WorryFree Computers   »   [go: up one dir, main page]

What’s changing 
Launching first to beta, we’re introducing data loss prevention rules for Gmail. Data protection rules help admins and security experts build a stronger framework around sensitive data to prevent personal or proprietary information from ending up in the wrong hands. This functionality is already available in Google Chat and Google Drive, and in Gmail you’ll be able to create, implement, and investigate rules in the same manner. 


Admins can create data protection rules to flag sensitive information from using your organization. These rules are applied to outgoing messages sent internally or externally and admins can choose whether all content (including attached files and images), the body of the email, email headers, or subject lines should be scanned. You can configure your rules to look for sensitive text strings, custom detectors, or select predefined detectors. If a message violates a rule, admins can choose to:

  • Block message — the sender will receive a notification about message delivery failure and more information about the policy they violated.
  • Quarantine message — the message will require review and approval by an admin before delivery. If the message is rejected by an admin, the user may receive a notification about it.
  • Audit only — the message is delivered, but it is captured in rule log events for further analysis. This is particularly advantageous because it allows admins to assess the impact of rules before introducing them to your end users.

Data loss prevention for Gmail are available for select Google Workspace customers (see the “Availability” section below) — no additional sign-up is required to use the feature. 

Create data protection policies for Gmail alongside Drive and Chat

Build flexible conditions with selection of predefined and custom detectors of sensitive information

Set up a rule with Audit Only action applied to messages sent outside of organization. The severity level for event logging is set up to ‘Medium’ and alerting via Alert Center is turned on 

Detailed information about the event in the Alert Center

Overview of DLP incidents in the Security Dashboard with further option to investigate audit logs in detail

Who’s impacted
Admins and end users



Why it’s important

In addition to detecting sensitive content, DLP in Gmail offers additional benefits such as:

  • Simplified deployment and data protection policies management with rules for Gmail, Drive and Google Chat unified into the same area and workflow.
  • Advanced detection policies with flexible conditions, wide selection of predefined detectors for global and regional information types, custom detectors (Regular Expressions and word lists), targeting on specific parts of a message (header, subject, body). 
  • Granular configuration of policies scope, defining sender audiences (at domain, OU, and group levels) and recipient audiences (internal, external, both).
  • Actions with various levels of restriction such as block delivery of message (Block), quarantine message for review (Quarantine), and log event for future audit (Audit only).
  • Tools for incident management and investigation such as the Alert Center, Security Dashboard and Security Investigation Tool.


Additional details
How does DLP in Gmail compare to Content Compliance rules?
Content compliance in Gmail does offer similar functionality in that you can create rules to prevent messages that contain specific content from being sent. However, unlike DLP in Gmail, admins have no way to preview the impact of these rules before deploying them broadly.


Further, content compliance offers a variety of features that are better suited for filtering content. For example, you can:
  • Set up a metadata match on a range of IP addresses, and quarantine messages from IP addresses outside of the range.
  • Route messages with content that matches specific text strings or patterns to a specific department, suited the best to process information.

Getting started
  • Admins: 
    • Data loss prevention rules can be configured at the domain, OU, or group level. DLP rules can be enabled in Gmail in the Admin console under Security > Access and data control > Data protection. Visit the Help Center to learn more about controlling sensitive data shared in Gmail.
      • Note that you can modify existing DLP rules for Drive and Chat to also apply to Gmail. 
    • DLP events can be reviewed in the Security Investigation Tool or Security > Alert Center, if alerts are configured in rules.


    • We recommend selecting “Audit only” when you’re setting up a rule. When selected, messages that match the conditions of a rule will be delivered with the detection being logged. This allows you to rest new rules and monitor their performance, or to passively monitor the  environment without interrupting email flow for your users.

    • Note on asynchronous and synchronous scanning: With DLP for Gmail, data protection rules are scanned asynchronously, which means that the message is blocked or quarantined after it leaves the sender’s mailbox and before being dispatched to the recipient. We’re working on the ability to scan data protection rules synchronously when a user hits “Send” in order to notify users about sensitive content before the message leaves their mailbox. 


    • Please share your feedback on this feature with us — this will help us continue to improve the experience as we move through beta and toward general availability. You can share your feedback by selecting the “Send feedback” button located in the bottom left corner of your screen of any data protection related page in the Admin console.


  • End users: When configured by your admins, you’ll be notified if your message contains information that violates a DLP rule

Rollout pace
Availability
Available to Google Workspace:
  • Enterprise Standard, Enterprise Plus
  • Education Fundamentals, Standard, Plus, and the Teaching & Learning Upgrade
  • Frontline Standard
  • Cloud Identity Premium customers

What’s changing 
Beginning today, admins can migrate encrypted emails from other services like Microsoft 365, Microsoft Exchange, or Virtu, to Gmail client-side encryption in the S/MIME format. This enables Google Workspace customers to simplify the migration process by bulk importing sensitive emails as S/MIME messages without compromising their privacy or compliance posture.


Specifically: 
  • S/MIME messages imported from other mail providers are now supported by Gmail CSE 
  • Virtru customers can use our migration utility to encrypt their plain-text archives from Vault or Takeout, and import them as S/MIME messages 
  • Customers can bulk-import any plain-text email archives into Gmail as S/MIME messages
Additional details
The Gmail CSE Migration Utility is available for Windows, Mac, and Linux and supports PST & Mbox file formats. 

Getting started 

Rollout pace 
Web & Android: 
  • This feature is available now.
iOS: 
Availability 
  • Available to Google Workspace Enterprise Plus, Education Standard, and Education Plus customers 
Resources 

What’s changing
In 2022, we made it easier for you to send professional-looking emails, announcements, newsletters and more with layouts. These are predefined email templates that can be further customized with company or brand color schemes, logos, images, links and more. In 2023, we took this a step further by introducing the ability to customize an existing template, reuse a custom layout in multiple email campaigns, or create a brand new layout from scratch for Workspace Individual subscribers. 


Today, we’re excited to announce that even more users across Google Workspace editions can now create customized email layouts using a new email layout editor that is accessible from the compose screen in Gmail or Google Drive. In the layout editor, you can create a new email layout from scratch or select from a predefined set of email templates, which include images, text elements and buttons. 


You can then fully customize these templates by placing elements such as color schemes, logos, images, footer text and links wherever you’d like. You can also share a layout file directly from the email layout editor using the Share button. Once another user has edit access, they can open the same layout in their Gmail or from Drive and you can collaborate with them in real time. 
Create fully customized email campaigns using new layout editor tool


Who’s impacted 
Admins and end users 


Why you’d use it 
With Google Workspace, you can create, collaborate and communicate seamlessly across our apps. This new feature is yet another way we are striving to help you do so as you create fully customized announcements, newsletters, and other mass-email campaigns. 

Getting started 
  • Admins: 
    • Customized layouts are ON by default at the domain level. You can turn layouts ON or OFF for specific domains, OUs, or groups by going to the admin panel for Gmail. 
    • If you don't want users to use Docs, Sheets, Slides, Drawings, Forms, and email layouts, but to still use Drive for file management, leave Drive turned ON and turn OFF Docs creation.
    • Visit the Help Center to learn more about managing Gmail settings for your users, customizing access policies for different organizational units or groups, and turning Docs creation ON or OFF.
  • End users: If enabled by your admin, visit the Help Center to learn more about using layouts in Gmail and Drive. 
    • Gmail: 
      • You can access custom email layouts in Gmail from the layout icon in your Compose toolbar.

gmail - compose toolbar
      • You can then open the full screen editor from the embedded editor in Gmail using the “Edit in full screen” button in the top-right:

gmail - edit in full screen


    • Drive:
      • You can open an email layout that you have in Drive (an email layout created previously or an email layout shared with you) by double clicking the email layout file in Drive.

email layout in drive
      • Your custom layouts are stored in Drive as a special file type associated with the layouts editor.  You can find email layouts in Drive by searching: “type:email-layouts”
    • You can also access the standalone editor by going to docs.google.com/email-layouts/create?title=newDoc.
    • Mail-merge tags work with email layouts when enabled in Gmail. You can insert mail merge tags in email layouts. Visit the Help Center to learn more about sending personalized emails with mail merge.

Rollout pace 
Embedded layout editor (in Gmail's compose window): 
Full screen editor for email layouts & feature availability via Google Drive: 

Availability
  • Available to Workspace Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Standard, Education Plus and Workspace Individual subscribers 

Resources 

What’s changing 
Admins can now set client-side encryption (CSE) to be on by default on Android and iOS for: 
  • Newly drafted Gmail messages and replies 
  • Newly created Google Calendar events 
  • Newly uploaded Google Drive files

Client-side encryption in Gmail


Admins can now set client-side encryption as the default mode for users on both web and mobile that regularly handle sensitive data. This allows organizations the flexibility to meet their compliance and regulatory requirements and reduce the burden on change management programs. Each new email, event and uploaded file on mobile is automatically client-side encrypted with customer managed keys meaning the user is compliant with their org’s policy from the outset. For organizations with strict regulatory or sovereignty requirements, this can help them close compliance gaps by defaulting users to the preferred mode for handling sensitive data while on the go. 

For more information, check out our original announcement.

Getting started

Rollout pace

Availability
  • Google Workspace Assured Controls is available as an add-on to Google Workspace Enterprise Plus customers only. For more information, contact your Google account representative.

Resources

2 New updates

Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.


Unsubscribe from emails on Gmail more easily 
We know managing unwanted emails is a source of frustration for many users. That’s why we announced new guidelines for bulk senders a few months ago to help users stay safe. Now, we’re introducing new ways to make it even easier to unsubscribe from unwanted emails in Gmail on web and mobile by:
  • Adding the unsubscribe button to the hover actions in the threadlist on web. When the unsubscribe button is clicked, Gmail sends a http request or an email to the sender to remove your email address from their mailing list. 
    Unsubscribe from emails on Gmail more easily
  • Moving the unsubscribe button from the three dot menu to appear more prominently in your email on your Android and iOS devices.
Additionally, we know it is common for people to receive unwanted messages, despite initially signing up to receive them from brands or organizations. These messages often originate from legitimate senders, and marking them as spam can negatively impact the sender's email reputation and can potentially affect the deliverability of future emails. For this reason, we're changing the text of the buttons to make it clearer for users to choose between unsubscribing or reporting a message as spam. 

These features are now available to all Google Workspace customers and users with personal Google Accounts on web and iOS devices, and are rolling out now on Android devices at an extended pace (potentially longer than 15 days for feature visibility). | Learn more about unsubscribing from emails and reporting spam in Gmail.


Updating the mobile experience on Android tablets and foldable devices 
Last year, we announced enhancements to the Google Drive mobile experience on Android tablets. This included several modernizations, such as shifting the navigation bar to the side of the Drive app. Similarly, we’ve moved the navigation bar for Gmail to the side to optimize the experience on tablets and foldable devices. This migration will make it easier for users to switch tabs in Gmail. | Available now to all Google Workspace customers and users with personal Google Accounts. 
Updating the mobile experience on Android tablets and foldable devices




Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.


Launch the Lucidspark whiteboarding app directly from Google Meet Series One Board 65 and Desk 27 devices 
By the end of the month, Lucidspark by Lucid Software can be launched directly from Google Meet Series One Board 65 and Desk 27 devices. With this integration, users will be able to share and participate in a Lucidspark whiteboard session in a Meet call, either initiated from the Series One Board 65 and Desk 27 or a remote participant on the call. | Learn more about the Lucidspark whiteboarding app. 

Use comments & action items on your client-side encrypted Google Docs 
You can now collaborate with others on client-side encrypted Google Docs to add, edit, reply, filter, or delete comments. You can also assign action items to yourself or others. This added functionality helps bring parity to unencrypted docs while also ensuring your data is behind encryption keys you control, including the identity provider used to access those keys. | Available to Google Workspace Enterprise Plus, Education Standard and Education Plus customers only. | Learn more about CSE comments & action items in Docs. 

Combine multiple video effects, improve lighting and audio in Google Meet 
We’re launching three new features to personalize your appearance in Google Meet. | Learn more about combining multiple video effects on web and mobile, studio lighting on web and studio sound. 

Join meetings as a guest without a Google account on mobile devices 
You can now quickly join a meeting as a guest without signing into a personal or work Google account or creating a new Google account. This functionality already exists for meetings on the web and, by expanding to mobile, guests now have greater flexibility for joining Meet meetings on the go. | Learn more about joining meetings as a guest.

Star messages in Google Chat on mobile
Last November, we introduced starred on web, an additional shortcut in the redesigned Google Chat navigation panel that helps you stay on top of your most important messages. We’re excited to announce this is now available on Android and iOS mobile devices. | Learn more about starring messages.

Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.

Rapid Release Domains: 

Rapid and Scheduled Release Domains: 

For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases). 

What’s changing
Last year, we improved the client-side security of Google Docs, Sheets, Slides, Forms, Sites, Drawings, Drive, and Calendar with Trusted Types. This browser-based runtime feature limits the uses of Document Object Model (DOM) APIs that are used by the apps listed above or third-party extensions. Trusted Types also reduce the possibility of Document Object Model Cross Site Scripting (DOM XSS), which continues to be one of the most critical threats to web security. 

DOM XSS occurs when a cyber attacker injects malicious code into a web page, which can then be executed by the victim's browser. This can allow the cyber attacker to steal cookies, hijack sessions, and even take control of the victim's computer. 

To defend against this, we’re excited to announce the expansion of Trusted Types to Gmail. This will provide a defense against DOM XSS and further enhances our advanced data protection controls to keep users and data safe across more of the apps they use everyday. 


Who’s impacted 
Developers (relying on any Chrome extensions that modify DOM APIs.) 


Additional details 
This new enforcement mode will require third-party extensions to use typed objects instead of strings when assigning values to DOM APIs. Once Trusted Types are fully enforced, the Trusted Types directive will be present in the Content Security Policy (CSP) header: 

Content-Security-Policy: require-trusted-types-for 'script';report-uri https://mail.google.com/mail/cspreport 


Getting started 
  • Admins: There is no admin control for this feature. 
  • Developers: 
    • To make code Trusted Types compliant, signal to the browser that data being used within the context of these DOM APIs is trustworthy by creating a Trusted Type special object. 
    • There are several ways to be Trusted Types compliant, such as removing the offending code, using a library (such as safevalues or DOMPurify), or creating a Trusted Types policy. To ensure a seamless experience for users, we recommend employing these techniques before Trusted Types enforcement is rolled out. Failure to make code Trusted Types compliant may cause feature breakages for third-party extensions as their DOM manipulations will be blocked by the browser. 
  • End users: There is no end user setting for this feature. 

Rollout pace 

Availability 
  • Available to all Google Workspace customers and users with personal Google Accounts 

Resources 

What’s changing
Earlier this year, we informed users that Gmail Basic HTML view for desktop web and mobile web would be disabled starting in early 2024. We know that many users in the accessibility community use Basic HTML view, so today we’re sharing a guide to help screen reader users make the switch from HTML to Standard view. This new guide, along with an existing resource to ensure the best Gmail experience when using a desktop screen reader, should help users get up to speed on Gmail Standard view. 

If you haven’t used Standard view recently, you’ll notice we’ve made numerous usability improvements, including enhancements for people that prefer or require the precision of navigating the user interface by keyboard or screen reader. Accessibility of Standard view has significantly improved over the last few years and we’re committed to continuing to improve the accessibility experience and making new features accessible going forward. 

Getting started 
  • Admins: There is no admin control for this feature. You can use Gmail on your browser in Basic HTML view through February 2024. After this, Gmail automatically changes to Standard view. 
  • End users: Once Basic HTML view is disabled, users will automatically be redirected to the Standard Gmail view which provides the latest in Gmail security and features. Users on old browsers may need to update their browser to use the Standard view. On mobile, users can also download the official Gmail app. Visit the Help Center to learn more about using Gmail with a screen reader. 
Rollout pace 
Availability 
  • This impacts all Google Workspace customers and users with personal Google Accounts 
Resources 

What’s changing

Admins can now set client-side encryption (CSE) to be on by default for:

  • Newly created Gmail messages, Google Calendar events. 
  • Newly created Google Docs, Sheets, and Slides files.
  • Newly uploaded Google Drive files.

Admins can set client-side encryption as default on for users in Organizational Units (OUs) that regularly handle sensitive data requiring additional encryption. This allows organizations the flexibility to meet their compliance and regulatory requirements and reduce the burden on change management programs. Users are prompted to create a CSE object natively in each app meaning their emails, events and files are encrypted by default with customer-managed keys and are private from Google. For organizations with strict regulatory or sovereignty needs, this can help them close compliance gaps by defaulting users to the preferred mode for handling sensitive data.  

Drive:


Gmail:

This is available on the web initially, with support coming for mobile apps in the future. 

Who’s impacted

Admins and end users


Why it matters

This feature is important for Google Workspace admins as it improves users compliance behavior without sacrificing productivity and increases control for admins implementing data control policies. It also includes improved audit logs, providing more detail for admins compiling regulatory compliance reports.

Workspace already uses the latest cryptographic standards to encrypt data by default, at rest and in transit between our facilities. Client-side encryption goes beyond this, giving organizations authoritative control and privacy as the sole owner of private encryption keys and the identity provider of the encryption keys. It gives organizations higher confidence that any third party, including Google and foreign governments, cannot access their confidential data. Users can continue to collaborate across their preferred apps in Workspace while IT and compliance teams can ensure that sensitive data stays compliant with regulations. 


Getting started

Rollout pace

Availability
  • Google Workspace Assured Controls is available as an add-on to Google Workspace Enterprise Plus customers only. For more information, contact your Google account representative.

Resources

3 New updates

Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.


New ways to use the Google Sheets app on iOS devices 
You can now copy charts from the Google Sheets app on all iOS devices and paste them externally as images or within the same spreadsheet as a duplicate chart. In addition, you can modify text formatting using the contextual toolbar in Sheets when a keyboard is attached to iOS tablets. | Rolling out to Rapid Release and Scheduled Release domains now. | Available to all Google Workspace customers and users with personal Google Accounts. | Learn more about adding & editing a chart or graph and editing & formatting a spreadsheet
New ways to use the Google Sheets app on iOS devices



Adding ‘Admin managed apps’ category to Google Workspace Marketplace
We’re excited to announce a new featured app category in the Marketplace: Admin managed. These Enterprise apps can be installed only by a Google Workspace administrator for their organization. | Available now to all Google Workspace customers. | Learn more about Featured app categories


Bulk select in Gmail on Android and iOS devices 
We’re introducing a feature that enables you to bulk select a batch of messages in the email threadlist with one tap using the Gmail app on Android and iOS devices. After clicking the select all icon, a batch of messages will be selected, enabling you to easily perform email actions such as deleting multiple messages or marking them as “read”. | This feature is available now on Android devices and is rolling out now to Rapid Release and Scheduled Release domains on iOS devices. | Available to all Google Workspace customers and users with personal Google Accounts. 
Bulk select in Gmail on Android and iOS devices



Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.



Create shareable video presentations in Google Slides 
We’re introducing slides recordings, a new Google Slides feature that lets you easily record yourself presenting, and then share the presentation with others to view when it works for them. | Available to Google Workspace Business Standard, Business Plus, Enterprise Starter, Enterprise Essentials, Enterprise Essentials Plus, Enterprise Standard, Enterprise Plus and Education Plus only. | Learn more about slides recordings. 

The next evolution of automated data entry in Google Sheets 
Enhanced Smart Fill in Google Sheets is available for customers with the Duet AI for Google Workspace Enterprise add-on. | Learn more about enhanced smart fill

Expanding message bubbles in Google Chat to iOS devices 
In September, we introduced message bubbles in Google Chat on web and Android, enabling users to more easily differentiate incoming versus outgoing messages in the Chat message stream. This week, we’re excited to announce the expansion of message bubbles to iOS devices. | Learn more about message bubbles

Updates to the Google Drive scanner on Android & iOS devices 
We’re introducing additional enhancements to the Drive scanner on Android devices, which now powers the Google Pixel camera and includes improvements to the scanner experience when capturing content. We’re also expanding the Google Drive scanner and title suggestion feature to iOS devices. | Learn more about Drive scanner. 

Introducing a new homepage view in Google Drive 
We’ve added a new streamlined homepage for Drive called Home that makes it easier and faster for you to find files that matter most. | Learn more about Drive home

Introducing a new mobile experience for Google Chat 
We recently announced a streamlined user experience in Google Chat to help you find what you need much faster, including new features like home and mentions. Starting today, we’re excited to introduce a new bottom navigation bar within the Chat app on Android & iOS devices to help you easily access these features on mobile. | Learn more about the Chat mobile experience

Google Vault now supports Google Calendar 
Google Vault now supports Calendar, which means customers can take new actions around Calendar data. | Available to Google Workspace Business Plus, Enterprise Essentials, Enterprise Essentials Plus, Enterprise Standard, Enterprise Plus, Education Standard, Education Plus customers or customers with the Vault add-on license only. | Learn more about Vault supporting Calendar

More insights to help admins troubleshoot Google Meet hardware issues 
In 2022, we introduced several improvements for managing Google Meet hardware devices. These improvements included surfacing additional information about device issues, such as a description of the issue, when the issue was detected, and more. Now, we’re taking these improvements one step further by providing admins with even more data points. | Learn more about Google Meet hardware issues

Monitor insider risk of Google Workspace data with Chronicle 
Admins can now more seamlessly integrate their Google Workspace data with Chronicle (Google’s cloud-native Security Operations platform), to quickly detect, investigate and take action on risky activity and threats. | Available to Google Workspace Enterprise Standard and Enterprise Plus customers only. | Learn more about Chronicle

Google Classroom now supports roster import from SIS partners
Educators can now easily import students from their student information system (SIS) to Google Classroom using OneRoster. This integration saves educators time and helps make class setup much quicker. | Available to Education Plus and the Teaching and Learning Upgrade only. | Learn more about roster import. 

Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.


Rapid Release Domains: 
Scheduled Release Domains: 
Rapid and Scheduled Release Domains: 


For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

What’s changing
Starting today, you can access a more complete emoji selection and set emoji skin tone and gender preferences with the modernized emoji picker in the web version of Gmail. 
updated and more inclusive emoji picker in Gmail
Who’s impacted
End users 


Why it matters 
This update enables users to express themselves more authentically using emoji variations in Gmail. 


Getting started 
  • Admins: There is no admin control for this feature. 
  • End users: This feature will be ON by default and cannot be disabled by the user. To select your emoji preference, click the emoji icon in the bottom toolbar of your email draft > select the arrow in the bottom right corner of an emoji > choose your skin tone or gender preference for that specific emoji. These individual selections will be saved until updated by you. 
updated emojis
Rollout pace 

Availability 
  • Available to all Google Workspace customers and users with personal Google Accounts

4 New updates

Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.


Multi-task using new split screen feature in the Gmail app on large screen Android devices 
Last year, we announced numerous improvements to the Google Workspace experience on large screen Android devices, which included multi-instance support on Drive, Docs, Sheets & Slides. We’re excited to introduce a similar feature for the Gmail app on Android tablets & foldables. With this update, you can now open links & attachments directly beside your email content when your device is in landscape orientation. 
  • Upon tapping a link (or attachment) in your email, the link (or attachment) will open on the right half of the screen and the email will move to the left half. 
  • You can control the width of each half or make one the full screen by dragging on the divider handle. 
This feature is now available to all Google Workspace customers and users with personal Google Accounts. | Learn more about 7 productivity apps for Android tablets and foldable phones
Multi-task using new split screen feature in the Gmail app on large screen Android devices

Add Google Groups to spaces in Google Chat 
Last month, we rolled out the admin controls for a new feature that enables space managers and users with the permission to manage members to add Google Groups to a space. Starting this week, end users can utilize this option and add Groups to spaces in Chat. | Rolling out to Rapid Release domains now; launch to Scheduled Release domains planned for November 1, 2023. | Available to all domain-verified Google Workspace customers. | Learn more about adding a Google Group to a space. 


Add emoji reactions to comments in Google Slides 
Last week, we announced the ability to add emoji reactions to comments in Google Sheets. We’re excited to announce this is now available for comments in Google Slides, increasing collaboration by enabling you to quickly and creatively express your opinions about presentation content. | Rolling out to Rapid Release domains now; launch to Scheduled Release domains planned for October 31, 2023. | Available to all Google Workspace customers and users with personal Google Accounts. | Learn more about using comments, action items, & emoji reactions
Add emoji reactions to comments in Google Slides

Respond to access requests for Google Workspace files more efficiently on Android devices 
Earlier this year, we introduced a new file access experience to make it easier for file approvers to respond to pending access requests across Google Workspace. We’re happy to announce that this update is now available on Android devices. Within a file (Docs, Sheets, Slides, PDFs, etc.), click the Share button > select the Review button in the new banner to view the access request(s) > respond to the request(s). | Rolling out now to Rapid Release and Scheduled Release domains. | Available to all Google Workspace customers and users with personal Google Accounts. | Learn more about sharing files from Google Drive. 





Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.



Upcoming changes to third-party cookie requirements in Google Drive
Google Chrome and other browsers have begun phasing out third-party cookies in order to better protect user privacy. Starting January 2, 2024, Drive will start serving downloads without requiring third-party cookies that are embedded on third-party websites. | Learn more about third-party cookie requirements in Google Drive. 


Understand the impact of Context-Aware Access policies with Monitor Mode 
Admins can now use Monitor Mode to understand the implications of a Context-Aware Access (CAA) policy before deploying it to their end users. | Available to Google Workspace Enterprise Standard, Enterprise Plus, Education Standard, Education Plus, and Cloud Identity Premium customers only. | Learn more about Context-Aware Access policies with Monitor Mode. 


Use the space management tool to bulk delete Google Chat spaces 
Using the space management tool, admins can now delete multiple spaces within their organization at once. Over time, as more spaces are created, the list of spaces for an organization can become cluttered with abandoned and inactive spaces. | Available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Frontline, Enterprise Essentials, Enterprise Standard, Enterprise Plus, Education Fundamentals, Education Standard, Teaching & Learning upgrade, Education Plus customers only. | Learn more about bulk deleting Google Chat spaces. 


Subtly enhance your appearance with portrait touch-up when using Google Meet on mobile devices 
We’re introducing portrait touch-up in Meet, a new feature on mobile that enables you to lightly touch up your appearance from the green room before joining or during the meeting. | Available to Business Standard, Business Plus, Enterprise Essentials, Enterprise Starter, Enterprise Standard, Enterprise Plus, Education Plus, Teaching & Learning Upgrade, Google One and Google Workspace Individuals only. | Learn more about portrait touch-up in Meet. 


Map and sync system attributes of users from External Directory into Google Workspace 
Using Directory Sync, admins can map all the system or default user attributes, including custom attributes, from Microsoft Active Directory or Microsoft Azure Active Directory to Google Directory user attributes and synchronize them. | Learn more about Directory Sync. 


Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.

Rapid Release Domains:


3 New updates 

Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.

Improved paste values experience in Google Sheets 
Previously, when pasting a number in Google Sheets using Paste special > Values only, the content pasted was only the text from the original range of cells. For example, for the date 9/21/2023, paste values only would paste the date serial number of 45190. To improve upon this feature, the default for paste values for numbers will include values and the number format, meaning all of your numbers will retain their formatting as you are working in Sheets. | Available now to all Google Workspace customers and users with personal Google Accounts. 
Improved paste values experience in Google Sheets
Different certificates for signing and encrypting messages in Gmail 
If your organization uses different certificates for signing and encrypting messages, you can now use the Gmail CSE API to upload different encryption and signature public certificates for each user. | Rolling out to Rapid Release domains now; launch to Scheduled Release domains planned for October 9, 2023. | Available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers. | Visit the Help Center to learn more about using the Gmail CSE API to manage user certificates


Allow certificate mismatches for client-side encrypted messages 
In some cases, the email address associated with a user’s certificate might be different from their primary email address — this is known as a certificate mismatch. Admins can now opt to allow certificate mismatches, which means their end users will be able to decrypt and read messages with a mismatch. It should be noted that we recommend allowing certificate mismatches only when this feature is absolutely required for our organization. | Rolling out to Rapid Release domains now; launch to Scheduled Release domains planned for October 9, 2023. | Available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers. | Visit the Help Center to learn more about allowing certificate mismatches for client-side encrypted messages in Gmail.


Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.


Create, modify, and insert email templates within Groups messages 
When you’re using Groups to send messages, you can save a composed message as a template to reuse in the future. | Learn more about email templates within Groups messages

Additional space manager capabilities in Google Chat 
We’re adding two new controls to the list of space manager capabilities in Google Chat that were introduced earlier this year to ensure effective conversations take place in spaces. The new “Manage apps” and “Manage webhooks” options will allow space managers to control the ability of space members to add and remove apps and webhooks to a space. | Learn more about new space manager capabilities

Easily link to a specific message in Google Chat 
Building upon the recent updates in Google Chat, such as message views, in-line replies and larger spaces, we’re introducing message linking, an additional feature that helps teams collaborate more effectively. | Learn more about message linking

Easily add or remove groups of members to a space in Google Chat 
We’re introducing a new app for Google Chat called Bulk Member Manager that enables space managers and space members, who have permission to manage members, to easily add or remove members to or from a space in bulk. | Learn more about the Bulk Member Manager app

The next phase of digital whiteboarding for Google Workspace 
In late 2024, we will wind down the Jamboard whiteboarding app as well as continue with the previously planned end of support for Google Jamboard devices. | This update impacts all Google Workspace customers who use the Jamboard app or 55-inch Jamboard device. | Learn more about the winding down of the Jamboard whiteboarding app

Updates regarding the transition from spaces organized by topic to in-line threading in Google Chat 
In 2022, we introduced in-line threading for Google Chat and since March 2023, all newly created spaces in Google Chat are in-line threaded by default. On September 30, 2023, we will begin taking the next step toward a single, streamlined flow of conversation in Google Chat: all existing spaces organized by conversation topic will be upgraded to the in-line threaded experience. We’d like to share more information regarding the migration, what to expect, as well as what’s next for Google Chat. | Learn more about in-line threading in Google Chat

Client-side encryption in Gmail is now available on mobile devices 
We’re expanding client-side encryption in Gmail to Android and iOS devices, so you can read and write encrypted messages directly from your device. | Learn more about client-side encryption in Gmail on mobile devices.

Beginning September 30, 2024: third-party apps that use only a password to access Google Accounts and Google Sync will no longer be supported 
Google Workspace will no longer support the sign-in method for third-party apps or devices that require users to share their Google username and password. | Learn more about Access to Less Secure Apps (LSA).



Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.

Rapid Release Domains: