G Suite Updates: 2 new posts

---

Simplify management of company-owned iOS devices with new Apple Business Manager integration Posted: 21 Jul 2020 10:50 AM PDT What's changing  We're launching an integration between Google endpoint management and Apple Business Manager (formerly the Device Enrollment Program, or DEP). This makes it possible to securely distribute and manage company-owned iOS devices from the Google Admin console.  The integration will enable G Suite Enterprise, G Suite Enterprise for Education, G Suite Enterprise Essentials, and Cloud Identity Premium customers to set Google endpoint management as an MDM server on Apple Business Manager.  Who's impacted  Admins  Why you'd use it  With the integration between Google endpoint management and Apple Business Manager:  Admins can manage company-owned iOS devices directly from the Admin console, in the same location as they manage other devices that access their organization's data.  Admins can control a wider range of features including app installation, Apple app usage, authentication methods, and more, as shown in this table of supervised company-owned iOS device settings.  Apple Business Manager and Google endpoint management automatically sync for seamless device management.  Users follow a simple device setup and enrollment through the built-in setup wizard.  Apple Business Manager setup in the Admin console Getting started  Admins: To use this feature, you need to enable advanced mobile management for iOS devices in applicable OUs, and have an Apple Business Manager account set up. Visit our Help Center to learn more about how to set up company-owned iOS device management.  End users: There is no end user setting for this feature. Once provisioned by an admin, users can follow the device setup wizard steps to enroll the device. Once the setup wizard is complete, the Google Device Policy app will automatically install and the user should sign in to it with their G Suite or Cloud Identity account.  Rollout pace  Rapid and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 21, 2020  Availability  Available to G Suite Enterprise, G Suite Enterprise for Education, G Suite Enterprise Essentials, and Cloud Identity Premium customers  Not available to G Suite Basic, G Suite Business, G Suite for Education, G Suite for Nonprofits, and G Suite Essentials customers  Resources  G Suite Admin Help: Set up company-owned iOS device management  Cloud Blog: Safety first: Announcing 11 new G Suite security features

Block apps from accessing G Suite data with app access control Posted: 21 Jul 2020 10:21 AM PDT What's changing  Last year, we launched app access control to help all G Suite and Cloud Identity customers control access to G Suite data via OAuth 2.0 by third-party and domain-owned apps. Now, we're improving it by allowing admins to block apps from accessing any OAuth 2.0 scopes. This makes it easy for customers to quickly restrict apps that are deemed to be high-risk or compromised.  If an app is blocked, it will not be able to access any data from Google services. It will be blocked whether the app is on iOS, Android, or the web. If users try to authorize the app, they'll see an authorization error message. Admins can customize this error message if they choose.  Who's impacted  Admins  Why you'd use it  G Suite has a robust developer ecosystem, with thousands of apps available via the G Suite Marketplace and directly to customers, and a rich API framework enabling customers to develop custom apps. Not all apps, however, conform to every enterprise customer's security policy, so our customers and partners value controls to manage third-party apps accessing G Suite data.  Previously, admins could trust or limit access by specific apps. Now, we're streamlining this to make it easier to manage potentially thousands of apps, and to help you to more quickly block apps when needed. By adding an option to block an app, you can quickly and efficiently protect data when an app is compromised or high-risk. You can now block app access to OAuth 2.0 scopes via the Admin console.  Apps can now be trusted, limited, or blocked.  Getting started  Admins: Go to Admin console > API controls > App access control to start using the feature. Visit the Help Center to learn more about how to control which third-party & internal apps access G Suite data.  End users: There is no end user setting for this feature.  Rollout pace  Rapid and Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on July 21, 2020  Availability  Available to G Suite Basic, G Suite Business, G Suite Enterprise, G Suite for Education, G Suite Enterprise for Education, and G Suite for Nonprofits customers Not available to G Suite Essentials and G Suite Enterprise Essentials customers Resources  G Suite Admin Help: Control which third-party & internal apps access G Suite data  G Suite Updates Blog: Manage apps accessing G Suite data with new app access control

You are subscribed to email updates from G Suite Updates Blog. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States