Use group-based controls for LDAP client access permissions

Quick launch summary 

You can now configure the access permissions for an LDAP client by group. Previously, controls were only available at the organizational unit (OU) level.

LDAP clients are in the secure LDAP service, which enables users to access traditional LDAP-based apps and IT infrastructure using their G Suite credentials. This new feature allows you to allow or prevent specific groups of users from signing in to an application. This can help you make sure only appropriate users are able to access and use specific applications.

Group-based controls for LDAP clients in the Admin console 

Getting started 



Rollout pace 




Availability 


  • G Suite Enterprise, G Suite for Education, G Suite Enterprise for Education, and Cloud Identity Premium customers 
  • Not available to G Suite Basic, G Suite Business, G Suite for Nonprofits, and Cloud Identity Free customers 

Resources