Tag Archives: Admin Console

Google Meet hardware event logs are now available in the security investigation tool and BigQuery

What’s changing 

We’re pleased to announce a new set of features to help you conduct deeper analysis and more flexible issue detection within your Google Meet hardware fleet:
 
First, Meet hardware log events are now captured in the security investigation tool. Within the tool, you’ll be able to view historical events for your devices and create customized alerts. You can also click out to Meet hardware log events from individual device pages (Devices > Google Meet Devices > [Device Name]), allowing you to find information on specific devices even faster.

Meet hardware logs in the security and investigation tool




Secondly, through integration with BigQuery, Meet hardware logs can be imported from the security investigation tool to be analyzed at scale. This is a powerful new tool that can be used to build customized views of your historical data across your entire hardware fleet. For example, you can use this data to identify which devices are the most used across your organization, which devices are experiencing the most issues within a specific timeframe, and more.




Specifically, you’ll be able to filter by the following details: 



Getting started

Rollout pace


Availability

The security investigation tool is available for Google Workspace:
  • Enterprise Standard and Plus
  • Education Standard and Plus
  • Enterprise Essentials Plus
  • Frontline Standard
  • Cloud Identity Premium
Reporting logs in BigQuery is available for Google Workspace:
  • Enterprise Standard and Plus
  • Education Standard and Plus
  • Enterprise Essentials Plus
  • Frontline Standard

Manage all Calendar interop settings from the Admin console

What’s changing

Previously, the interoperability settings that allow Calendar users to see availability of colleagues using Outlook and vice-versa were split between two separate locations: in the Admin console and from https://calendar.google.com/Exchange/tools. Going forward, all interoperability settings will be housed in the Admin console at Apps > Google Workspace > Settings for Calendar > Calendar Interop management. This will make it easier for admins to view and manage their interop setups.



Getting started


Rollout pace

Availability

  • Available for Google Workspace customers except Google Workspace Essentials and Workspace Individual Subscribers 

“Take notes for me” in Google Meet is rolling out soon; pre-configure access with a new admin setting

What’s changing 

“Take notes for me,” an AI-powered feature in Google Meet that automatically takes notes during your meetings, will be rolling out soon. Prior to end user availability, admins can now configure whether their users can use this Google AI note-taking feature with a new Admin console setting. This setting can be configured in the Admin console by going to Apps > Google Workspace > Google Meet > Gemini Settings. 


Apps > Google Workspace > Google Meet > Gemini Settings > Google AI note-taking


Similar to Meet transcripts Admin settings, this control gives admins more flexibility to test the feature within specific Organizational units (OUs) or Groups before deploying the feature more broadly within their organization.


“Take notes for me” is available for customers who have a Gemini Enterprise, Gemini Education Premium, or AI Meetings and Messaging add-on. Only users who are assigned one of these licenses will be able to use the note-taking feature. 


We’ll provide more information and timing on end user availability about “Take notes for me” in the coming weeks here on the Workspace Updates blog.


Additional details

Notes documents will be stored in the meeting owner’s drive folder and will follow the Meet retention policy that your organization has configured. If you are currently testing this feature in Workspace Labs and Alpha, your experience will change from respecting the Drive retention policy to respecting the Meet retention policy. 


Getting started

  • Admins: Take notes for me will be ON by default and can be configured at the OU and Group level in the Admin console by going to Apps > Google Workspace > Google Meet > Gemini Settings > Google AI note-taking. If you want all of your users to receive the feature at once, you may want to consider turning this setting OFF and then after rollout switching it to ON.


Rollout pace

  • Rapid and Scheduled Release domains: Gradual rollout of the admin setting (up to 15 days for feature visibility) starting on August 13, 2024 with expected completion on August 21, 2024

Availability

Available for Google Workspace customers with the:
  • Gemini Enterprise add-on
  • Gemini Education Premium add-on
  • AI Meetings & Messaging Add-on

Available in open beta: configure third-party apps by select API scopes

What’s changing 

When your users sign in to third-party apps using the "Sign in with Google" option (single sign-on) or use OAuth to share their data with those apps, you can control what access those apps have to your organization’s Google data using app access controls. 


Admins currently can configure the third-party apps as “Trusted”, giving them access to all OAuth scopes or as “Limited”, giving them access to scopes only from Google services which are not restricted. Beginning today, we’re giving admins another layer of granular control for third-party apps. Specifically, you can now configure apps to be limited by selected OAuth 2.0 Scopes for Google APIs, such as Drive or Gmail scopes. This helps ensure that these apps do not gain additional access without admin consent based on new API scopes that they might request in the future, keeping data access limited to only what is deemed absolutely necessary by admins.




Getting started

Rollout pace


Availability

  • Available to all Google Workspace customers, as well as Cloud Identity Free and Premium customers


Resources


Google Workspace Updates Weekly Recap – August 2, 2024

3 New updates

Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.


More granular control for Google Apps Script
We’re introducing a new toggle in the Admin console that adds controls for who can access and execute Google Apps Script scripts.
  • Users who have Apps Script turned on can use it to create, edit, and execute Apps Script scripts.
  • When disabled, end users can’t create or edit scripts and script and trigger executions are blocked. 
By default, Apps Script is turned on for all users in an organization. To change this setting, navigate to the Admin console > Apps > Google Workspace > Drive and Docs > Google Apps Script. This setting will not take effect if the entire Drive and Docs Service is turned OFF.  | Rolling out now to Rapid Release and Scheduled Release domains. | Available to Google Workspace customers. | Learn more about turning Apps Script on or off for users.


Improving tables in Google Sheets
Following our announcement of tables in Google Sheets, we’re excited to introduce improvements to the experience. More specifically, you can now: 

1. Add table rows (anywhere in a table) and columns (to the right of a table) from an easy button at the edge of a table. 
Add table rows and columns from an easy button at the edge of a table.

2. Automatically set column types when converting a range to a table.
Automatically set column types when converting a range to a table

3. Drag values down or across to auto-fill cells, which expands the table automatically.

Drag values down or across to auto-fill cells, which expands the table automatically.

4. Use spaces in table names, meaning you can name something “Project tracker” instead of “Project_tracker”.

Use spaces in table names
Rollout to Rapid Release domains for #2 is complete; launch to Scheduled Release domains planned for August 5, 2024. | Rolling out to Rapid Release domains now for #1, #3 and #4; launch to Scheduled Release domains planned for August 14, 2024. | Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts. | Visit the Help Center to learn more about using tables in Google Sheets. 

Google Meet annotation updates for mobile devices 
Earlier this year, we announced annotations for Google Meet, which made it possible for presenters and their appointed co-annotators to highlight content or make other notations over presented content. Beginning today, Android users can appoint co-annotators. Previously on Android devices, it was only possible for presenters to use annotations. | Rolling out now to Rapid Release and Scheduled Release domains. | Available to Google Workspace Business Starter, Standard, and Plus; Enterprise Starter, Standard, and Plus; Frontline Starter and Standard; Essentials, Enterprise Essentials, and Enterprise Essentials Plus; Education Standard, Plus, the Teaching & Learning Upgrade; Workspace Individual subscribers. | Visit the Help Center to learn more about using annotations in Google Meet.


Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.


Catch up on followed threads from the home shortcut in Google Chat 
We’re introducing the ability to follow and review threads within the home shortcut in Chat. | Learn more about threads in home. 

Gemini in the side panel of Google Drive introduces a new PDF viewing experience 
You can now interact with the Gemini side panel while viewing PDFs. | Learn more about PDF viewing with Gemini. 

Allowlist and Audit Logs for URLs accessed from Google Apps Script and Google Sheets 
Admins can now monitor which URLs are being accessed by referencing new logs that we’re adding to the audit and investigation page. Admins can then create an allowlist that controls which of those URLs they’d like to enable/disable. | Learn more about accessed URLs. 

Prevent downloading, printing, or copying files by combining Data Loss Prevention rules with Context-Aware Access conditions 
Today, we’re expanding protections by enabling admins to combine DLP rules with Context-Aware Access conditions. | Learn more about combining rules and conditions.

Admins can now centrally set default grading settings for teachers in their district
Classroom admins can now centrally set default grading settings for teachers in their district using the Admin console. | Learn more about default grading settings.

Educators can now create new classes in Google Classroom using SIS data and import grading periods from the SIS
Teachers can now create new classes by importing information such as student rosters, co-teachers, grading categories, and grading periods from their SIS. Also, teachers can now import their grading periods from their student information systems (SIS) into Classroom. | Learn more about new SIS capabilities. 


Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.



Rapid Release Domains: 
Scheduled Release Domains: 
Rapid and Scheduled Release Domains: 

Paused rollouts

We have paused the rollout for this feature while we evaluate performance and quality. We will provide an update with new rollout information as soon as possible. 

For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).  


Prevent downloading, printing, or copying files by combining Data Loss Prevention rules with Context-Aware Access conditions

What's changing

Controlling access to sensitive content stored in Google Drive is a critical component for any company's security posture. One way admins can do this is with Data Loss Prevention (DLP) rules that enable Information Rights Management (IRM) on specific files. This allows admins to disable actions that can lead to accidental or deliberate data exfiltration, such as downloading, copying, and printing. 


Today, we’re expanding on these protections by enabling admins to combine DLP rules with Context-Aware Access conditions. When combined, admins can configure if IRM should be enforced based on context conditions, like a user’s location or IP address, are met. This gives admins the ability to configure context-aware-access conditions in a more granular fashion — previously, context-aware-access could only be used to restrict full access to an entire application. This is an important step forward in applying administrator controls at the document level.



Getting started

  • Admins: This feature will be OFF by default and can be enabled per-file by creating DLP rules with a CAA access level attached. See this help center article for more information on how to configure these rules.

  • End users: Depending on your admin configuration, you may be restricted from taking certain actions on Drive files.

Rollout pace

Availability

Available for Google Workspace:


AI Classification in Google Drive is now available for the Gemini Education Premium add-on

What’s changing

We’re expanding the availability of AI Classification in Google Drive to Google Workspace for Education customers with the Gemini Education Premium add-on. Powered by privacy-preserving AI models that can be uniquely trained on the specific needs of your organization, AI classification empowers IT teams to automatically and continuously identify, classify sensitive files. The challenge with label-based policies is that they are only effective on files that are correctly identified and labeled. Further, labeling files placed a considerable manual burden on Admins. 


This is where AI Classification can help. By training models on customer-identified examples of content that match their data classification definitions, AI Classification can evaluate files where text can be extracted to see if it should be labeled. This helps enable organizations to achieve label coverage at a scale and accuracy that is very difficult to accomplish through traditional means and manual Admin intervention. Once labeled, classified files can then be further protected with existing data loss prevention (DLP) controls, lifecycle management policies, as well as audit and reporting use cases.

AI Classification in the Admin console

AI Classification in Google Docs






Getting started



Rollout pace


Availability

  • Available for Google Workspace for Education customers with the Gemini Education Premium add-on.
This feature is already available to customers with the Gemini Enterprise add-on, and via the AI Security add-on for select Google workspace customers.

Label administration is becoming more discoverable and flexible in the Admin console

What’s changing

We’re introducing several changes to make labels more discoverable and flexible for organizations:

1. Label Manager’s New Location: The Label Manager interface is moving from a standalone UI into the Workspace Admin console. Prior to this change, Label admins had to navigate to https://drive.google.com/labels to manage labels in their organization. Going forward, admins can access the Label Manager tool by going to Security > Access and data control in the Admin console. 

Label Manager’s New Location
2. Combined Label Types: Currently, there are two label types: Badged and Standard. Badged labels are single-field option lists with prominent visual display and coloring. Standard labels support complex metadata structures with up to ten fields of various formats. To make labels more adaptable, we’re combining these label types together, and going forward, every label will support up to 10 fields, one of which can be set as a “Badged list”. 

Combined Label Types

3. Label Ordinality: With the combination of label types, organizations will now be able to create many labels with badge fields. As a result, there will be scenarios in which multiple badges are applied to a single file. Some UI surfaces only support the display of a single badge, so to address this, admins will now be able to configure label ordinality in the Label Manager list view. The ranking of label ordinality will govern which label is prominently displayed when there are multiple badged labels on the same file. 

Label Ordinality

Getting started 

  • Admins: To access the Label Manager in the Admin console, go to https://admin.google.com/ac/dc/labels or Security > Access and data control > Label manager). 
  • End users: There is no end user setting for this feature. 

Rollout pace 


Availability

Available for Google Workspace: 
  • Business Standard, Plus
  • Enterprise Standard, Plus 
  • Essentials Starter, Enterprise Essentials, Enterprise Essentials Plus 
  • Education Standard, Plus 
  • Frontline Starter, Standard 

Resources 

Enable Classification labels on specific Google Workspace applications

What’s changing

Admins can create classification labels for users to apply to files in Google Drive. These classification labels are useful for many common workplace scenarios, including records management, classification, structured finding, reporting, auditing, and more. 

To improve granularity in enabling & governing labels, we are replacing and improving the existing “Labels” setting within Apps > Google Workspace > Drive & Docs and adding label-level application toggles to the Label Manager tool. 

Classification labels can be applied to a Workspace application once it's selected during the setup process. A lock icon will be displayed in line with the application toggle when the label is referenced by a policy, such as a DLP rule. To remove all rules that reference a specific label, go to the Data protection section of the Admin console > Security > Access and data control. 

The active labels in your Workspace domain will continue to function and will be auto-enabled for Drive & Doc as a result of this update.
 

Getting started 

Rollout pace

  • This feature is available now 

Availability 

Available for Google Workspace: 
  • Business Standard, Plus 
  • Enterprise Standard, Plus 
  • Essentials Starter, Enterprise Essentials, Enterprise Essentials Plus 
  • Education Standard, Plus 
  • Frontline Starter, Standard

Resources 

Clearer re-enrollment for Google Meet hardware devices

What’s changing

We're updating the way Google Meet hardware devices are re-enrolled to provide a more intuitive experience for administrators.


Previously, if a device was re-enrolled without first being deprovisioned, the Admin console would reuse its existing record and device ID — this is changing: 


Starting July 17, 2024, if you re-enroll a device without first deprovisioning it, the Admin console will create a completely new record with a new device ID. The old record will still be there, and you'll need to deprovision it to free up its license. Settings from the old record won't automatically carry over to the new one.

Getting started

Rollout pace

Availability

  • This update impacts all Google Workspace customers with Meet Hardware devices.

Resources