What’s changing
You can now configure context-aware access (CAA) custom access levels using advanced attributes directly from the Google Workspace Admin console. You can use more advanced signals such as time/date restrictions, credential strength, Chrome browser attributes or verified ChromeOS as well as third-party signals via BeyondCorp Alliance partners.
Who’s impacted
Admins
Why you’d use it
By making more attributes available, and by enabling set up and management of advanced access levels in the Admin console, it will be easier to help ensure your Google Workspace configuration is more secure.
Getting started
- Admins: This feature will be available by default but requires Admin action to set it up. Visit the Help Center to learn more about how to set up software and create Context-Aware access levels.
- End users: No end user impact.
Admin console screen to create an access level
Rollout pace
- Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on November 4, 2021
Availability
- Available to Google Workspace Enterprise Standard, Enterprise Plus, Education Standard, and Education Plus. Also available to Cloud Identity Premium customers.
- Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as G Suite Basic and Business, and Cloud Identity Free customers.
Resources
- Google Workspace Admin Help: Set up software and create Context-Aware access levels
- Google Cloud Documentation: Custom access level specification
- Google Cloud Documentation: Configuring time and day access conditions
- Google Cloud Blog: Democratizing Zero Trust with an expanded BeyondCorp Alliance
- Google Cloud website: BeyondCorp