WorryFree Computers   »   [go: up one dir, main page]

What’s changing 
Launching first to beta, we’re introducing data loss prevention rules for Gmail. Data protection rules help admins and security experts build a stronger framework around sensitive data to prevent personal or proprietary information from ending up in the wrong hands. This functionality is already available in Google Chat and Google Drive, and in Gmail you’ll be able to create, implement, and investigate rules in the same manner. 


Admins can create data protection rules to flag sensitive information from using your organization. These rules are applied to outgoing messages sent internally or externally and admins can choose whether all content (including attached files and images), the body of the email, email headers, or subject lines should be scanned. You can configure your rules to look for sensitive text strings, custom detectors, or select predefined detectors. If a message violates a rule, admins can choose to:

  • Block message — the sender will receive a notification about message delivery failure and more information about the policy they violated.
  • Quarantine message — the message will require review and approval by an admin before delivery. If the message is rejected by an admin, the user may receive a notification about it.
  • Audit only — the message is delivered, but it is captured in rule log events for further analysis. This is particularly advantageous because it allows admins to assess the impact of rules before introducing them to your end users.

Data loss prevention for Gmail are available for select Google Workspace customers (see the “Availability” section below) — no additional sign-up is required to use the feature. 

Create data protection policies for Gmail alongside Drive and Chat

Build flexible conditions with selection of predefined and custom detectors of sensitive information

Set up a rule with Audit Only action applied to messages sent outside of organization. The severity level for event logging is set up to ‘Medium’ and alerting via Alert Center is turned on 

Detailed information about the event in the Alert Center

Overview of DLP incidents in the Security Dashboard with further option to investigate audit logs in detail

Who’s impacted
Admins and end users



Why it’s important

In addition to detecting sensitive content, DLP in Gmail offers additional benefits such as:

  • Simplified deployment and data protection policies management with rules for Gmail, Drive and Google Chat unified into the same area and workflow.
  • Advanced detection policies with flexible conditions, wide selection of predefined detectors for global and regional information types, custom detectors (Regular Expressions and word lists), targeting on specific parts of a message (header, subject, body). 
  • Granular configuration of policies scope, defining sender audiences (at domain, OU, and group levels) and recipient audiences (internal, external, both).
  • Actions with various levels of restriction such as block delivery of message (Block), quarantine message for review (Quarantine), and log event for future audit (Audit only).
  • Tools for incident management and investigation such as the Alert Center, Security Dashboard and Security Investigation Tool.


Additional details
How does DLP in Gmail compare to Content Compliance rules?
Content compliance in Gmail does offer similar functionality in that you can create rules to prevent messages that contain specific content from being sent. However, unlike DLP in Gmail, admins have no way to preview the impact of these rules before deploying them broadly.


Further, content compliance offers a variety of features that are better suited for filtering content. For example, you can:
  • Set up a metadata match on a range of IP addresses, and quarantine messages from IP addresses outside of the range.
  • Route messages with content that matches specific text strings or patterns to a specific department, suited the best to process information.

Getting started
  • Admins: 
    • Data loss prevention rules can be configured at the domain, OU, or group level. DLP rules can be enabled in Gmail in the Admin console under Security > Access and data control > Data protection. Visit the Help Center to learn more about controlling sensitive data shared in Gmail.
      • Note that you can modify existing DLP rules for Drive and Chat to also apply to Gmail. 
    • DLP events can be reviewed in the Security Investigation Tool or Security > Alert Center, if alerts are configured in rules.


    • We recommend selecting “Audit only” when you’re setting up a rule. When selected, messages that match the conditions of a rule will be delivered with the detection being logged. This allows you to rest new rules and monitor their performance, or to passively monitor the  environment without interrupting email flow for your users.

    • Note on asynchronous and synchronous scanning: With DLP for Gmail, data protection rules are scanned asynchronously, which means that the message is blocked or quarantined after it leaves the sender’s mailbox and before being dispatched to the recipient. We’re working on the ability to scan data protection rules synchronously when a user hits “Send” in order to notify users about sensitive content before the message leaves their mailbox. 


    • Please share your feedback on this feature with us — this will help us continue to improve the experience as we move through beta and toward general availability. You can share your feedback by selecting the “Send feedback” button located in the bottom left corner of your screen of any data protection related page in the Admin console.


  • End users: When configured by your admins, you’ll be notified if your message contains information that violates a DLP rule

Rollout pace
Availability
Available to Google Workspace:
  • Enterprise Standard, Enterprise Plus
  • Education Fundamentals, Standard, Plus, and the Teaching & Learning Upgrade
  • Frontline Standard
  • Cloud Identity Premium customers

What’s changing 
Launching in beta, we’re introducing an integration between Google Voice and Salesforce that makes it easier to track details of calls made in Voice. When enabled: 

  • Salesforce contacts will be displayed in Google Voice. 
  • Google Voice calls will now be logged to any matching Salesforce contact.

Salesforce contacts are denoted with the Salesforce logo. 




Who’s impacted

Admins and end users


Why you’d use it

This integration helps improve visibility across the various stakeholders that rely on Salesforce as a key tool in their workflow. When enabled, Google Voice calls will be automatically logged in Salesforce, ensuring that there is a record of that interaction for all to see. Additionally, you can jump from Google Voice to the Salesforce call log to add notes and more context. This helps eliminate the need for users to switch between multiple applications and manual record keeping, and make it easier for other team members to see the latest activity in Salesforce.

Getting started


To turn on the Google Voice and Salesforce integration, navigate to Apps > Google Workspace > Google Voice > Policies > Salesforce integration


You’ll then be directed to the Google Voice and Salesforce connection page to complete the set-up.


  • End users: You’ll see banners in Google Voice on web and mobile when this integration is enabled by your admin. 
Banners inside the Voice app will indicate when Salesforce has been integrated.






After you make a Voice Call to a Salesforce contact from either our web or mobile app, you will be notified that the call is logged to Salesforce in the call log.

You’ll see when a call has been logged to Salesforce — you can click on this notification to open Salesforce.

Logged calls within the Salesforce UI.


To make the most out of the integration, we recommend that you install the Google Voice Chrome Extension.

Rollout pace
  • We will be accepting beta applications for this feature over the next several weeks. You can expect to hear back on the status of your beta application in about 2-3 business days.

Availability
  • Available to Google Workspace customers with Voice Standard or Premier and Salesforce Enterprise, Unlimited, or Lightning versions

Resources





What’s changing

Beginning today, a new data migration experience is available: you can migrate your users’ email data from one Google Workspace account to another in a more reliable and efficient manner. You can configure your data migration for up to 100 users at a time and also run delta migrations, which smartly brings over any newly generated data from the source without duplicating previously migrated content.

This feature is available as an open beta, which means admins can use it without enrolling in a specific beta program.


Additional details
You can find more information in our Help Center about migrating other forms of data from different types of source accounts.

Getting started
  • Admins: Visit The Help Center to learn more about the new data migration service and migrating email.
  • End users: There is no end user action required

Rollout pace
  • This feature is available now in open beta.

    Availability
    • Available to Google Workspace Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, and Education Plus; Essentials Starter, Essentials, Enterprise Essentials, and Enterprise Essentials Plus, and Nonprofits customers

      Resources

        What’s changing

        The Groups Admin role can now be assigned for security groups or non-security groups. Previously, those with the Groups Admin role had access to all groups within an organization. This change gives administrators more granular delegation of group admin responsibilities, helping limit access to the most sensitive groups to only those who absolutely need it. 

        This feature is available in open beta, which means no additional sign-up is required to use the feature.

        Getting started

        What’s changing

        We’re giving admins more granular control over how mobile device management privileges are delegated. Specifically, admins can be assigned privileges for specific organizational units (OUs). This adds yet another layer of security by ensuring that access is scoped to the necessary OUs only. This feature is available as an open beta, which means you can use it without enrolling in a specific beta program.

        Creating a custom role, which is assignable at the OU level.

        Assigning permissions at the OU level



        Example experience for an admin with OU level permissions





        Getting started

        Rollout pace

        Availability
        • Available to all Google Workspace customers

        Resources

        What’s changing 
        Earlier this year, we introduced eSignature for Docs and Drive in beta. Today, eSignature for Docs and Drive is rolling out in general availability for all Workspace Individual customers. 


        Built directly into Google Docs, eSignature makes it easier for solopreneurs and small businesses to request signatures, keep track of and manage contracts like customer agreements, vendor contracts, stakeholder sign-offs and more. eSignature can be used to: 
        • Request signatures, see the status of pending signatures, and find completed contracts. 
        • Sign official contracts directly within Google Drive, eliminating the need to switch apps or tabs. 
        • Create a copy of any given contract so it can be used as a template to initiate multiple eSignatures requests.



        Since the last announcement, we’ve expanded functionality to include the following features:
        • Audit trail: all completed contracts will automatically contain an audit trail report.
        • Multi-signer: the ability to request a signature from more than one user.
        • Non-Gmail users: the ability to request an eSignature from non-Gmail users.
        • Initiating eSignature on PDF (beta): the ability to initiate an eSignature on PDF files stored in Drive.

        We’ll also be introducing more features for eSignature in the next few months, including:
        • PDF templates: the ability to easily reuse a PDF file as contract templates.
        • Custom text fields: the ability to ask signers to add relevant information (e.g. job titles, email address) to the contract. 

        Additional details
        Select Google Workspace editions (see the “Availability” section below) can apply to beta test eSignature using this form. We will be accepting beta applications until December 18, 2023.


        This feature will be available as part of a larger beta, which includes access to new custom email layouts in Gmail. These new email layouts allow users to customize existing templates, reuse a custom layout in multiple email campaigns, or create a brand new layout from scratch. Once you sign up for the beta you will see the eSignature and new Gmail features in the coming weeks.

        Getting started

        Rollout pace

        Availability
        • Available to Google Workspace Individual Subscribers 

        • Eligible for beta: Google Workspace Business Standard, Business Plus, Enterprise Starter, Enterprise Standard, Enterprise Plus, Enterprise Essentials, Enterprise Essentials Plus and Education Plus

        Resources

        This announcement was made at Google Cloud Next ‘23. Visit the Workspace Blog to learn more about the next wave of AI innovation in Workspace. 


        What’s changing 
        If your organization uses a mixture of messaging tools, you can now use Mio to enable messaging interoperability between Google Chat and other platforms such as Slack and Teams. This is available now in beta, with general availability expected in early 2024. 




        Who’s impacted 
        Admins 


        Why it matters 
        We know that communication and collaboration happens over multiple channels and tools. This can cause missed messages, silos of communication, and a frustrating experience monitoring multiple chat tools. 


        That’s why we’re partnering with Mio, a leading provider of collaborative interoperability solutions helping customers enhance their productivity by streamlining communication across multiple channels. You can leverage Mio to create a seamless experience between Chat and the various tools you need to get your work done. 

        Getting started 


        Availability 
        Note: In order to leverage Mio’s interoperability capabilities, Mio licenses are required. 
        • Beta Availability: To request beta access, reach out to your account rep or submit this form to contact Mio
        • General Availability: Available to Google Workspace Business Starter, Business Standard, Business Plus, Essentials Starter, Enterprise Essentials, Enterprise Essentials Plus, Enterprise Standard, Enterprise Plus, Frontline Starter, Frontline Standard, and Nonprofits customers 

        Resources 

        What’s changing 
        In June 2022, we began alpha testing the ability to request and capture eSignatures in Google Docs. Based on the feedback we received, we’re ready to move this feature to the next level: 
        • eSignature is now available as an open beta for Google Workspace Individual subscribers — no additional sign-up is required to use the feature. 
        • eSignature will be available in beta for select Google Workspace customers — see the “Additional details” section below for more information.
        eSignature in Google Drive

        eSignature in Google Docs





        Who’s impacted
        Admins and end users


        Why you’d use it
        For solopreneurs and small businesses, keeping track of contracts, customer agreements, and other binding documents can be challenging. To help streamline this workflow, we’re natively integrating eSignature in Google Docs, allowing you to request and add Signatures to official contracts, directly in Google Docs. 

        eSignature makes it easier to:
        • Quickly request signatures, see the status of pending signatures, and find completed contracts.
        • Sign an official contract right from Google Drive without having to switch apps or tabs.
        • Create a new copy of the contract for each request so that you can use your document as a template and initiate multiple eSignatures requests. 

        Additional details
        Later this year, we will introduce support for the following new eSignature capabilities:
        • Audit trail: all completed contracts will automatically contain an audit trail report.
        • Multi-signer: the ability to request a signature from more than one user.
        • Non-Gmail users: the ability to request an eSignature from non-Gmail users
        • Initiating eSignature on PDF: the ability to initiate an eSignature on PDF files stored in Drive

        Beta availability for Google Workspace customers
        Select Google Workspace editions (see the “Availability” section below) can apply to beta test eSignature using this form. This feature will be available as part of a larger beta, which includes access to new custom email layouts in Gmail. These new email layouts allow users to customize existing templates, reuse a custom layout in multiple email campaigns, or create a brand new layout from scratch. Once you sign up for the beta you will see the eSignature and new Gmail features in the coming weeks.


        Getting started

        Rollout pace
        • eSignature for Workspace Individual users
          • Gradual rollout (up to 15 days for feature visibility) starting on August 8, 2023
        • eSignature beta for Workspace customers:
          • We will be accepting beta applications and allowlisting customers over the next several weeks.

        Availability
        • Available to Google Workspace individual subscribers
        • Eligible for beta: Google Workspace Business Standard, Business Plus, Enterprise Starter, Enterprise Standard, Enterprise Plus, Enterprise Essentials, Enterprise Essentials Plus and Education Plus


        Resources

        What’s changing 
        For select Google Workspace editions, admins can import sensitive, encrypted files from third-party storage using Client-side encryption and the Google Drive API, preserving the confidentiality of your data. Eligible admins can apply for beta access using this form


        Who’s impacted 
        Admins 



        Why it’s important 
        Currently, client-side encryption allows for additional encryption by end users within Google Workspace. However, we know it’s critical for our customers and partners to import sensitive content into Google Drive on behalf of their users. With the launch of this beta functionality, admins will be able to easily bulk import files and keep them private with client-side encryption. 


        Google Workspace already uses the latest cryptographic standards to encrypt all data at rest and in transit between our facilities. Client-side encryption helps strengthen the confidentiality of your data while helping to address a broad range of data sovereignty and compliance needs. Client-side encryption is already available for Google Drive, Google Docs, Sheets, and Slides, Google Meet, Google Calendar and Gmail. For more information, see our original announcement.


        Getting started 
        • Admins: 
        • End users: There is no end user action required. 

        Rollout pace 
        • We will be accepting beta applications and allowlisting customers over the next several weeks. 

        Availability 
        • Available to Google Workspace Enterprise Plus, Education Standard, and Education Plus customers 

        Resources 

        What’s changing

        Available now in beta through our Developer Preview Program, you can read working location data using the Calendar API and get notified when those working locations change. Previously, we said this functionality would be available through a separate API. However, in order to provide a more streamlined experience, this functionality will be instead available in the Calendar API. 

        Using the API to read a Calendar user’s working location values can help you:

        • Analyze the flow and volume of people through physical campuses, helping you adapt on-site resources to the needs of your employees.
        • Share whereabouts across other internal or third-party surfaces, making it easier to enable tasks such as hot desk booking or schedule in-office or remote working days.

        We anticipate write support for the API to become available in Q3 2023 — we’ll share an update here on the Workspace Updates Blog at that time.

        Getting started

        Admins and Developers: 

        Admins: 

        Availability
        While all developers will be able to use the API, the working location feature is only available for eligible Workspace editions:

        • Available to Google Workspace Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Plus, Education Standard, the Teaching and Learning Upgrade and Nonprofits customers, as well as legacy G Suite Business customers 
        • Not available to Google Workspace Essentials, Business Starter, Enterprise Essentials, Frontline, G Suite Basic customers 

        Resources

        What’s changing

        We’re expanding customer access to client-side encryption in Gmail on the web. Google Workspace Enterprise Plus, Education Plus, and Education Standard customers are eligible to apply for the beta until January 20th, 2023.

        Using client-side encryption in Gmail ensures sensitive data in the email body and attachments are indecipherable to Google servers. Customers retain control over encryption keys and the identity service to access those keys.


        Who’s impacted
        Admins and end users


        Why it’s important
        Google Workspace already uses the latest cryptographic standards to encrypt all data at rest and in transit between our facilities. Client-side encryption helps strengthen the confidentiality of your data while helping to address a broad range of data sovereignty and compliance needs. 

        Client-side encryption is already available for Google Drive, Google Docs, Sheets, and Slides, Google Meet, and Google Calendar (beta).

        Getting started

        • Admins: 
          • Eligible Workspace customers can apply for the beta after completing a few steps to prepare your account.
          • This feature will be OFF by default and can be enabled at the domain, OU, and Group levels (Admin console > Security > Access and data control > Client-side encryption). Visit the Help Center to learn more about client side encryption

        • End users: To add client-side encryption to any message, click the lock icon and select additional encryption, and compose your message and add attachments as normal. Visit the Help Center to learn more about using Client-side encryption for Gmail.





        Rollout
        We will be accepting beta applications and allowlisting customers over the next several weeks.


        Availability
        • Available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers
        • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers
        • Not available to users with personal Google Accounts

        Resources

        New updates 


        There are no new updates to share this week. Please see below for a recap of published announcements. 


        Previous announcements


        The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.



        In-room meeting participants can now join break out rooms 
        When using Google Meet Hardware devices, meeting hosts can now assign conference rooms to breakout rooms. | Available to Google Workspace Essentials, Business Standard, Business Plus, Enterprise Starter, Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Plus, the Teaching and Learning Upgrade, Frontline, and Nonprofits customers only. | Learn more


        Transcribe speech during Google Meet calls into a Google Doc 
        You can now transcribe a Google Meet video meeting into a Google Doc. The transcribed file is saved in the hosts “Meet Recordings” folder in Google Drive, similar to meeting recordings. | Available to Google Workspace Business Standard, Business Plus, Enterprise Starter, Enterprise Standard, Enterprise Plus, Education Plus, and the Teaching and Learning Upgrade customers only. | Learn more


        Use SIP Link to link phone numbers from local carriers to Google Voice 
        For Google Voice Standard and Premier customers, admins can now connect a Session Initiation Protocol (SIP) trunk with Voice. This allows phone numbers (PSTN services) from local carriers to be used for Google Voice through a secure set of certified Session Border Controllers (SBCs), such as Audiocodes, Cisco, Oracle, and Ribbon. | Available with Voice Standard and Voice Premier licenses only. | Learn more


        Preview and interact with files using smart chips in Google Sheets 
        As an extension of smart canvas, you can now add Google Drive files directly into a Google Sheet as a smart chip. | Learn more


        Expanding smart chips to include events in Google Sheets 
        In addition to the recent announcement of adding files to Google Sheets using smart chips, we're also making it easier for you to quickly insert Calendar events into Sheets. | Learn more


        Join or start a meeting directly from Jamboard on the web to kickstart collaboration 
        We’re expanding interoperability with Google Meet and Jamboard with the option to join or start a meeting directly from Jamboard on the web. This makes it easier for you to seamlessly present your jam and start collaborating. | Learn more


        Data loss prevention for Google Chat now generally available 
        Over the next several weeks, data loss prevention (DLP) rules for Google Chat will become generally available for select Google Workspace editions. Data protection rules for Chat help admins and security experts build a stronger framework around sensitive data to prevent personal or proprietary information from ending up in the wrong hands. | Learn more

        Improve your visibility in Google Meet video calls
        Google Meet can now automatically frame your video before joining a meeting to help ensure equal visibility for all participants. The automatic framing happens only once, so there are no motion distractions that can divert attention from the content of the meeting. | Available to Google Workspace Business Standard, Business Plus, Enterprise Essentials, Enterprise Starter, Enterprise Standard, Enterprise Plus, Education Plus, Education Teaching and Learning Upgrade, and Workspace Individual customers with eligible devices. Also available to Google One subscribers with 2TB or more storage space with eligible devices. | Learn more

        For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

        This announcement was made at Google Cloud Next ‘22. Check out Next OnAir to tune into the livestream or watch session recordings following the event. Visit the Cloud Blog to learn more about the latest Google Workspace innovations for the ever-changing world of work. 


        What’s changing
        In July 2022, we announced data loss prevention (DLP) rules for Google Chat as an open beta. Over the next several weeks, this feature will become generally available for select Google Workspace editions. 


        Data protection rules for Chat help admins and security experts build a stronger framework around sensitive data to prevent personal or proprietary information from ending up in the wrong hands. These leaks, whether accidental or malicious, are a top concern for our customers. 


        Admins can selectively apply data protection rules to: 
        • Messages in group conversations, spaces, and/or direct messages 
        • Messages between internal and/or external participants 
        • Message text and/or attachments 

        Once DLP rules are applied, messages and files in relevant conversations will automatically be scanned for sensitive information. Admins can configure the action to be taken in response to sensitive data being detected, such as: block from sending, warn before sending, and log for audit. 


        In the Security Investigation Tool, we’ve added additional tabs which contain more information on incidents, such as Incident Details, containing information about the message, sender and a triggered rule, and Chat Transcript, showing preceding and following messages to the triggering one, providing a detailed context for investigation.

        Additional information regarding Chat events

        Getting started 
        • Admins: 
          • This feature will be OFF by default and can be enabled at the domain, OU, or group level. You can create DLP rules in the Admin console under Security > Data Protection
            • Note: You can modify existing DLP rules for Drive and Chrome to also apply to Chat. 
          • Visit the Help Center to learn more about turning data loss prevention in Chat on for your organization
          • If admins opt to log these events, they can be accessed in the Security Investigation Tool
        • End users: There is no action required. 

        Rollout pace 

        Availability 
        • Available to Google Workspace Enterprise Standard, Enterprise Plus, Education Standard, Education Plus. 
        • DLP for Chat is also available to Cloud Identity Premium users who are also licensed for Workspace editions that include Google Chat and Audit and investigation. Visit the Help Center for more information. 
        • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers 

        Resources 

        What’s changing 
        In 2021 we announced a closed beta for trust rules in Google Drive, which gives admins more control over how files can be shared, both within and outside of their organization. Beginning today, this feature will be available as an open beta for specific Google Workspace customers, which means you can use it without enrolling in a specific beta program. See below for more information regarding availability. 


        With trust rules, admins can enforce policies that limit internal and external sharing. Specific rules can even be set for organizational units and groups, allowing a more granular approach than enforcing blanket policies on every user. 


        Trust rules can be turned on in the Admin console — once enabled, it will replace “Sharing options” within the Google Drive portion of the Admin console. Your existing Drive sharing settings will automatically become trust rules – note that this will not change your existing sharing settings or security configurations. 


        See below for more information and availability. 


        Who’s impacted 
        Admins and end users 


        Why it’s important 
        Previously, admins were only given broad control over sharing settings for Drive, which meant choosing between options such as: no external sharing or only sharing with trusted domains. 


        By enabling the trust rules beta, admins now have more control over how files can be shared, both within and outside of their organization. For example, admins can limit what their frontline workers should have access to versus other parts of their organization. 


        Getting started 
        • Admins: Eligible Admins can enable this feature in the Admin console by going to Rules > Turn on trust rules. Visit the Help Center to learn more about trust rules


        • End users: Your Admin’s trust rules will determine who you can share and collaborate with on Drive files. 

        Rollout pace 

        Availability 
        • Available to Google Workspace Enterprise Plus, Enterprise Standard, Education Plus, and Education Standard Customers 
        • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as G Suite Basic and Business customers 

        Resources 

        What’s changing 
        For select Google Workspace editions, admins can now place shared drives into sub organizational units (OUs). Doing so enables admins to configure sharing policies, data regions, access management, and more at a granular level. 


        This feature is available now as an open beta, which means you can use the feature without opting-in to a specific program. 


        Who’s impacted 
        Admins and end users 


        Why it matters 
        Currently, all shared drives reside in the “root” OU. As such, all shared drives are subject to the same policies. This update gives admins the option to move shared drives to sub OUs within their organizations, such as Marketing or Legal, which allows for more control over the privacy and security of the shared drive's contents on a case-by-case basis. For example, admins can restrict sharing of a shared drive belonging to the legal department because it contains highly confidential information. Additionally, this also gives admins more flexibility over applying default sub OUs to newly-created shared drives, assuring each new shared drive subject to appropriate security policies. 


        With this update admins will have greater control and more options to control how their data is accessed and shared on a case by case basis. 

        Getting started 



        • End users: There is no end user setting for this feature — the ability to access or share certain files contained in a shared drive will vary. Visit the Help Center to learn more about sharing files in Google Drive

        Availability 
        • Available to Google Workspace Essentials, Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Standard, Education Plus, the Teaching and Learning Upgrade, and Nonprofits customers 
        • Not available to Google Workspace Business Starter, Enterprise Essentials, Frontline, as well as legacy G Suite Basic and Business customers Not available to users with personal Google Accounts 

        What’s changing 
        Previously, users in organizational units (OUs) or groups with active Drive Data Loss Prevention (DLP) policies couldn’t respond to external forms with File Upload questions. 


        Now, we’re launching a new beta that will allow users to respond to external forms that contain File Upload questions, while also helping to prevent the leak of sensitive and confidential information. This beta will apply your domain’s existing Drive DLP policies to files that your users submit to Google Forms, without creating new rules or updating any existing ones. 


        Admins of eligible customers can express interest in the beta using this form




        Who’s impacted 
        Admins and end users 


        Why it’s important 
        With this launch, end users will be unblocked from responding to Google Forms with File Upload questions across domains. At the same time, DLP gives admins control over what their users can share, and prevents unintended exposure of sensitive information such as credit card numbers or personal identifiable information. 


        Getting started 
        • Admins: 
          • Use this form to express interest in the beta. 
          • Once accepted into the beta, Drive DLP rules defined for your domain will be applied to files submitted to File Upload questions in Google Forms. 
          • If you are not using DLP for Drive, you can create DLP rules at the domain, OU, or group level in the Admin console under Security > Data protection. You can apply block, warn or audit actions, consistent with DLP for Drive. Visit the Help Center to learn more about turning data loss prevention in Google Forms on for your organization
        • End users: 
          • End users can respond to forms as usual, but can now respond to forms outside their domain, including forms that have File Upload questions. 
          • If a form violates Drive DLP rules for their domain, end users may see warnings or be blocked from submitting. 

        Availability 
        • Available to Google Workspace Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Standard and Education Plus customers 
        • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Frontline, and Nonprofits, as well as G Suite Basic and Business customers 


        Resources 

        What’s changing

        We’re announcing a new tool for Google Classroom called practice sets, which enables educators to transform new and existing content into engaging and interactive assignments. With autograding built in, teachers can receive performance insights and snapshots into student progress and use those insights to help inform future lesson plans. 

        If they get stuck and need support, students will see automated hints and video suggestions, along with real time feedback on their answers. Assignments can be completed with a variety of tools for annotation, such as a mouse, stylus, touchpad, or math keyboard depending on how students work best.

        When available, the beta will be globally available (note: in English only) for Google Workspace for Education Plus and the Teaching and Learning Upgrade. Education leaders can use this form to express interest in the beta.


        Who’s impacted
        End users


        Why you’d use it 
        Every student learns in their own way, though practice and specific feedback helps us all learn more effectively. In large classes, it can be challenging for teachers to support their students' individual journeys. Based on feedback we heard from our users, we’re introducing practice sets for Google Classroom. 


        Educators can easily transform their own teaching content into interactive assignments.  Students get real-time feedback as they complete practice sets, so they know whether they’re on the right track. When they’re struggling to solve a problem, they can get hints through visual explainers and videos. 


        With practice sets, educators can more easily get insight into which concepts need more instruction time and who could use extra support, giving them quick performance insights to shape future lesson plans. Visit the Keyword Blog to learn more about practice sets.




        Availability
        • When available, practice sets will be available to Google Workspace Education Plus (formerly G Suite Enterprise for Education) and the Teaching and Learning Upgrade customers
        • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Fundamentals, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers

        Resources

        What’s changing 
        We’re launching a beta for a new Directory Sync solution which can make it quicker and easier to synchronize your Active Directory user and group data with your Google Cloud directory. 


        Directory Sync is an alternative to Google Cloud Directory Sync (GCDS). You might want to consider it if you want to sync Microsoft Active Directory LDAP data with your Google cloud directory using a completely cloud-based solution, without the need to manage on-prem hardware and deployments. Please read more about its features and network requirements to learn whether it's right for you. 

        Who’s impacted 
        Admins 

        Why you’d use it 
        The new Directory Sync solution is: 
        • Cloud based: The cloud-based sync process is auto-scheduled to run on a continuous basis in a loop, so there’s no need to install a sync client or on-premises software. 
        • Easy to use: A simple and modern UI integrated with the Admin console makes it easy to use for those with no LDAP knowledge. Plus, there’s no need for Google exclusion rules if you would like to sync from multiple Active Directory sources or manage a subset of users or groups within Google without synching from Active Directory. 
        • Integrated reporting: It offers centralized reporting in the Admin console. You can filter, search, and set custom alerts. 
        • Native multi-directory support: You can sync users and groups from more than one Active Directory source. 

        The initial scope for the Directory Sync beta supports user and group sync with Active Directory only, and covers a limited range of attributes. In the future, we’ll add other features, including support for additional attributes, OU mapping to automatically place new user accounts in OUs, and more types of data. 


        Additional details 
        If your Active Directory server is located on-premises or hosted outside a Google Cloud environment, you’ll require a connection between Google Cloud and the LDAP server using Cloud VPN or Cloud Interconnect. Learn more about system requirements for using Directory Sync and supported network connections for Directory Sync


        Getting started 
        • Admins: To use the Directory Sync beta, go to Admin console > Home > Directory > Directory Sync. No beta sign up or registration is required. You can delegate the ability to manage Active Directory with the new Directory Sync admin user role. Use our Help Center to learn more about using the new Directory Sync, and see FAQs about Directory Sync. 
        • End users: No end user impact 

        Rollout pace 

        Availability 
        • Available to all Google Workspace customers, as well as legacy G Suite Basic and Business customers and Cloud Identity customers 

        Resources