Control whether your users can add account recovery information with two new admin settings

What’s changing

We’re launching two new settings that will allow admins to control whether their users can add recovery email information and phone information to their Google Workspace account. 

By default, the ability to add a recovery email or phone number is ON for most Workspace users and K-12 super admins, but it should be noted that:

  • Adding email and phone recovery information is OFF by default for K-12 users. 
  • Phone number recovery collection is always enabled for super admins regardless of whether it’s disabled in the admin console.

Any changes admins make to these settings will overrule the existing organizational unit (OU) settings, except for super admins as stated above.

Security > Account Recovery > Recovery information

Who’s impacted

Admins and end users

Why it’s important

Adding recovery information to your account is helpful for keeping users’ accounts more secure, recovering users’ accounts as well as evaluating security related events, such as risky logins or re-authentication attempts. However, we know that there are a variety of reasons that customers would want to prevent their users from doing so. For example, turning recovery information off can help customers stay compliant with local privacy regulations, such as GDPR. Or admins can opt to add recovery information themselves. This update gives admins the control to decide which configuration makes the most sense for their users.

Getting started

Rollout pace

Availability

  • Available to all Google Workspace customers.

Resources

Google Workspace Updates Weekly Recap – December 20, 2024

3 New updates

Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.


Introducing instant video playback after uploads in Google Drive 
Following up on the recent announcement of a smoother, more modern video player in Google Drive, we’re excited to share that you can now watch videos the moment you upload them to Drive on web. This highly-requested feature eliminates wait times between upload and playback, while ensuring your videos still get fully processed. | Rollout to Rapid Release domains is complete; launch to Scheduled Release domains planned for January 2, 2025. | Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts. | Visit the Help Center to learn more about storing & playing video in Google Drive.
instant video playback after uploading video to Google Drive

Updated keyboard shortcuts for Google Groups 
Google Groups is designed to work with keyboards, screen readers, braille devices, screen magnification, and more. We’re excited to improve the accessibility of Groups by introducing updated keyboard shortcuts. New and existing keyboard shortcuts will continue to work through early 2025, after which only new shortcuts will work. | Rolling out now to Rapid Release and Scheduled Release domains, with expected completion by January 13, 2025. | Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts. | Visit the Help Center to learn more about using keyboard shortcuts in Google Groups.
SOC 1 compliance for Gemini 
We’re pleased to announce that the Gemini app on web and mobile has achieved SOC 1 compliance. This latest certification is in addition to SOC 2 and SOC 3, which the Gemini app achieved on web and mobile earlier this year. | SOC 1 is available now for Google Workspace customers with a Gemini Business, Enterprise, Education, or Education Premium add-on. Also available for Google Workspace customers accessing the Gemini app as a core service with a qualifying edition. | Visit the Help Center to learn more about how Google Workspace satisfies certification and compliance standards and about turning the Gemini app on or off for your users.

Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.

Available in open beta: migrate messages from Microsoft Teams to Google Chat 
We’re expanding our data migration experience to include the ability for Google Workspace admins to migrate conversations from channels in Microsoft Teams to spaces in Google Chat, making it easier for organizations to onboard and deploy Chat. | Learn more about migrating messages from Microsoft Teams to Google Chat. 
Available in open beta: Set up Single-Sign On with custom OpenID Connect profiles 
Via open beta, admins now have the option to set up a custom OpenID Connect (OIDC) profile for single sign-on (SSO) with Google as their Service Provider. | Learn more about Single-Sign On with custom OpenID Connect profiles. 
Now generally available: Monitor and manage AppSheet usage in your organization with the AppSheet Admin console 
All Google Workspace Admins with the AppSheet service privilege can access the AppSheet Admin Console. | Learn more about the AppSheet Admin console. 
Control whether your users can add account recovery information with two new admin settings
We’re launching two new settings that will allow admins to control whether their users can add recovery email information and phone information to their Google Workspace account. | Learn more about the new admin settings.

Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.

Scheduled Release Domains: 
Rapid and Scheduled Release Domains: 


For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

Introducing Gemini Learning Tools Interoperability (LTI™)

What’s changing

We’re pleased to introduce Gemini LTI™, an AI-powered assistant that can integrate into third party Learning Management Systems (LMS). Gemini LTI™ helps enhance the educational experience for both educators and students by providing AI-driven tools and features powered by Gemini within their LMS environment. To start, Gemini LTI™ integrates with Canvas by Instructure and Powerschool Schoology Learning. 

Who’s impacted

Admins and end users

Why you’d use it

Google is committed to making AI helpful for everyone, in the classroom and beyond. Bringing Gemini into LMS tools helps educators boost their creativity and productivity to create more dynamic and engaging learning experiences for their students. Specifically, educators can use the AI tools to:
  • Outline a lesson plan, including learning objectives.
  • Generate a quiz and export it to Google Forms.
  • Create a hook to spark curiosity and engage your students.
Students can further solidify what they’re learning in the classroom or explore new topics alongside an AI:
  • In-the-moment assistance: get unstuck and keep learning going by get clarification in real time. 
  • Learning coach: get a step-by-step learning plan built around specific learning goals.
  • Brainstorming partner: generate fresh ideas for a research paper, additional authors to read, and more.
  • Feedback on writing: get suggestions on how to strengthen your arguments and hone your ideas
  • Mock interviews: prepare for an upcoming internship or extra curricular interview.

Additional details

Gemini LTI™ is part of Google Workspace LTI, our suite of LTI™ tools, including Assignments LTI™, Google Drive LTI™, and Google Meet LTI™. Visit our Help Center to learn more about Workspace LTI™

Getting started

Now generally available: Monitor and manage AppSheet usage in your organization with the AppSheet Admin console

What’s changing 

Beginning today, we’re pleased to announce that all Google Workspace Admins with the AppSheet service privilege can access the AppSheet Admin Console. The AppSheet Admin console is a consolidated location to monitor, manage and govern AppSheet across your organization. Previously, the AppSheet Admin Console was only available to those with an AppSheet Enterprise Plus license in public preview, but now any admin with sufficient privileges has access to monitor and manage their users (note: some features require an enterprise license for the admin and the user). 
The AppSheet Admin Console gives admins visibility into the users, apps and licenses associated with their AppSheet users. From here, admins can: 
  • Review the most popular apps and creators. 
  • Review how many apps are owned and used for every user account. 
  • View all of their organization’s app users. 
  • Verify the AppSheet licenses purchased, assigned and used. 
  • Export a list of accounts, users, apps and licenses. 
Since Public Preview, we’ve added more functionality: 
  • Historical app usage: Admins can see app usage history for all accounts in their organization up to three months starting today and soon extending to six months. 
  • Self-serve provisioning: Admins can choose how their enterprise licenses are provisioned – either through license assignment in the Workspace Admin Console or automatically upon login to AppSheet.  
  • Organizations as the new standard: New and existing Workspace customers can manage all of their secondary domain users under a consolidated AppSheet organization.
The AppSheet Admin Console

Who’s impacted

Admins

Why it’s important

We’ve heard from our customers that in order to effectively manage AppSheet activity in their organizations, they need visibility into its usage. This includes information regarding how many users are using an AppSheet license, who is accessing their teams apps, and more. Expanding access to the AppSheet Admin console provides admins with these critical metrics, enabling them to understand how the tool is being used and govern the use of the tool as needed.

Additional details

The Licenses page will remain in public preview pending some supporting launches and additional enhancements expected early in 2025.

Getting started

Rollout pace

Availability

Resources

Available in open beta: Set up Single-Sign On with custom OpenID Connect profiles

What’s changing 

Beginning today, admins now have the option to set up a custom OpenID Connect (OIDC) profile for single sign-on (SSO) with Google as their Service Provider. OIDC is a popular method for verifying and authenticating the identities – this update gives admins more options for their end users to access cloud applications using a single set of credentials. Previously, only OIDC with pre-configured Microsoft Entra ID profile was supported in addition to SAML.
Custom OIDC profiles can be configured in the Admin console at >Security > Authentication > SSO with third party IdP

Getting started

Rollout pace

Availability

  • Available for all Google Workspace customers except Google Workspace Essentials Starter customers and Workspace Individual Subscribers.
  • Also available for Cloud Identity and Cloud Identity Premium customers

Resources