Access Management is now generally available in the European Union

What’s changing 

Access Management is now also generally available in the European Union — these controls allow customers to select the physical location from which Google support teams can access organizational data during support activities. Customers can now restrict support personnel to EU Google staff in EU locations. If necessary, non-EU Google staff may access data through virtual desktops that are located in EU locations.

Who’s impacted

Admins

Why it’s important

Google Workspace Assured Controls enables customers to meet strict regulatory information governance requirements. With Access Management, customers can limit the Google staff who can take support actions related to their data. Additionally, since Assured Controls is available on Google Workspace’s native platform, you don’t need to move to a separate GovCloud environment for access to these capabilities. This update gives our customers another way to configure how and where their data is accessed by Google staff.

Getting started

Admins: Visit the Help Center to learn more about Assured Controls and Access Management.End users: There is no end user impact or action required.

Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 8, 2024

Availability

Assured controls are available as a paid-add on for Google Workspace Enterprise Plus. For more information, contact your Google account representative.

Manage your compliance and data controls from a single source in the Admin console

What’s changing 

We know that compliance and data controls are paramount for our customers, both in understanding Google Workspace’s policies and configuring compliance-relevant features according to the needs of their business sector and geographical region. To help our customers navigate these complexities, we’ve centralized some of these relevant features and information into a single location in the admin console: Data.
Within this section, admins can:
Find a centralized hub containing all data and compliance-related features such as data regions, access transparency, and more.Access Approvals, Access Management, Access Transparency, Client Side Encryption, Data Regions can now be found under Data > Compliance. Please note that Access Transparency can still be found under Menu > Reporting.

Data Export, Data migration, and Google Takeout can now be found under Data > Data import & export.

Find a dedicated compliance node containing guides and resources to help them configure their settings within various regulations and standards such as IL4, CJIS, and FedRAMP High.

Data > Overview
Data > Compliance > Guides and Resources

Getting started

Admins: You can access the new Data node compliance center in the Admin console by navigating to Menu > Data. From here, you will find the Overview page, as well as the Compliance and Data Import & Export categories. End users: There is no end user impact or action required.

Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 8, 2024

Availability

Available to all Google Workspace customers

Resources

Google Workspace Admin Help: Data regions: Choose a geographic location for your dataGoogle Workspace Admin Help: Gmail only: Set up and manage hardware key encryptionGoogle Workspace Admin Help: Add and manage key services for client-side encryptionGoogle Workspace Admin Help: Connect to your identity provider for client-side encryptionGoogle Workspace Admin Help: Turn client-side encryption on or offGoogle Workspace Admin Help: Access Approvals: Require Google staff to request approval before viewing support dataGoogle Workspace Admin Help: Access Management: Limit the Google staff who can take support actions related to your dataGoogle Workspace Admin Help: Export all your organization’s dataGoogle Workspace Admin Help: Export data by organizational unit, group, or userGoogle Workspace Admin Help: How to export a single user dataGoogle Workspace Admin Help: Allow or block Google Takeout

Introducing a new experience for data regions reporting

What’s changing 

We’re pleased to announce several new enhancements to Google Workspace data regions: 
For the first time, admins will be able to specify not only the region (EU or US) where their data is stored, but also the region in which it is processed, with granular controls to allow administrators to easily refine the region and level of compliance needed as appropriate for their organizational groups. Workspace customers have the flexibility to select multiple geographies to suit their needs, versus being restricted to one region mandated by billing address.
Also, based on customer feedback, we have re-architected our reporting dashboard to both deliver new functionality and simplify the experience for administrators. These include:
A simplified experience that focuses on the status of your data region’s posture. Streamlined reporting for Google Workspace Enterprise Plus customers.Advanced reporting for Assured Controls customers.

Who’s impacted

Admins

Why it’s important

Assign data processing to the United States or Europe
Although customers are not required to use the sovereignty offerings within Workspace in order to comply with the GDPR, we make advanced data residency controls available so that customers can proactively leverage digital sovereignty best practices and keep pace with regulatory legislation. 
Putting the emphasis on status
We’ve heard from our customers that it’s critical to quickly determine whether their data is being stored in the proper location. Based on this feedback, we’ve simplified the dashboard to consolidate  parameters like “application” and “data type”, which were not useful to customers into a single status indicator.  
Also, admins can now access two new reporting cards: Versions and Policies. The Versions card will tell admins how many users have each edition of data regions, while the Policies card will tell you how many users have their storage and processing settings assigned to the US or Europe.

It’s important to note that if you’re subject to partial domain licensing, you may see a mix of users spread across different editions. A user’s feature set may vary based on their assigned Workspace editions — we recommend using our Help Center to learn more about the difference between editions.
Advanced reporting for Assured Controls customers
For those Google Workspace customers using Assured Controls, you can leverage more advanced reporting which will help you determine that data is being both stored and processed properly. You can also drill down into this information on an app-by-app basis.

Getting started

Admins: Visit the Help Center to learn more about Data Regions, choosing a geographic location for your data, setting up advanced settings for Data Regions, what data is covered by the Data Regions and viewing Data Regions status.

End users: There is no end user impact or action required.

Rollout pace

Rapid Release and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on July 8, 2024 with anticipated completion by the end of July 2024.

Availability

Enterprise Data Regions are included with Enterprise Plus, Education Standard, Education Plus, and Enterprise Essentials Plus.Fundamental Data Regions are included with Frontline Starter, Frontline Standard, Business Standard, Business Plus, Enterprise Standard, and Enterprise Essentials. Reporting is not included with fundamental data regions — you can purchase Enterprise data regions as a paid add-on with any of these editions. Assured Controls are available as a paid-add on for Google Workspace Enterprise Plus.

Important policy updates for Early Access apps starting July 30, 2024

What’s changing 

To ensure organizations’ continued access to services, we’re changing the way Early Access apps transition to Additional Google Services:
Currently, when an Early Access app becomes an Additional Google Service, it is turned on or off by default based on your new services preference in the Admin console. This occurs even if the Early Access apps service status is set to On for everyone. 
Starting July 30, 2024, if you have an Early Access app service set to On, you won’t lose access to the app when it transitions to an additional service, regardless of your new service preferences. These apps will only be turned off if both settings are set to Off.

Additional details

Google AI Studio will transition from an Early Access app to an Additional Google Service on July 30, 2024. Access to AI Studio will be based on the information outlined above. We recommend that you double-check your settings ahead of time to ensure access to AI Studio is configured as you see fit.

Getting started

Admins: Access to Early Access apps can be turned on or off at the OU or group level. New Products release preferences can be configured in your account settings. Visit the Help Center to learn more about turning Early Access apps on or off for your users, as well as turning new services on or off by default.End users: There is no action required.

Rollout pace

The updated policy will take effect for all Google Workspace customers on July 30, 2024. 

Availability

This update impacts all Google Workspace customers.

Resources

Adding a ‘missing’ grade state to Gradebook in Google Classroom

What’s changing 

In the last year, we’ve added new features, such as disabling submissions after a due date in Google Classroom and excusing assignments in Google Classroom, in order to give teachers even more flexibility when it comes to grading for assignments and classwork. 
Today, we’re improving support for missing assignments in gradebook by giving teachers the ability to manually mark an assignment as ‘missing’ or ‘complete’ and automatically add a default draft score. 

Getting started 

Admins: There is no admin control for this feature. End users: By default, all missing assignments will automatically receive a draft score of ‘0’. However, teachers can adjust the default draft score or turn OFF the automated scoring feature. Assignments that displayed the ‘missing’ labels prior to this update will be automatically updated and receive the draft score. Visit the Help Center to learn more about grading & returning an assignment. 

Rollout pace 

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 2, 2024 

Availability 

Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts 

Resources