Allowlist and Audit Logs for URLs accessed from Google Apps Script and Google Sheets

What’s changing

We’re introducing a feature that will allow admins to restrict which URLs Apps Scripts and Sheets can source external content from. More specifically, admins can now monitor which URLs are being accessed by referencing new logs that we’re adding to the audit and investigation page. Admins can then create an allowlist that controls which of those URLs they’d like to enable/disable. 
When such an allowlist is specified, users in the organization will only be able to use those allowlisted URLs for both their Apps Scripts and their Sheets IMPORT functions. This allows organizations to more granularly control access in a way that better aligns with a Zero Trust security posture. 

Who’s impacted 

Admins and end users 

Why it’s important 

Data exfiltration is an important security concern for admins, especially when it comes to Apps Scripts and Sheets because certain functions are capable of accessing external data. With this update, admins have more granular control over URLs accessed by users in their organization. 

Getting started 

Admins: Logs can be found under Reporting > Audit and investigation > Drive Log Events OR Security > Security Center > Investigation Tool. The URL allowlists can be found in the Admin console under Apps > Google Workspace > Drive and Docs > Features and Applications > Importing and fetching from URLs. If an allowlist is not established, no URLs will be restricted. Visit the Help Center to learn more about Drive log events. End users: There is no end user setting for this feature. 

Rollout pace 

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 31, 2024 

Availability 

Available to all Google Workspace customers 

Resources

Prevent downloading, printing, or copying files by combining Data Loss Prevention rules with Context-Aware Access conditions

What’s changing

Controlling access to sensitive content stored in Google Drive is a critical component for any company’s security posture. One way admins can do this is with Data Loss Prevention (DLP) rules that enable Information Rights Management (IRM) on specific files. This allows admins to disable actions that can lead to accidental or deliberate data exfiltration, such as downloading, copying, and printing. 

Today, we’re expanding on these protections by enabling admins to combine DLP rules with Context-Aware Access conditions. When combined, admins can configure if IRM should be enforced based on context conditions, like a user’s location or IP address, are met. This gives admins the ability to configure context-aware-access conditions in a more granular fashion — previously, context-aware-access could only be used to restrict full access to an entire application. This is an important step forward in applying administrator controls at the document level.

Getting started

Admins: This feature will be OFF by default and can be enabled per-file by creating DLP rules with a CAA access level attached. See this help center article for more information on how to configure these rules.

End users: Depending on your admin configuration, you may be restricted from taking certain actions on Drive files.

Rollout pace

Rapid and Scheduled Release domains: Full rollout (1–3 days for feature visibility) beginning on July 31, 2024

Availability

Available for Google Workspace:

Gemini in the side panel of Google Drive introduces a new PDF viewing experience

What’s changing

You can now interact with the Gemini side panel while viewing PDFs. This new viewing experience works with all kinds of PDFs, such as: 
Scanned PDFs: Pictures of paper documents turned into PDFs. Native PDFs: PDFs created on a computer, not from a scan.Text-heavy PDFs: Long PDFs with lots of writing. Table-heavy PDFs: PDFs with complicated tables. With this update, you can use Gemini in Drive to help you with PDF files in the following ways: 
Summarize: Get a quick overview of long, complicated PDFs. Ask questions: Find specific information or insights from the PDF. Create new content: Use PDF contents to make something new, like a study guide or an email draft. Bring in more information: Combine the PDF with other files you have in Google Drive by typing @. 

Getting started 

Admins: To access Gemini in the side panel of Workspace apps, users need to have smart features and personalization turned on. Admins can turn on default personalization setting for their users in the Admin console. End users: To access this feature, double-click on a PDF from the Google Drive doclist to open it in a new tab > click on the Gemini icon in the top bar next to your profile picture. When using this for the first time, you’ll see a welcome dialogue that automatically opens the side panel. Visit the Help Center to learn more about using Gemini in Drive to work with PDFs. 

Rollout pace 

Rapid Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 30, 2024Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on August 12, 2024

Availability 

Available for Google Workspace customers with: 
Gemini Business, Enterprise, Education, and Education Premium add-ons Google One AI Premium 

Resources 

Catch up on followed threads from the home shortcut in Google Chat

What’s changing

Many users follow threads within spaces in Google Chat to ensure they don’t miss any updates. To build upon this experience and help you keep track of important discussions occurring in threads, we’re introducing the ability to follow and review threads within the home shortcut. 
Threads you’ve chosen to follow will now appear directly within home, enabling you to quickly catch up. Rather than searching for the space and finding the thread, clicking on the thread via home takes you directly to the threaded conversation. You can also use the “Threads” button in home to filter your view to show threads only. This option is next to the “Unread” toggle, which filters your unread messages across DMs, spaces, and threads. You have the ability to filter for unread threads specifically when this is toggled on and the “Threads” button is selected. 

Who’s impacted 

End users 

Why it matters 

Through this update, the home view has become even more useful with the ability to easily stay on top of followed threads. 

Additional details 

As a reminder, threads are followed in the scenarios below: 
You are the author of the main message that a thread was initiated from. You are explicitly following (via the “Follow” button). You have replied via thread or were mentioned. You have set the notification setting of the corresponding space to notify for “All”. If a thread is no longer relevant to you, you can “Unfollow” it via the button in Home. 

Getting started 

Admins: There is no admin control for this feature. End users: Visit the Help Center to learn how to use Google Chat. 

Rollout pace 

Web: 
Rapid Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on July 29, 2024, with expected completion by August 31, 2024 Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on August 26, 2024, with expected completion by September 30, 2024 
Android: 
Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 29, 2024 
iOS: 
Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 31, 2024 

Availability 

Available to all Google Workspace customers and Workspace Individual Subscribers 

Resources 

Google Workspace Updates Weekly Recap – July 26, 2024

1 New update

Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.

Allow dropdown chips to have multiple selections in Google Sheets

Previously, dropdowns could only have one value selected in Google Sheets. Starting this week, we’re introducing the ability to allow for multiple selections within a dropdown. This functionality is useful in scenarios when multiple project milestones, statuses, or teams are applicable for one item. | Rolling out to Rapid Release domains now; launch to Scheduled Release domains planned for August 12, 2024. | Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts. | Learn more about inserting dropdown chips in Google Sheets. 

Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.
Google Drive inventory reporting is now available in open beta 
Google Drive inventory reporting is now available in open beta, providing admins with enhanced visibility into the state of their data assets. | Learn more about Drive inventory reporting. 
Reduce live-stream bandwidth consumption to a fraction of the traffic volume with eCDN for Google Meet 
In September 2023, we introduced ultra-low latency livestreaming and since then we’ve introduced several improvements for the overall experience. This week, we’re excited to introduce the latest enhancement for ultra-low latency live streaming: Enterprise Content Delivery Network (eCDN) support for Google Meet. | Learn more about reducing live-stream bandwidth. 
Adding Data Loss Prevention (DLP) to form content in Google Forms 
We’re continually investing in data protection capabilities for Google Forms. We’ve already enabled data loss prevention (DLP) for Google Drive policies that apply to files submitted in external Forms, including Forms from external organizations. To expand on this, we’re announcing that DLP policies for form content in Google Forms is now generally available. | Learn more about DLP with Forms. 
Enable Classification labels on specific Google Workspace applications
To improve granularity in enabling & governing labels, we are replacing and improving the existing “Labels” setting within Apps > Google Workspace > Drive & Docs and adding label-level application toggles to the Label Manager tool. | Learn more about classification labels on Workspace apps. 
Introducing Google Meet LTI™ 
To help improve remote and hybrid learning, we’re introducing Google Meet LTI™ for Canvas by Instructure and PowerSchool Schoology Learning. This builds on the existing Google Workspace Learning Interoperability Tools including Assignments LTI™ and Google Drive LTI™. | Learn more about Meet LTI™ 
Improved collaboration with Google Workspace LTI™ integrations in PowerSchool Schoology Learning 
In order to bring the collaborative power of Google Workspace for Education to even more partners, we’re excited to announce updated Google Workspace LTI™ integrations in Schoology. | Learn more about Workspace LTI™ integration in PowerSchool Schoology.
Automatically generated captions for videos in Google Drive 
Starting this week, when you upload a video to Google Drive, captions for the video can be automatically generated. | Learn more about generated captions for Drive videos. 
Label administration is becoming more discoverable and flexible in the Admin console 
We’re introducing several changes to make labels more discoverable and flexible for organizations. | Learn more about labels in the Admin console.
AI Classification in Google Drive is now available for the Gemini Education Premium add-on
We’re expanding the availability of AI Classification in Google Drive to Google Workspace for Education customers with the Gemini Education Premium add-on. | Learn more about AI Classification in Drive.
Enhancing your productivity on Android devices with new features in Gmail and Google Chat apps
We’re introducing numerous improvements across the Gmail and Google Chat apps on Android foldables and tablets in order to enhance your productivity when using these devices. | Learn more about Android features in Gmail and Google Chat apps.

Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.

Rapid Release Domains: 
Rapid and Scheduled Release Domains: 
Manage access to eSignature in Google Workspace / eSignature is now available for select Google Workspace customers (end user setting)Access Management is now generally available in the European UnionManage your compliance and data controls from a single source in the Admin consolePre-configure meeting notes, recordings, and transcripts from the Calendar invite (iOS)Google Workspace extensions for Gmail, Google Drive and Google Docs are now available in open beta for Gemini (gemini.google.com)Google Drive inventory reporting is now available in open betaEnable Classification labels on specific Google Workspace applicationsIntroducing Google Meet LTI™Improved collaboration with Google Workspace LTI™ integrations in PowerSchool Schoology LearningAutomatically generated captions for videos in Google DriveEnhancing your productivity on Android devices with new features in Gmail and Google Chat apps

For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).