What’s changing
We’re launching two new settings that will allow admins to control whether their users can add recovery email information and phone information to their Google Workspace account.
By default, the ability to add a recovery email or phone number is ON for most Workspace users and K-12 super admins, but it should be noted that:
- Adding email and phone recovery information is OFF by default for K-12 users.
- Phone number recovery collection is always enabled for super admins regardless of whether it’s disabled in the admin console.
Any changes admins make to these settings will overrule the existing organizational unit (OU) settings, except for super admins as stated above.
Security > Account Recovery > Recovery information
Who’s impacted
Admins and end users
Why it’s important
Adding recovery information to your account is helpful for keeping users’ accounts more secure, recovering users’ accounts as well as evaluating security related events, such as risky logins or re-authentication attempts. However, we know that there are a variety of reasons that customers would want to prevent their users from doing so. For example, turning recovery information off can help customers stay compliant with local privacy regulations, such as GDPR. Or admins can opt to
add recovery information themselves. This update gives admins the control to decide which configuration makes the most sense for their users.
Getting started
Rollout pace
Availability
- Available to all Google Workspace customers.
Resources
What’s changing
Beginning today, we’re pleased to announce that all Google Workspace Admins with the
AppSheet service privilege can access the AppSheet Admin Console. The AppSheet Admin console is a consolidated location to monitor, manage and govern AppSheet across your organization. Previously, the AppSheet Admin Console was only available to those with an AppSheet Enterprise Plus license in public preview, but now any admin with sufficient privileges has access to monitor and manage their users (note: some features require an enterprise license for the admin and the user).
The AppSheet Admin Console gives admins visibility into the users, apps and licenses associated with their AppSheet users. From here, admins can:
- Review the most popular apps and creators.
- Review how many apps are owned and used for every user account.
- View all of their organization's app users.
- Verify the AppSheet licenses purchased, assigned and used.
- Export a list of accounts, users, apps and licenses.
Since Public Preview, we’ve added more functionality:
- Historical app usage: Admins can see app usage history for all accounts in their organization up to three months starting today and soon extending to six months.
- Self-serve provisioning: Admins can choose how their enterprise licenses are provisioned - either through license assignment in the Workspace Admin Console or automatically upon login to AppSheet.
- Organizations as the new standard: New and existing Workspace customers can manage all of their secondary domain users under a consolidated AppSheet organization.
The AppSheet Admin Console
Who’s impacted
Admins
Why it’s important
We’ve heard from our customers that in order to effectively manage AppSheet activity in their organizations, they need visibility into its usage. This includes information regarding how many users are using an AppSheet license, who is accessing their teams apps, and more. Expanding access to the AppSheet Admin console provides admins with these critical metrics, enabling them to understand how the tool is being used and govern the use of the tool as needed.
Additional details
The Licenses page will remain in public preview pending some supporting launches and additional enhancements expected early in 2025.
Getting started
Rollout pace
Availability
Resources
What’s changing
Beginning today, admins now have the option to set up a custom OpenID Connect (OIDC) profile for single sign-on (SSO) with Google as their Service Provider. OIDC is a popular method for verifying and authenticating the identities - this update gives admins more options for their end users to access cloud applications using a single set of credentials. Previously, only OIDC with pre-configured Microsoft Entra ID profile was supported in addition to SAML.
Custom OIDC profiles can be configured in the Admin console at >Security > Authentication > SSO with third party IdP
Getting started
Rollout pace
Availability
- Available for all Google Workspace customers except Google Workspace Essentials Starter customers and Workspace Individual Subscribers.
- Also available for Cloud Identity and Cloud Identity Premium customers
Resources
Comment Wall
You need to be a member of hangarchat.com to add comments!
Join hangarchat.com