Manage apps that access G Suite data with control over new apps access.

What changes?

Google improves control of access to your G Suite data with third-party apps and domains. The new app access control feature updates the interface and controls in the G Suite Admin Console (Google Workspace customers) to help you find, research, and control apps using OAuth2 to access G Suite data. 

Specifically, apps access control will replace the current Permissions API feature to help you:

• Search: Identify apps in use and see which apps have verified OAuth2 restricted access.
• Evaluate: Understand which apps are being used and get support information from them.
• Control: Manage which apps you trust and what data third-party apps can access.

Who will be affected?

Only administrator

Why is it important?

G Suite has a strong developer ecosystem, with thousands of apps available through G Suite Marketplace and directly to the customer, the rich API framework allows customers to develop their custom applications. However, not all apps will comply with every enterprise customer privacy policy, so Google's customers and partners value control to manage access to third-party apps. G Suite data. 

With apps access control, you can better see which third-party apps your users have approved to access their G Suite data, and you can reduce any any risk to your company data by limiting access to trusted applications

How to get started

• Admins: Find app access control features at Admin console > Security > App Access Control. This replaces the previous “API Permissions” feature.All administrator permissions with Security privileges accessible (Use our Help Center to learn how to Manage OAuth based access to connected apps )  
• End users: No action. 

Additional Information

Search: Identify apps in use and see which have verified OAuth2 access is restricted.

The new interface will help you see which Google apps and services are being used. Additionally, We have previously announced that Google now blocks new installations for unverified third-party apps from accessing Gmail data, unless you trust them in the G Suite admin console. You can now use Google's app details page to verify your app's trust status.

Evaluation: Research risk information for the app and its developer or publisher.

You can see more details about each app and its publisher or developer. This will include the developer's support email, privacy policy, and terms of service (if applicable). In addition, if the application is Verification, Google will show you this information here. This information can help you decide whether to trust/allow or block/limit that app.

Control: Manage which apps you trust and what third-party apps can access your data.

Can you regulate whether you trust or restrict apps from accessing G Suite data through OAuth2?

With these controls, you now have an easier way to restrict access to APIs (OAuth2) for Google services like Gmail, Drive, and the G Suite admin console (Admin). Console).

Please note that this does not include domain-wide authorization and service accounts. This will also be managed at the site API Client Access Management on Security.

The Advanced Protection Program can add additional protections for high-risk users.

The Advanced Protection Program for business, which Google has announced in its current state, helps you enforce an enhanced set of security policies for employees in your organization who are at high risk. targeted attack. When users self-register, the program enforces an application access control policy – it automatically blocks apps that require restricted Gmail and Drive access, unless trusted by the administrator – as well as other policies. These include the use of security keys, advanced email scanning for threats, and downloading protections in Google Chrome. Learn about the Advanced Protection Program for businesses here

Source: Gimasys