What’s changing
Admins can now use Monitor Mode to understand the implications of a Context-Aware Access (CAA) policy before deploying it to their end users. Monitor Mode will not block end users. Instead, it will show how the policy will block user access overtime, which admins can review in the CAA audit logs. Monitor Mode is available for Google Workspace, other Google Apps & third party SAML apps.
Applying Monitor Mode to context-aware access policies
Who’s impacted
Admins
Why you’d use it
Before assigning Context-Aware Access levels, it’s critical for admins to understand the impact this will have on their end users. Using Monitor Mode helps admins fully understand the end user impact before deploying them in active mode, which can help avoid disruptions while helping admins make more informed decisions regarding their security strategies.
Getting started
- Admins: Visit the Help Center to learn more about deploying Context-Aware Access, assigning Context-aware access levels to apps, and Context-aware Access log events.
- End users: There is no end user action required.
Rollout pace
- Rapid Release and Scheduled Release domains: Full rollout (1-3 days for feature visibility) starting on October 17, 2023
Availability
- Available to Google Workspace Enterprise Standard, Enterprise Plus, Education Standard, Education Plus, and Cloud Identity Premium customers
Resources
- Google Workspace Admin Help: Control access to apps based on user & device context
- Google Workspace Admin Help: Create Context-Aware access levels
- Google Workspace Admin Help: Assign Context-Aware access levels to apps
- Google Workspace Admin Help: Deploy context-Aware Access
- Google Workspace Admin Help: Context-Aware Access log events