G Suite Update Alerts

In addition to other apps, G Suite administrators can now automatically provision users to Asana, Dialpad, Freshdesk, Lucidchart, RingCentral, and Smartsheet

6/22/2017

When auto-provisioning is enabled for a supported third-party application, any users created, modified, or deleted in G Suite are automatically added, edited, or deleted in the third-party application as well. This feature is highly popular with admins, as it removes the overhead of managing users across multiple third-party SaaS applications.

Today we’re adding auto-provisioning support for six new applications: Asana, Dialpad, Freshdesk, Lucidchart, RingCentral, and Smartsheet. We previously launched auto-provisioning support for Box Enterprise, Salesforce Sandbox, Salesforce, Slack, and Workplace by Facebook, bringing the total number of supporting applications to 11.

G Suite Business, Education, and Enterprise customers can enable auto-provisioning for all eight supported applications. G Suite Basic, Government, and Nonprofit customers can configure auto-provisioning for up to three applications from the supported list. For specific details on how to set up auto-provisioning, check out the Help Center.

Launch Details
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:

G Suite Basic, Government, and Nonprofit customers can enable auto-provisioning for up to three applications
G Suite Education, Business, and Enterprise customers can enable auto-provisioning for all supported applications

Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Automated user provisioning (instructions for Smartsheet, Dialpad, and RIngcentral to be added soon)
Help Center: Using SAML to set up federated SSO

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Prevent users from creating Team Drives in Google Drive indefinitely

6/19/2017

When we launched Team Drives in March, we gave G Suite admins the ability to restrict the creation of Team Drives until January 1st, 2018. Since then, we’ve heard that some of you need longer-term control of this setting. In response to that feedback, we’re now removing the date restriction and allowing you to indefinitely prevent users in your organization from creating Team Drives.

As a best practice, we recommend allowing your users to create Team Drives and produce the workspaces they need for their projects. We suggest restricting Team Drives creation only when needed to aid in the initial deployment of the feature.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to G Suite Business, Education, Nonprofit, and Enterprise editions only

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Manage your Team Drive users and activity

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Gmail admins can now notify internal senders when their email gets quarantined

6/15/2017

Through Gmail compliance and routing settings, Gmail administrators can now choose to notify internal senders when their messages get quarantined, depending on your compliance rule.
Below is an example of the email that users will receive when their emails get quarantined:

To enable the feature: In the Admin console where you setup and configure policies to quarantine messages, there is now a checkbox at the bottom to "Notify sender when mail is quarantined (onward delivery only)". This feature is default off for existing rules, but when you create a new rule, the default is on.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release
Editions:
Available to all G Suite editions
Rollout pace:
Gradual rollout (up to 15 days for feature visibility)
Impact:
Admins only
Action:
Admin action suggested/FYI
More Information
Content Compliance
Attachment Compliance
Objectionable Content
Routing

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Backup and Sync from Google available soon

6/14/2017

On June 28th, 2017, we will launch Backup and Sync from Google, a tool intended to help everyday users back up files and photos from their computers, so they’re safe and accessible from anywhere. Backup and Sync is the latest version of Google Drive for Mac/PC, which is now integrated with the Google Photos desktop uploader. As such, it will respect any current Drive for Mac/PC settings in the Admin console.

Backup and Sync is primarily intended for consumer users. We recommend that our G Suite customers continue to use Drive for Mac/PC until our new enterprise-focused solution, Drive File Stream (currently in EAP), is made generally available to all G Suite Basic, Business, Enterprise, Education, and Nonprofit domains later this year. Drive File Stream will allow users to access huge corporate data sets without taking up the equivalent space on their hard drives.

With that in mind, we will not automatically upgrade G Suite users from Drive for Mac/PC to Backup and Sync at this time. If you currently allow your users to install Drive for Mac/PC on their own computers, they will be able to download and upgrade to Backup and Sync starting on Wednesday, June 28th. If you don’t currently allow Google Drive for Mac/PC in your organization, your users won’t be able to use Backup and Sync with their G Suite accounts.

For more details, check out the resources below starting on June 28th. If you’re interested in trying Drive File Stream, sign up for the Early Adopter Program (EAP) today.

Launch Details
Release track:
Available for download starting on June 28th, 2017

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
(Note that these articles will not go live or be updated until Backup and Sync launches on June 28th. Please check back on June 28th for more information.)
Help Center: Install Google Drive for Mac/PC
Help Center: Back up and sync files with Google Drive
Help Center: Delete and restore files in Google Drive
Help Center: Fix problems syncing to your computer
Help Center: Stop syncing Google Drive files with Backup and Sync

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

More precise, reliable data and other new features in Google Vault

6/12/2017

When you use Google Vault for your legal and compliance needs, it’s important that you have the ability to retain exactly the data you wish and that the data you retrieve from the tool be accurate, precise, and comprehensive. Today, we’re introducing four new features in Vault to help you address those needs.

Get more detailed metadata when exporting files from Google Drive
When you search for a particular user in Vault for Drive, the results may include files that the user accessed through an “indirect” relationship. This means that the file (or folder containing the file) was:

shared with a group that the user belongs to,
shared with the user’s entire domain, or
shared publicly.

Previously, when you exported those search results, you wouldn’t see that user listed in the file's export metadata, making it difficult to determine the document’s chain of custody. Going forward, you will see that user listed, as Vault will now include information in export metadata about users who accessed a document via an indirect relationship. Additionally, you’ll now have the option to see what that user’s specific relationship was (e.g. whether the user was a collaborator or viewer).

Search in a specific time zone
You can now select the time zone that you want the dates in your search to be based on in Vault. The time zone you select changes the exact boundaries of your search results, so we recommend that you learn more about the effect of this setting before using it.

Set retention policies for all Team Drives
You can now create a custom retention policy that covers all Team Drives in your domain, in addition to the already existing options that cover specific Team Drives and organizational units (OUs).

Set retention policies for specific Google Groups
You can now create custom retention policies that cover specific Google Groups in your domain, in addition to the already existing option to cover all Groups in your domain.

For more information on these features and others in Google Vault, check out the Help Center articles below.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to G Suite Business, Enterprise, and Education editions only, as well as to users with add-on Vault licenses

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Search for data
Help Center: How Vault exports work

Launch release calendar

Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

What's New in G Suite - May 2017

6/02/2017

Check out the latest "What's New in G Suite" launch recap [pdf] for a roundup of all G Suite launches from May 2017.

Archive & Translated Versions (coming soon for May issue)

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Google Cloud services are switching Certificate Authority

6/02/2017

Today we announced that Google will soon begin using a different Certificate Authority (CA). We expect this change to have no impact on the vast majority of G Suite customers, as the CA is already trusted by systems and browsers for typical desktop and mobile platforms, including Android, Chrome OS, Windows, macOS and iOS.

This change, which will roll out gradually across Google services over the coming months, may affect customers who operate systems with custom certificate trust stores if they’re not kept up to date.

Check out today’s post on the Google Cloud Platform blog for more details and recommended actions.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release no earlier than June 12, 2017. Monitor the G Suite Release Calendar for any changes to this date.

Editions:
Applicable to all G Suite editions, though no impact is expected on the vast majority of G Suite customers

Rollout pace:
Extended rollout (longer than 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Google Cloud Platform blog post

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Visualize data instantly with machine learning in Google Sheets

6/01/2017

Sorting through rows and rows of data in a spreadsheet can be overwhelming. That’s why today, we’re rolling out new features in Sheets that make it even easier for you to visualize and share your data, and find insights your teams can act on.

Ask and you shall receive → Sheets can build charts for you

Explore in Sheets, powered by machine intelligence, helps teams gain insights from data, instantly. Simply ask questions—in words, not formulas—to quickly analyze your data. For example, you can ask “what is the distribution of products sold?” or “what are average sales on Sundays?” and Explore will help you find the answers.

Now, we’re using the same powerful technology in Explore to make visualizing data even more effortless. If you don’t see the chart you need, just ask. Instead of manually building charts, ask Explore to do it by typing in “histogram of 2017 customer ratings” or “bar chart for ice cream sales.” Less time spent building charts means more time acting on new insights.

Instantly sync your data from Sheets → Docs or Slides

Whether you’re preparing a client presentation or sharing sales forecasts, keeping data up-to-date can be time-consuming, especially if you need to update charts or tables in multiple sources. This is why we made it easier to programmatically update charts in Docs and Slides last year.

Now, we’re making it simple to keep tables updated, too. Just copy and paste data from Sheets to Docs or Slides and tap the “update” button to sync your data.

Even more Sheets updates

We’re constantly looking for ways to improve our customers’ experience in Sheets. Based on your feedback, we’re rolling out more updates today to help teams get work done faster:

Keyboard shortcuts: Change default shortcuts in your browser to the same spreadsheet shortcuts you’re already used to. For example, delete a row quickly by using “Ctrl+-.”
Upgraded printing experience: Preview Sheet data in today’s new print interface. Adjust margins, select scale and alignment options or repeat frozen rows and columns before you print your work.
Powerful new chart editing experience: Create and edit charts in a new, improved sidebar. Choose from custom colors in charts or add additional trendlines to model data. You can also create more chart types, like 3D charts. This is now also available for iPhones and iPads.
More spreadsheet functions: We added new functions to help you find insights, bringing the total function count in Sheets to more than 400. Try “SORTN,” a function unique to Sheets, which can show you the top three orders or best-performing months in a sales record spreadsheet. Sheets also supports statistical functions like “GAMMADIST,” “F.TEST” and “CHISQ.INV.RT.”
Increased support for charts in the Sheets API: Use the API to programmatically generate most charts with support for dozens of new operations.

These new features in Sheets are rolling out starting today. Learn how Sheets can help you find valuable insights.

One last thing—so that we can focus our efforts on the improvements to charts outlined above, we’re also deprecating one of the lesser-used chart types: the Motion chart. Beginning in July 2017, you will no longer be able to insert or create Motion charts, and, in September 2017, you will no longer be able to edit them.

No earlier than December 2017, any Motion charts still in Sheets will become static images and no longer update when their corresponding data changes.

We recommend trying Bubble charts instead.

Launch Details
Release track:

All mobile and API features launching to both Rapid release and Scheduled release on June 1st, 2017
All web features launching to Rapid release on June 1st, 2017, with Scheduled release coming on June 20th, 2017

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
Help Center: Add a chart or graph to a spreadsheet
Help Center: Chart types
Help Center: Add a chart or table to Google Docs or Slides

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

New built-in Gmail protections to combat malware in attachments

5/31/2017

(Cross-posted from the Google Security Blog)

Posted by Sri Somanchi, Product Manager, Gmail anti-spam

Today we announced new security features for Gmail customers, including early phishing detection using machine learning, click-time warnings for malicious links, and unintended external reply warnings. In addition, we have also updated our defenses against malicious attachments.

Let’s take a deeper look at the new defenses against malicious attachments. We now correlate spam signals with attachment and sender heuristics, to predict messages containing new and unseen malware variants. These protections enable Gmail to better protect our users from zero-day threats, ransomware and polymorphic malware.

In addition, we block use of file types that carry a high potential for security risks including executable and javascript files.

Machine learning has helped Gmail achieve more than 99% accuracy in spam detection, and with these new protections, we’re able to reduce your exposure to threats by confidently rejecting hundreds of millions of additional messages every day.

Constantly improving our automatic protections

These new changes are just the latest in our ongoing work to improve our protections as we work to keep ahead of evolving threats. For many years, scammers have tried to use dodgy email attachments to sneak past our spam filters, and we’ve long blocked this potential abuse in a variety of ways, including:

Rejecting the message and notifying the sender if we detect a virus in an email.
Preventing you from sending a message with an infected attachment.
Preventing you from downloading attachments if we detect a virus.

While the bad guys never rest, neither do we.

These protections were made possible due to extensive contribution from Vijay Eranti (Gmail anti-spam), Timothy Schumacher (Gmail anti-spam), Harish Gudelly (Google anti-virus), and Lucio Tudisco (G Suite anti-abuse)

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1-3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI
More Information
The Keyword: Gmail blog
Anti-virus scanning attachments

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

A new Gmail security feature that improves the early detection of phishing attempts for G Suite users

5/31/2017

As part of Gmail's continued efforts to make email more safe and secure for our users, a new advanced security feature is being added to Gmail. Last year we announced the inclusion of security warnings when users attempt to access a dangerous site. With this new feature, we are improving the timeliness of phishing identification.

Delayed delivery of email messages with suspicious content

Phishing attempts follow a predictable pattern when you look at them in aggregate, and Gmail’s security experts have developed a new algorithm that flags and delays potentially suspicious messages.This selective delay facilitates additional checks on the content of the message prior to delivery and benefits from real time updates to the spam filter — as well as up to date phishing protection from Google’s Safe Browsing technology.

Considerations

Because Safe Browsing must test the results of the link, emails can be delayed by up to 4 minutes.
This feature is not a replacement for anti-malware/phishing software, and we do not recommend using it in place of your organization’s existing security software.

Opting out: This feature can be controlled from the Admin console, and is launching as as default On. If you do not wish to delay email to your users for any reason, you can disable the feature from the Admin console. Learn more

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1-3 days for feature visibility)

Impact:
Admins only

Action:
Change management suggested/FYI
More Information
Help Center

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Unintended external reply warnings in Gmail to mitigate unintentional data loss

5/31/2017

Update: In an earlier version of this launch announcement, the new Gmail security feature was described as launching default off. This feature is actually launching default on, with the ability to turn it off in the Admin console. This announcement has been updated to reflect this.

This release adds a new Gmail security feature to warn G Suite users when responding to emails sent from outside of their domain and not in their contacts. This feature can give enterprises protection against forged email messages, impersonation, as well as common user-error when sending mail to the wrong contacts.

How does it work?

When a user hits reply in Gmail, Google scans the recipient list, including addresses in CC to determine its risk level. If a recipient is external to the user’s organization, not present in their Contacts or not someone the user interacts with regularly, we will display the warning.
We treat secondary domains and domain aliases like primary domains, so your users will not be warned when emailing users at your subdomains.
If the recipient is intended, the user can dismiss the warning and proceed with the response. We won’t show the warning again for that recipient.
Unintended external reply warning is controlled from the Admin console control in the Advanced Gmail settings and is launching default on. It can be toggled on or off by organizational unit or for your entire domain.

Launch Details
Release track:
Launching to both Rapid and Scheduled release.

Rollout pace:
Full rollout (1-3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested. The Help Center article below outlines the expected behavior, and can be used to help effectively communicate these changes to users.

More Information
Help Center: Unintended external reply warnings

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Upcoming change: Admins now have more control over Profile fields, and changes to the Contacts On/Off setting

5/31/2017

On June 26, 2017, we’re releasing some changes that will bring user profile management under the direct control of G Suite admins, starting with the Name, Photo, Gender, and Birthday fields. Whereas end users could previously only edit these fields if they had upgraded to Google+, these new controls let admins decide which profile fields can be edited by end users, independent of Google+ status. Additionally, we are renaming the Contacts setting to Directory in order to better describe the functionality and, as such, the Contacts on/off setting within it will be removed.

More about this change

If you want to enable or disable your users’ ability to modify their Name, Photo, Gender, or Birthday, you can now do so from the Admin console. You will continue to be able to set these fields directly yourself where supported in the Admin console, or sync values using Google Cloud Directory Sync.

Profile editability can be toggled for your entire domain or by organizational unit (OU).

Editability settings are respected across Google. Once editability is enabled, your users can modify their profile information from My Account, About Me or other surfaces where profile editing is supported. If editing is disabled, users will be directed to you, the administrator, if they need to make changes.

This is the first in several launches that will grant admins better control over the editability of user profile data. Stay tuned for additional profile, directory, and contact management improvements in the future.

Service setting for Contacts On/Off: As part of this launch, we are removing the Contacts service on/off setting from the Admin console starting on June 26, 2017. Today, this setting only controls access to the Web contacts manager at contacts.google.com. It does not control any other user access to contacts, such as the contacts manager in Gmail, the Contacts Preview, API access to contacts, or the Directory functionality.

Once the Contacts on/off setting is removed from the Admin console, we will retain the the Web contacts manager on/off preference you’ve already specified. Please review whether this setting needs to be changed, and if so, make such change in the admin console before June 26, 2017 if required.
You can review your own Admin console settings from the Admin console.

Contacts on/off controls access to	Contacts on/off does not control access to
Web Contacts Manager at contacts.google.com	Web Contacts embedded in Gmail Web Contacts Preview API access to contacts Directory functionality, including autocomplete

When Contacts Preview eventually replaces the current Web contacts manager, the setting will no longer have any effect, and will be fully deprecated.

Default editability settings: At launch, editability behavior will be consistent with pre-launch behavior. For example, if Google+ was disabled for an Organizational Unit, which restricted editing pre-launch, then your editability settings will be “off”, not allowing users to edit their name, gender, photo, or birthdate. For domains with Google+ enabled, we will respect and migrate over the name editability control that existed in the Google+ settings. This design choice was made to keep the impact to your domain minimal, giving you flexibility for when you’d like to make changes.

Current OU/User status	Profile editing default
G+ enabled, name editing disabled	Name editing disabled. Other fields enabled.
G+ enabled, name editing enabled	Editing enabled
G+ disabled	Editing disabled
Newly created domain after launch	Birthdate editing enabled. Other fields disabled.

Special behavior for Education domains: Education domains will not have an editability control for birthdate. For those domains, birthdate will never be editable by end users, except in the Google+ upgrade flow, if Google+ has been enabled.
Special behavior for domains with existing profile photos: Some domains have users with profile photos, despite not having G+ enabled. Those domains will have photo editability enabled on launch, in order to not interfere with existing photos. Admins may change the setting after launch.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release on June 26 2017
Editions:
Available to all G Suite editions
Rollout pace:
Full rollout (1-3 days for feature visibility)
Impact:
Admins and all end users
Action:
Change management suggested/FYI

More Information
Help Center: Managing directory profile changes

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Calendar email notification logs in Admin Console

5/30/2017

When users collaborate using Google Calendar, they depend heavily on email notifications that are generated while they manage events and calendars. For example, event invitations, event updates, RSVPs and calendars sharing can all generate email notifications that are sent to event guests or calendar subscribers.

Sometimes these notifications are inadvertently triggered by third party calendar clients or go missing (because of incorrectly configured Gmail filters, accidental email deletions, etc.) With this launch, we’re exposing calendar email notification logs in the Calendar audit section of Admin Console, so you can easily investigate issues related to calendar email notifications. Each log entry provides insights on the type of calendar notification, its sender and its recipient as well as information on the calendar client that triggered it. You can also obtain the notification’s Message-ID which can be cross-referenced with the Email Audit logs, in order to confirm whether the notification was successfully delivered to its intended recipients. See our Help Center for more information on the new calendar notification fields.

We hope that by enriching the existing calendar audit logs, we will make it easier for helpdesk admins to troubleshoot issues for their users.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release.

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1-3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information

Calendar audit log

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Improving the publication experience in the new Google Sites

5/23/2017

When you click “Publish” in the new Google Sites, you allow other people to view your site. If your organization allows you to publish sites on the web, you see options to (1) allow anyone at your domain or anyone on the web to visit your site, and (2) allow your site to appear in search results.

You’ve told us that the “Allow my site to appear in search results” setting is confusing, and that it’s not entirely clear how it impacts the availability of your site. With that feedback in mind, we’re making some changes to the setting. Following this launch,

if you’ve chosen to allow anyone on the web to visit your site, you’ll see an option to “Request public search engines not to index my site.” This option will not be selected by default, meaning that public search engines (like Google) will be able to index your site. This option will be labeled as a “Search setting” to distinguish it from the enforced permissions above it—by checking it, you indicate only your preference that search engines not index your site.

if you’ve chosen to restrict viewing of your site to your domain only, you will not see the “Request public search engines not to index my site” option, because no one outside of your domain will be able to visit your site anyway. Depending on your configuration, your site may appear in your organization’s internal search engine and on Google Cloud Search.

Please note that today’s launch will not impact the settings of any already-published sites, unless they’re unpublished and republished.

Launch Details
Release track:
Launching to Rapid release, with Schedule release coming on June 6th, 2017

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
Help Center: Preview and publish your site on the web

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Let’s jam—Jamboard is now available

5/23/2017

Today we announced that Jamboard, our cloud-based, collaborative whiteboard, is available for purchase in the United States.

You can purchase Jamboard for $4,999 USD, which includes 2 styluses, an eraser and a wall mount. We’re also running a promotion—if you order on or before September 30, 2017, you’ll receive $300 off of the annual management and support fee, as well as a discount on the optional rolling stand.

Keep in mind that a G Suite plan is required to use Jamboard so that you can access files from Drive, use them in your brainstorms and come back to your work later. Also, we’re teaming up with BenQ to handle fulfillment, delivery and support. Check out pricing details below.

Jamboard is available in the U.S. to start, and will be available for purchase in the UK and Canada this summer, with more countries becoming available over time. Contact your Google Cloud sales rep or visit google.com/jamboard to learn more about how you can start jamming with colleagues today.

Additional info for G Suite admins
In addition to the Jamboard device, a Jamboard app will be available on Android and iOS for all G Suite customers globally starting this week. When used on a tablet, the app allows users to experience similar features as they would on the Jamboard device. On a smartphone, the app functions as a companion for the Jamboard device.

Usage of the Jamboard app will be controlled by a service on/off switch in the Admin console, and will be off by default.

Check out the Help Center for more information, including an FAQ section.

Launch Details
Release track:
Jamboard service on/off switch and app launching gradually to both Rapid release and Scheduled release, starting this week. Jamboard devices now available for purchase in the US only.

Editions:
Jamboard devices and app available for G Suite Basic, Business, Enterprise, and Education* customers.

*G Suite for Education customers will need to satisfy certain requirements in order to purchase Jamboard devices. See the Help Center FAQ for more information.

Rollout pace for Jamboard service on/off switch and app:
Gradual rollout (up to 15 days for feature visibility)

Impact:
Admins only (Jamboard service is defaulted off in the Admin console)

Action:
Admin action suggested/FYI

More Information
Help Center
FAQ

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Quick Access in Google Drive now available on the web

5/18/2017

In September 2016, we launched Quick Access for Google Drive, which uses machine learning to intelligently predict the files you need, before you’ve even searched for them. Originally available on the Drive Android app, and later iOS, we’re now launching Quick Access on the web.

Quick Access intelligently predicts and surfaces files based on, among other things:

who specific files are frequently shared with
when relevant meetings occur
what files are used at specific times of the day

Check out Quick Access on the Drive home page today.

Launch Details
Release track:
Launching to Rapid release, with Scheduled release coming on June 20th, 2017

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
Help Center: Find files in Google Drive

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Save time with Smart Reply in Gmail

5/17/2017

(Cross-posted from The Keyword Gmail blog)
Posted by Greg Bullock, Software Engineer, Gmail

It’s pretty easy to read your emails while you’re on the go, but responding to those emails takes effort. Smart Reply, available in Inbox by Gmail and Allo, saves you time by suggesting quick responses to your messages. The feature already drives 12 percent of replies in Inbox on mobile. And starting today, Smart Reply is coming to Gmail for Android and iOS too.

Smart Reply suggests three responses based on the email you received:

Once you’ve selected one, you can send it immediately or edit your response starting with the Smart Reply text. Either way, you’re saving time.

Smart Reply utilizes machine learning to give you better responses the more you use it. So if you're more of a “thanks!” than a “thanks.” person, we'll suggest the response that's, well, more you! If you want to learn about the smarts behind Smart Reply, check out the Google Research Blog.

Smart Reply will roll out globally on Android and iOS in English first, and Spanish will follow in the coming weeks. Stay tuned for more languages coming soon!

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
The Keyword: Gmail

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Updating developer identity guidelines and registration processes to protect users

5/15/2017

(Cross-posted from G Suite Developers)

Posted by Naveen Agarwal, Identity Team

Recently, we took immediate action to protect users from a phishing attack that attempted to abuse the OAuth authorization infrastructure.

We’re now supplementing those efforts to help prevent these types of issues in the future. These changes may add some friction and require more time before you are able to publish your web application, so we recommend that you plan your work accordingly.

Updating app identity guidelines
As our Google API user data policy states, apps must not mislead users. For example, app names should be unique to your application and should not copy others'.

To further enforce this policy, we are updating our app publishing process, our risk assessment systems, and our user-facing consent page in order to better detect spoofed or misleading application identities. You may see an error message as you’re registering new applications or modifying existing application attributes in the Google API Console, Firebase Console, or Apps Script editor as a result of this change.

New review processes and restrictions on web apps requesting user data
We have also enhanced our risk assessment for new web applications that request user data.

Based on this risk assessment, some web applications will require a manual review. Until the review is complete, users will not be able to approve the data permissions, and we will display an error message instead of the permissions consent page. You can request a review during the testing phase in order to open the app to the public. We will try to process those reviews in 3-7 business days. In the future, we will enable review requests during the registration phase as well.

You can continue to use your app for testing purposes before it is approved by logging in with an account registered as an owner/editor of that project in the Google API Console. This will enable you to add additional testers, as well as initiate the review process.

We also recommend developers review our earlier post outlining their responsibilities when requesting access to user data from their applications. Our teams will continue our constant efforts to support a powerful, useful developer ecosystem that keeps users and their data safe.

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Upcoming changes to chat in Google Docs, Sheets, and Slides

5/15/2017

Chatting in Google Docs, Sheets, and Slides makes collaboration easier, as users can discuss a document while they work on it—without leaving the document itself. As many of you know, the current Docs Editors chat functionality is built on Google Talk, which we previously announced will be shutting down at the end of June.

We want to be sure you can continue to use chat in Docs, Sheets, and Slides, so—over the course of the next few weeks—we’ll make a few small changes and decouple the feature from Talk. As of June 7th, 2017, shortly before the Talk shutdown, organizations on the Rapid release track that have the Google Hangouts service enabled will have chat available in the Docs Editors; organizations on the Scheduled release track with Hangouts enabled will have chat in the Docs Editors starting on June 21st.*

If you currently have the Hangouts service enabled but Talk disabled, chat in Docs, Sheets, and Slides is not available to your users at this time. After June 7th or 21st (depending on your release track), however, your organization will begin to be able to use chat in the Docs Editors.* We encourage you to communicate the new feature to your users ahead of time. There will be no in-app promotion; users will simply see the chat button below appear in Docs, Sheets, and Slides when collaborators are in the document.

If a user clicks on that button, a chat window like the one below will appear on the right side of the screen, allowing him or her to chat with others in the document.

We’ll be making further improvements to chat in Docs, Sheets, and Slides in the future, so stay tuned for additional updates.

*IMPORTANT: Please see the Help Center for a list of exceptions.

Launch Details
Release track:
Launching to Rapid release on June 7th, with Scheduled release coming on June 21st

Editions:
Available to all G Suite editions

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
Admins and end users

Action:
Change management suggested/FYI

More Information
Help Center: Chat with others in a file

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Adding nine third-party applications to the G Suite pre-integrated SSO apps catalog

5/12/2017

Single-Sign-On (SSO) is one of those rare features that enhances security while also increasing convenience for end users. Google supports the two most popular Enterprise SSO standards, OpenID Connect and SAML. There are over 800 applications with pre-integrated SSO support in our third party apps catalog already, and we are constantly adding more. With today’s launch, we are adding SAML integration for these nine applications: Asana, Dialpad, Evernote Business, Expensify, Keeper, Lucidchart, Pagerduty, RingCentral, and Trello.

You can find our full list of pre-integrated applications, as well as instructions for installing them, in the Help Center.

Note that apart from the pre-integrated SAML applications, G Suite also supports installing “Custom SAML Applications” which means that admins can install any third-party application that supports SAML. The advantage of a pre-integrated app is the installation is much easier. You can learn more about installing Custom SAML Applications in this Help Center article.

Differences between G Suite Marketplace and the SAML Apps Catalog

You may notice that some of the applications we are launching today to the SAML catalog - namely Asana, Dialpad, Expensify, Lucidchart, RingCentral, and Trello - are already available in the G Suite Marketplace. When installed via the Marketplace, these applications provide rich integration with G Suite products. In addition to these deep integrations, the applications typically provide a separate ‘Google SSO’ option, which is authentication via OpenID Connect protocol, for users to access their accounts on the application’s website.

The SAML catalog version, on the other hand, only provides SAML-based authentication so that your users can access their accounts in the third party app’s website using Google as a SAML IdP (Identity Provider). Some enterprises prefer the SAML approach, and in fact, we see many admins installing these as Custom SAML Apps even today. This launch is all about giving our customers more choice to integrate their applications using a method that suits them.

If you do not have a corporate requirement to use SAML, Google recommends using the G Suite Marketplace application.

Launch Details

Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information
Help Center: Using SAML to set up federated SSO

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Upcoming change: Encouraging more users to use work profiles on personal Android devices

5/10/2017

As the use of mobile in the enterprise proliferates, and more and more enterprises are embracing mobile first strategies and policies, it is important that our G Suite customers who use Google Mobile Management as their enterprise mobility management tool (EMM) determine the policies that best protect their mobile users. This includes ensuring that corporate data stored on mobile devices is kept separate from end user data via the use of Android work profiles.

Making work profiles the default enrollment option for Android devices

To ensure a BYOD policy that is end-user friendly without sacrificing corporate security, we would like to encourage Google Mobile Management customers to employ a mobile policy that keeps personal and corporate data safe.

To that end, starting with Google Apps Device Policy v7.55 and above, the default enrollment process will utilize a work profile for those customers that have enabled Android at work and are whitelisting apps in managed Play, and for those devices that do support work profiles.

Enrolling a corporate account allows your end users to access the managed Play store for curated and whitelisted apps, and provides a clear separation between corporate data and personal data to ensure that IT does not accidentally remove personal data from the device.

Your users will still be able to opt-out of using a work profile and continue with the previous method of enrollment, if your corporate policy allows this.

For more details on whether this change will apply to your organization, or if you would like details on how to prevent work profiles from being used in your mobile deployments, please see the FAQs below and refer to the Help Center.

This change will start rolling out on June 5, 2017 along with the release of Google Apps Device Policy app v7.55+.

-- FREQUENTLY ASKED QUESTIONS --

Will this enrollment change be the default for all Google Mobile Management customers?

No. This change will only apply to your organization under the following conditions:

Your organization is using Google Mobile Management for Android (more details)
Android advanced management has been enabled for the entire organization, or organizational unit (more details)
Your organization has whitelisted Android apps in the managed Play store (more details)

This change will also only be shown to your users under the following conditions:

The Android device to which your user is adding their account supports work profiles
The Google Apps Device Policy app that is being used for enrollment is version 7.55+

How do we know if the Android device supports work profiles?

Android work profiles are supported on Lollipop (5.1), Marshmallow (6.0), and Nougat (7.0) devices, and any yummy future versions of Android. If you are looking to purchase new devices, please see the recommended list of Android Enterprise devices, or contact the OEM manufacturer of the device you are interested in.

Our organization currently does not use work profiles, what are the advantages of using a work profile?

We recommend work profiles for several reasons:

End users can use one Android device and keep corporate data and personal data separate
Administrators can curate and whitelist applications that are needed for corporate use
IT administrators cannot erase personal emails, photos, or other personal data; they can only wipe the content within the work profile itself

For more details on work profiles and Android within the enterprise, please refer to the Android at work home page.

We provide our employees with Company Owned Android devices. Does this change impact us?

No. If you are already using Company Owned devices within Google Mobile Management, then this change will not be relevant to those devices. This change only applies to personal Android devices.

We are upgrading our mobile deployment at the moment. Can we opt out of this change?

Yes you can disable this feature immediately (without waiting for the new version of the Google Apps Device Policy app to be available).

To do this, follow these steps:

Log in to Admin Console
Click on Device Management
Go to Android Settings > Work Profile and set the Work Profile Setup field to be “Disable”

Note that this will prevent any user from enrolling in a work profile, and we encourage you to view the benefits of using work profiles in your organization as a way to keep corporate and personal data separate.

Can my users access their corporate apps without a work profile?

Yes. However, if your user has a device that supports a work profile, but does not use a work profile, they will not be able to access the managed Play store from their Android device. Thus these users will not be able to see the recommended apps that have been whitelisted for their organization.

For more details on how users with legacy Android devices can access work apps, please see the following announcement: Users with legacy Android devices can now access work apps in Google Play

Launch Details

Release track:
Launching to both Rapid release and Scheduled release on June 5

Editions:
Available to all G Suite editions

Rollout pace:
Extended rollout (potentially longer than 15 days for feature visibility)

Impact:
End users who are setting up eligible Android devices and whose organization policies allow it.

Action:
Change management suggested/FYI

More Information
Help Center: What is a work profile?

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Invite all the right people to your Communities all at once

5/10/2017

(Cross-posted from the Google+ Product and Feature Updates Collection)

Communities are a great way for groups of people to share around a topic. But when you’re creating a Community for a group you’re a part of, like a book club, parent-teacher association, or work team, the last thing you want to have to do is invite each member one-by-one.

Since so many groups already have a way to get ahold of one another, whether that’s through email, chat, a newsletter or something else, we’ve created a new Community invite link so you can invite all the right people at once.

With the Community invite link, Community owners and moderators can share an invite link with their group however they choose. People with the link will be able to directly join both private and ask-to-join public Communities, and anyone who doesn’t have a Google account or Google+ profile will be able to create one along the way. Communities that are restricted to a given G Suite organization will continue to only be accessible to members of that organization.

If something changes, you can easily disable a shared link or generate a new one at any time. To share an invite link to your Community, just open the invite menu on Google+ web, turn on the “Allow invites by link” option, and grab the link that appears.

Launch Details

Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
All end users

Action:
Admin action suggested/FYI

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Web clipboard to be removed from Google Docs, Sheets, Slides, and Drawings on September 13th, 2017

5/04/2017

The web clipboard in Google Docs, Sheets, Slides, and Drawings was originally developed to improve the copy and paste experience in browsers with fidelity issues. As these issues have become less prevalent across many browsers, we’re looking to simplify the user experience by removing the web clipboard, which is rarely used, on September 13th, 2017. We’re also planning enhancements to the traditional copy and paste functionality in Docs, Sheets, Slides, and Drawings, so stay tuned for more info.

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Updates

In addition to other apps, G Suite administrators can now automatically provision users to Asana, Dialpad, Freshdesk, Lucidchart, RingCentral, and Smartsheet

Prevent users from creating Team Drives in Google Drive indefinitely

Gmail admins can now notify internal senders when their email gets quarantined

Backup and Sync from Google available soon

More precise, reliable data and other new features in Google Vault

What's New in G Suite - May 2017

Google Cloud services are switching Certificate Authority

Visualize data instantly with machine learning in Google Sheets

New built-in Gmail protections to combat malware in attachments

A new Gmail security feature that improves the early detection of phishing attempts for G Suite users

Unintended external reply warnings in Gmail to mitigate unintentional data loss

Upcoming change: Admins now have more control over Profile fields, and changes to the Contacts On/Off setting

Calendar email notification logs in Admin Console

Improving the publication experience in the new Google Sites

Let’s jam—Jamboard is now available

Quick Access in Google Drive now available on the web

Save time with Smart Reply in Gmail

Updating developer identity guidelines and registration processes to protect users

Upcoming changes to chat in Google Docs, Sheets, and Slides

Adding nine third-party applications to the G Suite pre-integrated SSO apps catalog

Upcoming change: Encouraging more users to use work profiles on personal Android devices

Invite all the right people to your Communities all at once

Web clipboard to be removed from Google Docs, Sheets, Slides, and Drawings on September 13th, 2017

Labels

Archive

Feed

Subscribe by email

Localized G Suite Updates

Useful Links

Join the official community for G Suite administrators

Company-wide

Products

Developers