user's account, further protecting their data and your organization's sensitive information. Additionally, these challenge attempts will be logged as an audit event allowing for further admin investigation. 

Additional details 

In the Admin console under Users > “UserName” > Security, admins can toggle login challenges OFF for ten minutes if a user gets stuck behind a "verify it's you prompt". We strongly recommend only using this option if contact with the user is credibly established, such as via a video call. 

Getting started 


Rollout pace 


Availability 

  • Available to all Google Workspace customers, as well as legacy G Suite Basic and Business customers 

Resources 

Improving data privacy with Client-side encryption for Google Meet

What’s changing 

We are adding Workspace Client-side encryption to Google Meet, giving customers increased control over their data. Meet already encrypts all of your data at rest and in transit between our facilities — client-side encryption gives users direct control of their encryption keys and the identity service that they choose to authenticate for those keys. Additionally, this guarantees that Google cannot access audio and video content under any circumstances and helps you meet regulatory compliance in many regions. 


Bringing Client-side encryption to Meet is another significant milestone in Google Workspace’s industry-leading encryption work, offering our users the highest degree of protection and control over their data. 


Workspace Client-side encryption for Meet will be available first on the web, with support for meeting rooms and mobile devices coming later. 


Important note: At this stage, only participants within your Workspace organization can be invited to client-side encrypted calls — guest access will be introduced in the future. 


Why it’s important 

Client-side encryption uses keys supplied by the customer to add another layer of encryption to video and audio, in addition to using the default encryption that Google Meet provides. This is used for calls that need an extra level of confidentiality and makes the media indecipherable even to Google. Those could be calls regarding sensitive intellectual property or when required for compliance in highly regulated industries. 


Additional details 

Notes about using client-side encryption: 
  • The organizer needs to join for the call to start when client-side encryption is turned on. If participants join early, they will need to wait for the organizer to join before communicating with others. 
  • Some functions that require server-side processing or parsing of call media will not work, e.g. cloud-based noise cancellation or closed captions. 
  • Client-side encryption does not support dialing-in/out 

Getting started 

  • Admins: An administrator needs to configure how Meet connects to a key service and identity provider before turning on client-side encryption for users. Learn more about configuring Client-side encryption here. 
  • End users: 
    • Organizing calls: 
      • In a calendar event with Meet video conferencing, navigate to Settings (cog-wheel icon) > Security and select “Add encryption”. 
      • Note: All participants must be invited to the call, either via the Calendar event or within the meeting. 
    • Participating in calls: 
      • Client-side encrypted meetings will start once the meeting organizer arrives — there are no other restrictions or changes for meeting participants. 

Rollout pace 

  • Users on supported Google Workspace editions can create Client-side encrypted calls. 

Availability 

  • Available to Google Workspace Enterprise Plus, Education Standard, and Education Plus customers hosting client-side encrypted calls 
  • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, The Teaching and Learning Upgrade, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers 

Resources 

Google Workspace Updates Weekly Recap – July 29, 2022

New updates

Unless otherwise indicated, the features below are fully launched or in the process of rolling out (rollouts should take no more than 15 business days to complete), launching to both Rapid and Scheduled Release at the same time (if not, each stage of rollout should take no more than 15 business days to complete), and available to all Google Workspace and G Suite customers. 


Support for two simultaneous calls now available on Google Voice 
As part of our efforts to further improve our core calling features, Google Voice now offers the ability to place or receive a second call when you are on an ongoing call. You can quickly decide if you would like to take the second incoming call by placing the current call on hold or by hanging up the current call. You can also reject the second incoming call if you would rather not be interrupted right now.The feature is currently rolling out on Web and will roll out on Android and iOS in the coming weeks. | Available to Voice Starter, Standard, and Premier customers only. | Learn more. 

call waiting


The new integrated view is now the standard experience for Gmail 
At the beginning of 2022, we announced a new integrated view for Gmail, bringing critical applications like Gmail, Chat, and Meet in one unified location. By August 5th, users who have not opted-in will begin seeing the new experience by default, but can revert to classic Gmail via settings. Within the next two months, this will become the default experience with no option to revert back. We will share an update on the Workspace Updates Blog at that time. | Available to Google Workspace Business Starter, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers only. | Visit the Help Center and The Keyword to learn more. 


Previous announcements 

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.



Improving the Google Workspace experience on large screen Android devices 
We’ve added several new features and functionality to products like Google Drive, Docs, Sheets, Slides, and Keep on Android devices as part of our mission to provide a top-class user experience on large screen devices. | Learn more. 

Migrate unmanaged accounts to your domain using new “UserInvitation” API functionality 
We’ve introduced new API functionality that allows you to automate the process of finding conflicting accounts and inviting them to join your organization. | Available to Google Workspace Business Starter, Business Standard, Business Plus, Enterprise Standard, Enterprise, Cloud Identity Premium and Cloud Identity Free customers only. | Learn more. 

Working Location enabled by default 
You are now able to set your working location without having to first enable this feature in your Calendar settings. | Available to Google Workspace Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Standard, Education Plus, the Teaching and Learning Upgrade, and Nonprofits, as well as legacy G Suite Business customers only. | Learn more. 

Use the Cloud Search Query API to set Suggest Filters to enhance Cloud Search results 
We’ve introduced Suggest Filters for Cloud Search. Using the Cloud Search Query API, admins can specify a filter condition that will be pre-applied to keyword suggestions as user types a query. This will surface more relevant suggestions, helping reduce the time users spend searching. | Available to Google Cloud Search customers only. | Learn more. 

Assignments audit data now available in the Admin console 
Google Workspace for Education admins can now view Assignments data in their audit logs. Using this data, admins can find and act on Assignments related events such as who removed a student from a video call, when assignment files were created or submitted, and more. | Available to Google Workspace Education Fundamentals, Education Plus, Education Standard, and the Teaching and Learning upgrade customers only. | Learn more. 

Better search and suggestion options in Gmail 
Gmail has more accurate and circumstantial search suggestions with better customization as a result of our new machine learning models. | Available to Google Workspace Business Starter, Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Frontline, and Nonprofits customers only. | Learn more. 

New integrated email marketing tools for Gmail 
We’ve added two new features in Gmail that you can use to easily send professional-looking emails to large audiences: layouts and multi-send. | Available to Google Workspace Business Standard, Business Plus, Enterprise Starter, Enterprise Standard, Enterprise Plus, Education Standard, Education Plus, Nonprofits, Workspace Individual, and legacy G Suite Basic customers only. | Learn more. 

For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

New integrated email marketing tools for Gmail

What’s changing

For select Google Workspace editions, we’re adding two new features in Gmail which you can use to easily send professional-looking emails to large audiences: 

  • Layouts: You can select from a predefined set of email templates, which feature images, text elements, and buttons. You can further customize these templates with your own color schemes, logos, images, footer text, and links. Layouts: You can select from a predefined set of email templates, which feature images, text elements, and buttons. You can further customize these templates with your own color schemes, logos, images, footer text, and links. 




  • Multi-send: This feature allows you to send mass emails without the need to BCC all recipients. By default, multi-send emails include an unsubscribe link unique to each recipient — anyone who unsubscribes is automatically excluded from future multi-send emails from you. 


Additionally, we are introducing an Admin setting to control whether these features are on or off for your users. The admin settings are rolling out now, allowing time to configure availability for their end users in advance. See below for more information. 


These features are only available for Gmail on the web at this time. 


Who’s impacted 

Admins and end users 


Why you’d use them 

We hope these features allow you to quickly and easily create announcements, newsletters, and other mass-email scenarios. Additionally, your recipients will have the ability to unsubscribe from future multi-send emails. 


Getting started 

Admins: 
  • Layouts: This feature is ON by default and at the domain level. You can turn layouts on or off for specific domains, OUs, or groups. 
  • Multi-Send: 
    • For Google Workspace Enterprise Starter and above, as well as Google Workspace for Education customers, this feature is restricted to internal recipients by default. 
    • For Google Workspace Business and Nonprofit customers, multi-send is available by default for external recipients. 
    • For all Google Workspace editions, you can turn multi-send ON for external recipients at the OU or Group level 

  • Note: 
    • These feature launches do not impact the existing send quotas for users.
    • If your organization has disabled Google Drive, Gmail layouts are turned off automatically. 

  • Visit the Help Center to learn more about managing Gmail settings for your users, customizing access policies for different organizational units or groups. 

  • End users: If enabled by your admin, visit the Help Center to learn more about using layouts and multi-send in Gmail. 

Rollout pace 

Admin Controls 
End user functionality 


    Availability 

    • Available to Google Workspace Business Standard, Business Plus, Enterprise Starter, Enterprise Standard, Enterprise Plus, Education Standard, Education Plus, Nonprofits, Workspace Individual, and legacy G Suite Basic customers 
    • Not available to Google Workspace Essentials, Education Fundamentals, Education Teaching & Learning, Business Starter, Enterprise Essentials, and Frontline customers as well as legacy G Suite Business customers 

    Resources