Google workspace admin console settings See full list on support. Through the API, you can do the following: Modify a group's settings for internal and external group access. Choose an option: Private to the owner—Only the file owner can access new files. Some features may require having the Meet hardware Manage organizational unit settings privilege. To set up your Google Workspace MX records, you need to complete the following steps: Add Google’s MX record in your domain host; Activate Gmail in the Google Admin console; Step 1: Add Google's MX record to your domain. Google Chat: You can manage how people chat with people outside your organization, visit Set external chat options. Mar 25, 2025 · The Admin SDK API is a collection of RESTful interfaces that empower administrators to manage Google Workspace organizations at scale. With Admin Console, you can manage Workspace for your organization. ; Tip: If you have many users, you can use a spreadsheet to update usernames. For more information about the Admin console, see Use your Admin console. Requires turning on Groups for Business. We recommend that you set up more than one administrator in your organization with access to the security settings in the Google Admin console. ) You can turn off NotebookLM on or off as an additional service. Security: Manage security settings in Google Workspace—enforce 2-Step Verification, monitor and enforce passwords, and more. com to open Google Drive. 0, 1. Upload files to spaces in the integrated Gmail experience. com and sign in with an administrator account for the Google Workspace domain. Set up an additional administrator—If an administrator can’t sign in to their administrator account, another administrator can generate backup codes for them. This administrator can perform the following tasks both from the Admin console and using the Admin API: View user profiles and your organizational structure; Create new groups in the Admin console; Manage members of groups created in the Admin console; Manage group access settings Click Allowlist app. You can manage default templates and themes only after you’ve activated organization branding. Google Meet hardware will try to turn your display off and on again. How the Apple Device Enrollment integration works If you aren’t using an administrator account, you can’t access the Admin console. Go to Menu Devices > Mobile and endpoints > Settings > Windows . com with your full admin address (name@example. Allows the specified administrator accounts to sign in to a company-owned device after it’s reset to its factory settings from the Admin console. Go to Menu Security > Security center > Dashboard . Allow users to search your organization’s Directory in the iOS Contacts app. Just turn Forms on or off for those people in your Admin console. Mar 25, 2025 · Anyone can use Apps Script to automate Admin console tasks in a web-based, low-code environment. Make sure to identify teachers and staff as over the age of 18. The Meet quality tool privilege is located under Services > Google Meet > Manage Meet Settings > Admin quality dashboard access. Supported for all Google Workspace, Cloud Identity, and G. Customization limits. To grant privileges in the Admin console without allowing admins to perform actions in an API, turn off API access for your account. Follow the steps in Decide which users should use SSO to assign the pre-configured OIDC profile to selected organizational units/groups. You can turn Google Workspace smart features on or off. Admin console email settings (for example, a list of preauthorized senders) overrides spam settings. Get the settings for Google Groups to audit in Sheets. Learn more about address lists. Click Authenticate email. Users can view email and calendar events in Google mobile apps (recommended) or in iOS Google Workspace file handling. ; In the Selected domain menu, select the domain where you want to set up DKIM. Alternatively, if you signed up with a verified domain or a Gmail address, you can go to mail. From the Admin console home page, go to one of these pages: Apps Google Workspace Gmail Compliance. Go to Menu Apps > Google Workspace > Gmail > Routing . Solution: Work with another administrator within your organization. If an admin doesn't have the required privileges for specific settings, those settings don’t appear on the security health page. If any Google services required by the iOS apps have restricted app access, you must also explicitly trust iOS apps. Go to Menu Devices > Mobile & endpoints > Settings > iOS . Explore Admin dashboard features including security, endpoint management & more. Not supported for Business Starter. If you aren’t using an administrator account, you can’t access the Admin console. For details, go to Allow external sharing only with trusted domains. To do so, you connect Apple Business Manager or Apple School Manager with your Google Workspace or Cloud Identity subscription. Autowipe devices that don't sync within a specified period If you aren’t using an administrator account, you can’t access the Admin console. The security center expands on advanced settings in the Google Admin console to surface your security data through insightful, customizable reports that you can share with colleagues in your organization. Change power-saving settings. ; Select which email addresses to include in the Directory: Show all email addresses—Show the user's primary email address and any alias addresses. Configure discussion archiving and message moderation. If you don't define an organizational structure, all settings you make in your Google Admin console apply equally for all users and devices. You can control whether users let Google AI take notes in meetings. For example, you can reset a user's password, add or remove security keys for multi-factor authentication, and reset user sign-in cookies. However, to edit permitted domains from the Admin console, you must set the token value in the registry file. As a Chrome Enterprise admin, you can control settings that apply when people use a managed ChromeOS device, such as a Chromebook. If you're an administrator of Google accounts for an organization, you can control who uses Google Forms from their account. the Admin console, go to the settings page for the app. Learn more: Assign specific admin roles to a user; Create, edit, and delete custom admin roles; Pre-built administrator roles; Review HIPAA compliance The username (primary email) of the Google Workspace admin assigning the SSO profile must match the primary email address of your Azure AD tenant admin account. This length applies only to the Admin console. All shared drive sharing settings are set to allow. For exact dates, visit Google Workspace Updates. We recommend using the Google Admin console to create Wi-Fi profiles and then apply them to devices during the enrollment process. Edit the group's notifications. For details, go to Apply settings for Windows 10 or 11 devices. Set up TLS For example, granting the privilege to create users in the Admin console also lets admins create users using the API. For details, go to Add and set up AppSheet for Google Workspace. You can set the number of days that messages stay in a user's mailbox, and create settings that: Move messages to trash or delete them permanently when the storage periods expire. com. You can also manage user licenses using the Google Admin console. Go to Menu Devices > Mobile & endpoints > Settings > Universal . Device-level settings apply for anyone who uses the device, even if they sign in as a guest or with a personal Gmail account. Likewise, updating Admin API rights updates corresponding privileges in the Admin console. To review an app and ensure it's the one you want to allow or exclude, click its name to open the app listing. ; Click Turn Off For 10 Minutes. Click the setting you want to change. User Settings: Simplifying Multi-User Management The Configure Chromebooks directions in the Clever GO Badges setup currently show the “legacy” view of Settings in the Google Workspace Admin Console. Supported for all Google Workspace, Cloud Identity, and G Suite editions except as noted Let your users share only with certain organizations outside of your business or school. The service is automatically turned on for users in either of these conditions: The preference for new products is set to Turned on when released (Admin Console > Account > Account settings > Preferences). You can only turn this feature on or off for all users in your You can use Google Cloud Directory Sync (GCDS) to manage licenses for users in your Google Account. If you haven't verified your primary domain, you'll see a Set up Admin Console prompt at the top of the Admin console dashboard that will walk you through the steps to verify. By default, the web session length for Google services is 14 days. Show me how; Click Create Wi-Fi network. If you're a medium-sized business or larger enterprise, make sure to also check the advanced Chat administration link under "Related topics. For help using Google Workspace services, see the Google Workspace user guide to accessibility. Considerations Manage your Google Workspace account with one centralised, secure control panel. Go to Menu Apps > Google Workspace > Gmail > End User Access . Submit Google Forms that require them to share documents outside your organization. Configure any settings. Universal settings (all mobile devices) Block compromised devices ; Require device encryption; Android settings. Note: These settings affect Google Meet meetings, but not calls or messages. You can find the Admin console at admin. You can change power-saving options in the Settings and policies page: Manage your Google Workspace account with one centralised, secure control panel. Other Google services have the session lengths they’re set to. Changes can take up to 24 hours but typically happen Manage your Google Workspace account with one centralised, secure control panel. Set the GCPW token Expand all | Collapse all. Step 2: Enable Windows device If you use Google Cloud Directory Sync, you must pick one way to automatically assign licenses—either the option in the Google Admin console described here or with Google Cloud Directory Sync. ; In the Generate new record box, select your DKIM key settings: See what data you have in your Google Account, including the things you do, like searches, and the things you create, like email. Who can sign in after a factory reset depends on how the device is company-owned and its management client: Click Sharing settings Contact sharing. Sign in to admin. You can turn access to Google Vids on or off. Requires having the Domain settings administrator privilege. Generate a login activity report for your Slides presentation. Choose if you want users to automatically upload Office documents to Google Drive and open them with Google Workspace. Here admins can manage domain resources. The session length for admins using the Google Admin console is set to one hour and cannot be modified. Note : Only super admins can access the security health settings for 2-Step Verification and security-key enforcement for users, as well as groups creation and management. Spam filter settings affect groups users who are in an organizational unit where the setting is applied. Use custom email layouts in Gmail. google. To access apps, you must use OAuth. As an admin managing your organization's Microsoft Windows 10 or 11 devices with Google's Windows device management, you can add custom settings in the Google Admin console. ; Search for the app. Enable login challenges with SSO. By the end, you’ll have the tools to optimize your Admin Console and make your workplace more secure and productive. Customize your account's user groups. Choose an option: Enable automatic upload and file handling—Automatically sets up the cloud upload flow for Google Drive and Google Workspace. Administrator User Guide TABLE OF CONTENTS Overview Get Started Sign in to your Admin console Direct URL Apps Launcher Mobile App Setting Up your Company Profile Profile: Preferences: Smart Features & Personalization Personalization Custom URLs Legal & C You can customize many service settings in the Google Admin console for different users in your organization. Restrict the IP addresses where users can access Google Sync. Trusted domains must use Google Workspace and be domain-verified. Learn how the Google Workspace Admin security dashboard provides your team with security analytics & threat intelligence tools to keep your data safe. You don’t have to remove the existing registry settings because the Admin console settings override them. As an administrator, you can use the Google Admin console to manage all your Google Workspace services. Step 1: Review Windows settings. Related topics. For details, go to Set Calendar sharing options . 1, 1. Click Security. Click BitLocker settings. ; Enter a name for the new list. ${device_resource_name} Unique resource name for a device, as found in the Cloud Identity Device API. No. You can purchase other types of AppSheet licenses in the account billing For example, this might occur if an administrator leaves the company or loses their security key. If you aren’t using a super administrator account, you can’t complete these steps. For details: What you get with Groups for Business Use the Admin console, the Admin SDK Directory API, or Google Cloud Directory Sync to update the Directory when a person’s profile information or situation changes. An SPF record is a line of text that you add to your domain, following your domain provider’s instructions. Email setup is a big deal, especially if everyone’s using IMAP email clients. Requires having the Calendar > Settings administrator privilege . Apps Google WorkspaceGmail Spam, phishing and malware (Optional) On the left, select an organization. Important: Google Workspace applies all routing settings to the affected inbound messages. When you enable Windows device management, the Windows settings in the Google Admin console are applied to Windows 10 or 11 devices in your organization. ; Click Update User. Go to Menu Apps > Google Workspace > Groups for Business . ${device_serial_number} Sign in with an administrator account to the Google Admin console. For details, see Google Workspace editions that include AppSheet Core. In the Google Sync IP Whitelist box, add the IP addresses (masks) where users can access their Google Workspace mail, calendars, and contacts. To add one address at a time, click Add address and enter the email address or domain. SPF helps prevent your outgoing email from being marked as spam by receiving email servers. The Admin Settings API is enabled for Google Workspace accounts. If you already set up a Wi-Fi network, click Wi-Fi Add Wi-Fi. At Google Groups, you can update the following settings, many of which aren't available in your Admin console: General—Group name, email address, and other basic settings you can make in the Admin console. Since September 1, 2021, access to YouTube changes for Google Workspace for Education users based on new age-based access settings in the Google Admin console. Turn off any mail delivery settings that route mail to an external mail server. ; Click Login challenge. Go to Menu Account > Account settings > Profile . As an administrator for your organization's Google Workspace or Cloud Identity service, you can view and manage security settings for a user. If security keys are required, set up a grace period—When you set up enforcement for 2SV, set up a grace period. The sharing settings available in your Admin console apply to users by organizational unit or groups Manage your Google Workspace account with one centralised, secure control panel. You can find it in your Google Admin console at Account Account settings Profile. ; In the Internal sharing options for primary calendars section, choose how your users' calendars are shared by default with other people in your organization. Click Update User. ; Only addresses in my domains—Sender doesn't have to be a Google Workspace user, but their email address must contain your primary domain (subdomains are allowed). You need to add this record into your domain settings so your domain host To let people in your organization add images from Drive to their signature, you need to turn on settings in the Google Admin console. Go to Contact Google Workspace support. Google Docs Editors: The Restrict delivery setting blocks notifications messages from Google services, for example Gmail messages about Google Docs comments. 2, and 1. Need to access your domain’s DNS settings? If you purchased your domain while signing up for Google Workspace, you can access your DNS settings through your Click Windows Update settings. For example, here are the YouTube settings for your top-level These settings can also appear in the Admin console as Inherited Google Meet hardware settings. Not all standards support the TLS versions that Google Workspace supports. Show me how; Under Windows Update, select Enabled from the list of items. Go to Menu Apps > Google Workspace > Drive and Docs > Templates . 3. For details, go to REST Resource: devices. Sign in with a super administrator account to the Google Admin console. For example, you can let only your sales department publish Google Drive files on the web. 0. To add Go to drive. First, you must turn on this feature in your Google Admin console. ; If you’re already signed in to another Google Account, at the top of the screen, click your profile image or initial and click Add another account. You manage Google Workspace in the Google Admin console. What can Google Workspace admin see? Google Workspace admins can view usage reports, audit logs, and user activity like storage Manage your Google Workspace account with one centralised, secure control panel. What's included Step 5: Enforce 2-Step Verification (Optional) Before you begin: Make sure users are enrolled in 2SV. This guide is a summary of accessibility features in Google Workspace and other Google services. At the bottom, click Save. You can programmatically integrate with IT infrastructure, create users, update settings, audit activity, and more. Manage licenses on the Licenses page of Configuration Manager. Go to Menu Apps > Google Workspace > Calendar . com . Some Google Workspaceusers might have fewer options for customizing their meeting effects than others: Google Workspace for Education users might only be able to replace their background with a stock or seasonal image. Custom spam filters can be applied based on address lists that you create and manage in your Google Admin console. ; Anyone in your organization can access the item if they have the link (for organizations without target audiences)—Files with this setting aren’t included in search results unless there are links to them from other files that are searchable. Add users, activate services, manage mobile devices and more. Apps Google Workspace Gmail Routing. Even though these apps have On or Off controls in the Google Admin console, Google Workspace for Education users designated as under the age of 18 will be restricted from using these services with their Google Workspace for Education accounts, regardless of the setting: To turn the privilege on or off for the Meet quality tool, go to the Google Admin console, click Admin roles, click one of the roles in the left column, and click Privileges. For details, go to Manage Meet safety settings. Nov 25, 2024 · This guide breaks down the best practices for using Google Admin Console, with actionable tips on configuring user settings, managing apps, and controlling devices. Update more settings at Google Groups Using Google Groups. If you're a super administrator and you sign in to admin. Go to Menu Apps > Google Workspace > Sites . Setting options What to do; Allowed senders: Choose an option: Only registered Apps users in my domains—Sender must be a Google Workspace user in one of your domains. Click the row for the user account to display the user information page. Go to Menu Apps > Google Workspace > Google Chat . Google does not redirect you to the SSO server. ; Under Primary email, click the Down arrow and select your new primary domain. (Note: this has no affect on other AI features in Google Workspace services. Create and schedule resources On your Google Meet hardware touchscreen, tap Settings Display. To learn about more accessibility features, visit the Google Belonging website. Groups for Business is a core service in your Admin console that controls how your organization’s groups can be used in the Google Groups user app at groups. For example, granting the privilege to create users in the Admin console also lets admins create users using the API. Sign in with an administrator account to the Google Admin console. com) and password, you're redirected to the Admin console. Open user security settings Cancel Google Workspace ; Custom URLs. If you can't find the app, it may be available only for administrators to install and can’t be allowlisted. Go to Menu Apps > Google Workspace > Google Meet . Set up SPF by adding an SPF DNS TXT record (SPF record) to your domain. Go to Menu Apps > Google Workspace > Gmail > Spam, Phishing and Malware . Go to Menu Devices > Google Meet hardware > Settings . Requires having the Gmail Settings administrator privilege . Click Sharing settings. At the top left, click All users in this account. Google Workspace previously encrypted email with Secure Sockets Layer (SSL), but now uses TLS for encryption. Use it to add or remove users, manage billing, set up mobile devices, and more. Requires having admin privileges for Groups, Organizational Units (top-level), and Service Settings. Allows users to only access Google Workspace mail, calendars, and contacts on mobile devices through the IP addresses that you list. Any updates you make later to the Wi-Fi profiles are automatically pushed to devices. ; Check the Enable contact sharing box. Requires having the Service Settings administrator privilege . Use the Google Admin console to specify how users can share their primary calendar and events with people inside and outside of your organization. From the Admin console, go to Apps > Google Workspace > Gmail > Manage quarantine s Sign in with an administrator account to the Google Admin console. Sync Google Workspace emails with the Apple Mail app. Learn more; Note: You'll be able to make changes to your domain's DNS settings only if you're a domain administrator. Learn more about integrated Gmail. ; Click the Generate New Record button. This page is for Google Workspace administrators. Am I required to make changes to my DNS settings? If you aren’t using an administrator account, you can’t access the Admin console. ; It might take several minutes for this change to take effect on the user account. Recommended settings. Aug 23, 2023 · Go to admin. Admins are limited in how they can manage file sharing settings: You can’t change file-sharing permissions in your Admin console. If two settings conflict, Google Workspace applies the setting with the higher priority and ignores the lower priority, conflicting setting. When users sign in to third-party apps using the "Sign in with Google" option (single sign-on), you can control how those apps access your organization’s Google data. On the Routing page, click Manage address lists. Users who have Forms turned on can create, edit, and respond to forms. In your Google Admin console, delete any Non-Gmail mailbox setting so that users can open Gmail web and mobile apps. Add a catch-all address to your routing settings to get all incoming messages like this in a single mailbox. Click a user to open their account page. As an administrator, you might want to get and save incoming messages sent to non-existent or incorrect email addresses in your domain. Google Workspace supports TLS versions 1. To check if a secondary domain is verified, follow these steps: Sign in with a super administrator account to the Google Admin console. Mar 25, 2025 · This document assumes that you understand the general ideas behind the Google Data API protocol, and that you are familiar with the Google Workspace Admin console. This does not apply to devices that were reset on the device itself. Show me how; Under Drive encryption, select Enabled from the list of items. Before setting up TLS in your Google admin console, verify the TLS versions supported by any compliance, security, or other standards used in your organization. I purchased my domain name through Google. You can update the token on devices in the following ways. Aug 12, 2024 · Keeping it all under one roof in the Google Workspace Admin console can make it easier to keep an eye on things. Administrators can also monitor the configuration of Google Admin console settings from the security health page. (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Custom spam filters can’t be applied to groups. Google's MX record value is smtp. Settings in your Google Admin console that mention SSL now use TLS. These are the directions for the “updated” view of settings in the Admin Console. As a Google Workspace administrator, you can use the Email and chat auto-deletion setting to manage message storage for people in your organization. For details, see Activate organization branding features. To make your organization's data more secure, use advanced management settings as needed or required for your organization. As an administrator, you can manage company-owned iPhones and iPads in the Google Admin console alongside other devices you manage there. This article is for Google Workspace administrators. Grant access to manage Meet settings (optional) Give someone else admin privileges to help you manage Google Meet. " Starting in January 2025, Google Workspace accounts will no longer support less secure apps, third-party apps or devices that ask you to sign in to your Google Account using only your username and password. Suppress bounces from this recipient —Prevent bounced messages from being rerouted to the configured mail route. This isn’t just an IT tool; it’s a command center for transforming your operations. Learn more about email routing and delivery settings. Cloud Identity customers: If your organization has a mix of Cloud Identity and Google Workspace licenses, domains on an allowlist for Google Workspace also apply to users with Cloud Identity licenses. Sync Google Workspace calendar events with the Apple Calendar app. TLS is an updated, more secure version of SSL. For administrators who manage Chrome policies from the Google Admin console. This status indicates that the service is turned on for an organizational unit or access group. Plus features like a welcome message Manage your Google Workspace account with one centralised, secure control panel. We recommend that you review and edit those settings first. Sync Google Workspace contacts with the Apple Contacts app. Under Test energy saving, tap Test. ; At the bottom of the address list table, click Add address list. If your organization uses third-party identity providers (IdPs) to authenticate single sign-on (SSO) users through SAML, you can present these SSO users with additional risk-based login challenges and apply 2-Step Verification (if configured), after the IdP authenticates a user during sign-in. Set Up IMAP and Email Clients. If you signed up for Google Workspace with a verified domain, your username is associated with your domain, for example, you@your-company. To sync Google Contacts or Calendar events to iOS apps, you must set up your mobile management service to push that data: If you use Google endpoint management, you need to set up the Google Account setting in the Admin console. TLS and SSL are often both referred to as SSL. Go to Menu Apps > Google Workspace > Gmail > Hosts . For details, go to Assign, remove, and reassign licenses. To prevent this, set up Gmail to bypass this setting for internal messages. Important: When 2SV is enforced, users who have not completed the 2SV enrollment process, but have added 2-Factor Authentication (2FA) information to their account, such as a security key or phone number, will be able to sign in using this information. Go to Menu Apps > Google Workspace > Drive and Docs . As an administrator, you can let your users import email and contacts from non-Google webmail accounts, such as Yahoo!, Hotmail, or AOL. Rename a user or change a user's email address; Add information to a user’s profile; Hide a user from the Directory; Train people in your organization to use Dec 4, 2024 · That’s where the Google Admin Console for Google Workspace becomes your strategic ally. To let your users join another domain’s classes, or to let users from other domains join your classes, you need to change class membership settings in your Google Admin console. So, let’s talk about how you can use the Google Admin Console to keep your organization’s emails flowing quickly and Mar 25, 2025 · The Groups Settings API updates and retrieves settings for an existing Google Group. com to open Gmail. After that, users have an extra setting in the Accounts tab in Gmail settings. The test might take around 30 seconds to complete. As an administrator, you can set the default sharing settings for shared drives by the organizational unit they’re assigned to. com using your Google Workspace username. For Google Workspace editions that don't include AppSheet Core, you can purchase subscriptions for AppSheet in the Google Admin console. After an hour, admins need to sign in again. You can upload, view, sync, replace, and delete default templates and themes in the Google Admin console for Google Slides, Forms, and Sites. Go to Menu Devices > Chrome > Settings > Device settings . Find a service with the status of On for some. Creating custom web addresses for Google Workspace services by modifying your CNAME records. Set the default sharing settings for shared drives. Use settings in the Google Admin console to govern access to Google Workspace services through OAuth 2. The Admin Console empowers you to streamline user management, secure your data, and scale your infrastructure with precision. Go to Menu Apps > Google Workspace > Gmail > Safety . You apply settings to configuration groups only in the Admin console, not using APIs. Use this article as a reference for many common settings. Read detailed information about conflicting consequences and precedence exceptions for Gmail settings. com If you aren’t using an administrator account, you can’t access the Admin console. Requires having the Security center administrator privilege. Click the type of service: Google Workspace, Additional Google services, Web and mobile apps, or Google Workspace Marketplace apps. Or in Gmail, click the Settings icon > See All Settings > Admin console. Go to Menu Apps > Google Workspace > Gmail > User settings . Find this setting in Apps Google Workspace Gmail Routing. . Customize a Google Workspace service URL; Support: Get support from Google by chat, phone, or email, or search for specific help topics. Manage your Google Workspace account with one centralised, secure control panel. Getting Started Creating an account. Unique customer ID that’s assigned to your organization’s Google account. Before you begin: If you need to set up a department or team for this setting, go to Add an organizational unit . Populate a spreadsheet with a list of all the users in a domain. Follow these steps to choose the right Chat service for your organization, set the administrator policies, and get your users started. Users can enter an admin-generated backup code for 2SV during the Has full control over Google Groups' tasks in your Admin console. xqlfgs rrhf psvoptby eqeo jnjmk gal wml zxuzl srv pqwrj yzg vht fzt jccezir nsdmb