WorryFree Computers   »   [go: up one dir, main page]

What’s changing Starting on July 7, 2020, we will make phone verification prompts the primary 2-Step Verification (2SV) method for all eligible users, unless they are already using security keys as their 2SV method of choice. This means that if you sign in to your Google account and are also signed in on a smartphone, you will be asked to follow phone prompts to verify the login attempt. This will help increase account security while making it easier to sign in.

This won’t apply if you use a security key to protect your account. You’ll also still be able to use other methods (such as a code received by text) by selecting a different method during the phone prompt verification steps.
Phone prompts verify your sign-in attempt via your smartphone 


Who’s impacted End users

Why it’s important Phone prompts, also known as “on-device prompts,” are more secure than text or voice codes as a form of 2-Step Verification. They’re also easier to use, as they avoid requiring users to manually enter a code received on another device. By making prompts the primary method for more users, we hope to help them take advantage of the additional security without having to manually change settings—though they can still use other methods of 2-Step Verification if they prefer.


Additional details How phone prompts work 
After you enter your password to sign in to your Google Account, Google sends a "Trying to sign in?" prompt to every eligible mobile device where you’re signed in. This prompt tells you when and where your password was entered, and then asks you to confirm or block the sign-in attempt by simply tapping your mobile device. You can still select a different verification method during sign-in if one is available on your account. You’ll also stop receiving prompts on a phone if you sign out of that phone. Learn more about phone prompts.

Users with security keys are excluded from this change 
Users will not have prompts as their primary 2SV method in two situations:

  • If an organization enforces the “Only security key” 2-Step Verification option for a user, there will be no change and the user will continue to be required to use security keys. 
  • If a user currently has, or at any point in the future adds, a security key on their account, the security key verification will be presented as the primary method. 

Additionally, if a user doesn’t have 2-Step Verification turned on, this will not apply.


Getting started 

Rollout pace 

Availability 
  • Available to all G Suite customers and users with personal accounts. 

Resources 

What’s changingAs announced, we’re bringing Meet in Gmail to mobile. In early July 2020, we’ll launch this change to G Suite users by introducing a dedicated Meet tab in the Gmail iOS and Android mobile apps. This means users can join secure video meetings directly in Gmail without needing to open another app on their phone.

We’ll let you know on the G Suite Updates blog when this change starts rolling out.


Who’s impactedEnd users
Why you’d use itMeet in Gmail will allow users to start a new meeting, join a meeting by entering the meeting code, or join upcoming meetings scheduled in Google Calendar without leaving the Gmail app.
Additional detailsMeet in Gmail is already available on the web. This launch introduces the same functionality, and more new features, in the Gmail mobile apps. Note that as we get closer to the launch, your users may notice the following when they try to join meetings from their phones:

  • When they click on a Meet link from their Android or iOS device, they’ll be directed to the Gmail app to join the meeting.
  • The look and feel of the Meet app will be updated but the functionality will still be intuitive.



Note that if you click on a link in the Meet app, you will still stay in Meet and not be redirected to the Gmail app.These changes will roll out over the next few weeks.

Please note, during this rollout the experience for iOS users may differ. iOS users may see the Gmail app launch briefly and then close when they click on a Meet link. They’ll then be redirected to join the meeting in the Meet app. Joining meetings in the Meet app will only happen during the rollout phase and IOS users will eventually be able to join the meeting directly in Gmail.



Users with the Meet service turned off and EDU users who have video call creation turned off will not be able to see the Meet tab in Gmail or join meetings in Gmail app.
Getting started
  • Admins: There is no admin control for this feature.
  • End users: Meet in Gmail on mobile will be ON by default when users update their Gmail app. Users can hide the Meet tab inside of the Gmail app in their Gmail settings by deselecting “Show the Meet tab for video calling” under “Meet.”


Rollout pace


Availability
  • Available to all G Suite customers with the Meet service turned on
  • Users with a G Suite for Education account that is enabled to create Meet video meetings will have the Meet tab enabled in Gmail. EDU accounts that are not able to create Meet video meetings will not see the Meet tab in Gmail and should use the Meet mobile app on Android or iOS instead.

Resources


Quick launch summaryGoogle Meet can now be controlled independently of classic Hangouts chat in the Admin console. Please make sure your service settings are prepared by following the steps in the Help Center.

You can find more information about this change in an email that was sent to your domain's primary admin between the 11th and 18th of May 2020.
Getting startedAdmins: Visit the Help Center to learn more about turning Meet video calling on or off for your organization.

End users: End users are not impacted by this change.
Rollout pace

Availability
  • Applies to all G Suite customers

Resources


Quick launch summaryYou can now edit Google Calendar events in the quick-access side panel in Gmail and Docs, without having to go to the full Calendar page in your browser. You can even use “Find a Time” to see others’ calendar availability when scheduling events.

Getting startedAdmins: There is no admin control for this feature.

End users: There is no end user setting for this feature. Visit the Help Center to learn more about using Calendar in the side panel.
Rollout pace

Availability
  • Available to all G Suite customers

Resources


Quick launch summaryWe’re making some changes in Meet to ensure you can better see who, and what, you need to see in your meetings. We hope that these improvements help remote meetings feel more like in-person meetings.

Tiled view with presentations
We recently announced tiled layout in Meet, where you can see up to 16 other participants in your meeting. We’re now making improvements to that layout to allow you to see other attendees even when someone is presenting. Presentations appear in a large tile, with the most active participants to the side or bottom.

Saved layout preference
When you choose a new layout, this layout will be automatically saved as your preferred layout. This means it will be automatically applied for your future meetings, until you select a new one.

Additional UI improvements
We’ve made some minor improvements to the meeting UI to better utilize the space on your screen.
Getting started
Admins: There is no admin control for this feature.

End users: To learn more about the different layout options in Meet, check out the Help Center
Rollout pace
  • This feature is available now for all users.

Availability
  • Available to all G Suite customers and users with personal Google Accounts

Resources


What’s changing We’re updating the user interface for comments and action items in the Google Docs, Sheets, and Slides apps for Android. Some of the changes you may notice include:

  • Larger, clearer interface to make it easier to see comments and their context in a document. 
  • Shortcuts and gestures to help you quickly scroll through and respond to multiple comments. 
  • Quick access button to reply, “@” mention someone, and assign action items. 




Who’s impacted End users

Why it matters Commenting is a powerful way to collaborate on documents while remote. Comments can help you ask questions, document discussions, make sure other users see something, assign action items, and more. They’re particularly useful when working remotely, enabling multiple users to be part of discussions whenever and wherever it's convenient for them.

Getting started 
  • Admins: There is no admin control for this feature.
  • End users: This feature will be ON by default. To get started, tap on a comment when using the Docs, Sheets, or Slides app on an Android device. Use the Help Center to learn more about using comments and action items on Android

Rollout pace 

Availability 
  • Available to all G Suite customers and users with personal accounts. 

Resources 

Quick launch summary We’re updating the interface which tells users about the file save status and whether they’re working online or offline in Google Docs editors and Drawings. The changes will help users understand where the file is saved, whether they’re connected to the network, and if the file is available to edit offline.

This is an update to the interface only - there are no changes in the underlying functionality. The changes you may notice include:

  • A new location for document save status next to the document name. 
  • More descriptive text to indicate whether a document is saved to the cloud (when online) or to the device (offline). 
  • A new way to enable offline by clicking on the document status icon. Previously, you had to go to File > Make available offline


For users in domains where admins have turned off Docs editors offline access, we will adjust the message shown to users in order to minimize confusion regarding settings controlled by their admin. 

See images below for more details.

Getting started 

The saved file indicator is now next to the document name and features more descriptive text 


You can enable offline by clicking the document status icon 

Rollout pace 

Availability 
  • Available to all G Suite customers and users with personal Google Accounts. 

Resources 

Quick launch summary You can now configure the access permissions for an LDAP client by group. Previously, controls were only available at the organizational unit (OU) level.

LDAP clients are in the secure LDAP service, which enables users to access traditional LDAP-based apps and IT infrastructure using their G Suite credentials. This new feature allows you to allow or prevent specific groups of users from signing in to an application. This can help you make sure only appropriate users are able to access and use specific applications.

Group-based controls for LDAP clients in the Admin console 

Getting started 

Rollout pace 




Availability 
  • G Suite Enterprise, G Suite for Education, G Suite Enterprise for Education, and Cloud Identity Premium customers 
  • Not available to G Suite Basic, G Suite Business, G Suite for Nonprofits, and Cloud Identity Free customers 
Resources 

We’ve made several updates to the Admin console interface. Specifically, we’ve:
  • Streamlined the API client access page 
  • Improved and expanded the G Suite Marketplace apps (GSM) settings 
  • Made it easier to manage admin role assignments 
  • Created a new interface for domain management 
  • Updated the unmanaged users and consumer account invite section 

See below for more details on each of these changes.


Streamlined the API client access page The API client access page helps you grant API access to internal or 3rd-party apps, especially those using service accounts, on behalf of your users. We’ve created a simpler view of all apps that are authorized for domain-wide delegation and all authorized scopes, with service account and app name details. Updates to this view include:

  • A new location for the page. It’s now found at Security > API Controls > Domain-wide Delegation. It was previously at Security > Advanced settings
  • Improved interface, with more information and clearer UI, which makes it easier to see, understand, and manage apps and scopes. 
  • Removed applications domain-installed from G Suite Marketplace (GSM) from this view (they’re now in the GSM settings section, detailed below.) 

Visit the Help Center to learn more about controlling G Suite API access with domain-wide delegation
The new interface for domain-wide delegation in the Admin console 



Improved and expanded G Suite Marketplace apps (GSM) settings section The GSM section helps you control which GSM apps your organization can use. Updates in this section include:

  • General interface updates to several pages, including Admin console > Apps > G Suite Marketplace whitelist, Admin console > Apps > Settings for G Suite Marketplace apps, and Admin console > Apps > Domain install G Suite Marketplace apps
  • Functionality updates when you click into a specific app on the Domain install G Suite Marketplace apps page, including: 
    • A new “partially approved” status, in addition to "approved" and "not approved" to provide more visibility into data permissions for apps. 
    • New grouping for data access scopes by API buckets (e.g. "Gmail," "Calendar," etc) to make it easier to understand app data access. 
    • The OAuth client ID for the app. 

Visit the Help Center to learn more about how to manage Marketplace apps for your organization.
An example of the improved GSM app information page 



Easier to manage admin role assignments We’ve made updates to the area where you can view, create and assign admin roles within your organization. Improvements include:

  • A new roles home page, where you can quickly see all the system and custom roles and the admins assigned those roles. 
  • New quick-action buttons to more easily understand role privileges, then add and manage users in those roles. 
  • Easier ways to create and assign custom roles, including ability to copy an existing role. 

Use our Help Center to learn more about administrator roles in G Suite.
The new interface to manage admin roles 



New interface for domain management in the Admin console We’ve updated the interface you use to manage your primary domain, secondary domains, and domain aliases. When you go to Admin console > Domains > Manage domains, you may notice:

  • An updated interface with more complete information and descriptions of items and domain state. 
  • New grouped action buttons which make it easier to see and select the action you want to take, such as verifying domains, changing your primary domain, setting up MX records, and more. 
  • A new side panel which shows information about domains registered through Google, enabling you to quickly see and manage renewals and advanced DNS settings. 

Use our Help Center to learn more about how to add and manage domains in G Suite.
The new domain management interface in the Admin console 

Updated the unmanaged users and consumer account invite section We’re making improvements to the interface you use to find and manage users who have personal Google Accounts that use your organization's domain. Through this interface you can invite them to join your domain so you can better manage their accounts and any company data within it.

Specifically, when you go to Admin console > Tools > Transfer tool for unmanaged users, you’ll find an updated interface that makes it easier to:

  • Switch between managed and unmanaged account views. 
  • See and filter users with personal accounts. 
  • Invite them to migrate that account to your G Suite organization. 

Visit the Help Center to learn more about managing existing personal accounts for your organization.
Unmanaged user section in the Admin console

Getting started 
  • Admins: These updates will happen automatically. Use the Help Center links in each section above to learn more about the enhancements and available controls. 
  • End users: No end user impact. 

Rollout pace 
  • These updates are available now for all users. 

Availability 
  • Available to all G Suite customers 

Roadmap 
  • Updates to the G Suite Marketplace apps section in Admin console was listed as an upcoming G Suite release.

What’s changing We’re making it easier to use security keys with your Google Account on iOS devices. Specifically, we’re enabling native support for the W3C WebAuthn implementation on Apple devices running iOS 13.3 and above. This means you can use a USB or NFC security key directly on an iOS device, without installing the Google Smart Lock app.

Learn more about how you can use security keys on Apple devices on our Security blog.

Who’s impacted End users

Why it’s important Security keys provide the strongest form of 2-Step Verification (also known as two-factor authentication or 2FA) to help protect your account against phishing, especially when used as part of the Advanced Protection Program for the enterprise. With this launch you can now:

  • Tap a Titan Security Key (all of which have built-in NFC) on the back of your iPhone. 
  • Use any USB security key directly on an iOS device that has a USB port (such as an iPad Pro) or via an Apple Lightning to USB camera adapter on any other device. 
  • Use Bluetooth security keys or your phone’s built-in security key on any iOS device via the Google Smart Lock app


We hope this launch makes it easier for iOS users to take advantage of the protection security keys offer. See more about why this matters and how to use it on our Security blog.

Using an NFC security key on iPhone 
Getting started 

Rollout pace 

Availability 
  • Available to all G Suite and Cloud Identity customers, as well as users with personal Google Accounts 

Resources