# data[].attributes.body
Latest announcements on new features for G Workspace for Education

# data[].attributes.attachment_link.readable_text
.

Please sign in to get started.

Continue with Google Continue with email

Sorry, you do not have permission to access this resource.

Sorry, you do not have permission to access this resource.

We are having temporary difficulties, and are working to fix the issue.

Cookies are required in order to sign in. Please enable cookies in your browser's settings and disable any adblockers. Then refresh this page.

There was an error during authentication. Please refresh to try again.

Refresh the page when your connection is restored to return to the app.

This app requires JavaScript to function.
Please enable javascript and reload the page.

# data[].attributes.attachment_link.description
Register for 'Learning with Google', taking place on February 17th & 18th, to get the latest news and launch announcements from Google for Education.

# data[].attributes.body
Training on G Enterprise for Education

# data[].attributes.attachment_link.description
Learn basic and advanced skills across Google tools with free of charge online training courses designed for educators of all levels.

# data[].attributes.body
Including bugs and feature requests as well as voting on existing proposals

# data[].attributes.attachment_link.readable_text
Google Cloud tracks known issues and feature requests on a set of issue trackers. Because we use the number of "stars" (people who have indicated interest in an issue) to prioritize work on the platform, you should search existing issues before you make a new entry.

To view issue trackers, see Search for or create issues and feature requests, by product.

To report an issue with the Google Cloud Console , click help, then click Send feedback.

Issue reports

Google reviews every new issue report submitted by users. Sometimes one of our staff will ask for clarification or followup. Once we're able to replicate the issue, we'll tell you that it's been forwarded to the appropriate team.

Depending on the circumstances, we may be able to provide periodic updates while an issue is being looked at, but usually we cannot provide too many specifics about the exact cause of an issue, or when it will be fixed.

When we've fixed an issue in production, we'll indicate this and then we'll close the issue.

Feature requests

You can also request and vote for new Google Cloud features. Unlike issue reports, we don't immediately triage new feature requests. Instead, we wait for a feature to have a handful of stars and, hopefully, comments from several users about how the feature would be useful. So, when it comes to feature requests, it's especially important to vote for an existing request (if one exists) instead of making a duplicate.

Search for or create issues and feature requests, by product

You can use the following issue trackers to search for a Google Cloud product's existing issues or feature requests.

If you find an issue or feature request that matches yours, star it.

If you don't see a matching issue or feature request, you can create one:

1. In the following tables of issue trackers, locate the product.

2. Click on the link to create a new issue.

3. In the form's Template drop-down menu, select either Defect report to report an issue orFeature request to request a feature.

4. In the Description text box, complete the rest of the form using the prompts provided.

5. Click Create.

Your issue or feature request now appears in the issue trackers list for the product. To learn about Google's implementation of requested features and issues, see What to expect once you've opened an issue.

What to expect once you've opened an issue

Google maintains an internal issue tracking system where the implementation of features and fixing of issues takes place. You might see references to this system on some issues. Because we have a private system, issues may be relatively quiet for a while. This does not mean we will never fix an issue; it just means that there is nothing to announce.

However, you can expect a few things:

When you open a new issue report, we'll promptly acknowledge it and get to work triaging it. Expect to hear from us within two business days.

When a new feature request meets the threshold number of stars for a project (fewer stars for quiet projects, and more for projects with more traffic) we'll get to work.

After we've triaged an issue, we'll tell you what we found. If we can verify the issue, we'll tell you so. If we believe that we won't be implementing a feature for the foreseeable future, we'll say so.

After an issue is in our system, we will only post updates when we have questions or there is something to share.

If you see an issue that needs our prompt attention, please let us know on one of the Google Groups; we do not individually subscribe to each open issue.

# data[].attributes.attachment_link.title
Report issues and request features with issue trackers

# data[].attributes.attachment_link.description
"type": "thumb-down", "id": "hardToUnderstand", "label":"Hard to understand" },{ "type": "thumb-down", "id": "incorrectInformationOrSampleCode", "label":"Incorrect information or sample code" },{ "type": "thumb-down", "id": "missingTheInformationSamplesINeed", "label":"Missing the information/samples I need" },{ "type": "thumb-down", "id": "otherDown", "label":"Other" }] [{ "type": "thumb-up", "id": "easyToUnderstand", "label":"Easy to understand" },{ "type": "thumb-up", "id": "solvedMyProblem", "label":"Solved my problem" },{ "type": "thumb-up", "id": "otherUp", "label":"Other" }] Google Cloud tracks known issues and feature requests on a set of issue trackers.

# data[].attributes.body
Google Support

# data[].attributes.attachment_link.readable_text
Eligibility

Attendance tracking is currently available to Workspace Essentials, Business Plus, Enterprise Essentials, Enterprise Standard and Enterprise Plus users. This is also available to teachers and students with a G Suite Enterprise for Education licence.

Live stream reports are only available for Workspace users with access to the live stream feature. Live streaming is currently available to G Suite Enterprise for Education, Enterprise Standard and Enterprise Plus editions.

Enable attendance tracking and live stream reports

Attendance tracking and live stream reports will be enabled by default for your organisation and can be turned on or off by administrators. Learn more.

G Suite for Education users automatically receive an attendance report for any meeting with five or more participants and a live stream report for all live stream events.

All other eligible Workspace users can turn attendance tracking and live stream reports on and off from within a meeting or from the Google Calendar event.
If you turn these features off in recurring meetings or meetings that use the same meeting code, the setting will be saved for the next scheduled meeting If you turn these features off in a one-time, nicknamed or instant meeting, the feature will return to on after the meeting ends.

Tip: Anyone who schedules or starts a meeting defaults as the moderator. There can only be one moderator per meeting. Another person might become the moderator if you transfer or schedule a meeting on someone else's calendar.

Get your attendance report

After the meeting, the organiser will receive an email with an attached Google Sheets attendance report with the following info:

Participant's name

If someone calls in from their mobile device, instead of their name, some of their phone number digits will be listed.

If someone calls in from a Google Meet meeting room, instead of their name, the meeting room's name will be listed.

Participant's email

Length of time that the participant was on a call, including timestamps of when they first joined and when they left the call.

If someone gets ejected from a call, that timestamp will be recorded as the time that they left the call.

If someone joins and leaves the call more than once, multiple timestamps won't be listed, but their overall call duration will be included.

Tip: Meeting organisers will receive attendance reports for all meetings, including those started from Classroom or meet.google.com.

Get your live stream report

After a live stream, the meeting organiser will receive an email with an attached Google Sheets report with the following info:

Presenters and live stream hosts who dialled in to the meeting

Participants who watched the live stream

A graph of the live stream's viewership over time.

Total number of unique viewers that joined a live stream.

Unique viewers per minute.

Tip: You will receive a Google Sheets report for each live stream event. The report will show a different tab with metrics for every time you start and stop the same live stream.

# data[].attributes.attachment_link.description
Attendance tracking is currently available to Workspace Essentials, Business Plus, Enterprise Essentials, Enterprise Standard and Enterprise Plus users. This is also available to teachers and students with a G Suite Enterprise for Education licence. Live stream reports are only available for Workspace users with access to the live stream feature.

# data[].attributes.attachment_link.readable_text
In some cases, Google automatically assigns a license for a service to every user in your entire organization. In other cases, you can manually assign licenses to your entire organization, an organizational unit, a group of users, or an individual user. You can also turn on the option to automatically assign licenses to users.

You assign and manage licenses in 3 places in the Google Admin console:

The Billing page-Use to assign licenses to all users in your organization or an uploaded list of users or to set up automatic licensing.

The Users page-Useful for assigning licenses to multiple users, but not all users in your organization. You can manage licenses for multiple users using a CSV file.

An individual user's page-Good for managing a single user.

Assign and remove licenses

These steps are for assigning and removing user licenses. If you want to reduce your license count, see Reduce licenses instead.

Automatically assign a license to every user in your organization

You can assign a license to every user in your organization automatically from the License settings page.

If you have multiple Google services or multiple subscriptions of the same service, you can only turn on automatic licensing for one service or subscription.

If you choose to automatically assign licenses for a service to all users, you can't remove an individual user's license.

If you have organizational units under your top-level organization, you can set automatic licensing options for specific organizational units.

It can take up to 24 hours for an automatically assigned license to take effect.

Note: If you use Google Cloud Directory Sync, you must pick one way to automatically assign licenses-either the option in the Google Admin console described here or with Google Cloud Directory Sync.

1. From the Admin console Home page, go to Menu
Licensing
License settings.

2. Click to the service you want to assign licenses for.

3. Click Off select On.

4. If you have multiple subscriptions of the same service, choose which subscription to use for automatic license assignment.

5. Click Save.

Manually assign and remove licenses on the Users page

Manually assign and remove licenses on an individual user's page

Tip (If available): Try the quick link. At the top of your Admin console Home page, click Assign a license, search for the user, and then go to step 5 below.

1. From the Admin console Home page, go to Users.

2. Click the name of the user you want to manage.

3. Scroll down and click the user's License section.

4. Click any service to display the on/off switches in the Status column.

5. Next to a service, in the Status column, click the switch to assign or remove a license.

6. Click Save.

Reassign licenses

You can't directly reassign a license for a Google service from one user to another. Instead, follow any of the procedures above to unassign the license from the original user and then assign it to the new user.

After you unassign a license, it might take up to 24 hours before you can reassign the license to a different user.

Related topics

# data[].attributes.attachment_link.description
In some cases, Google automatically assigns a license for a service to every user in your entire organization. In other cases, you can manually assign licenses to your entire organization, an organizational unit, a group of users, or an individual user. You can also turn on the option to automatically assign licenses to users.

# data[].attributes.body
How to solve known issue which arose after 1-12-20 update on Chromebooks, whereby video doesn't restart after pausing but continues with audio only.
https://support.google.com/edu/classroom/thread/86856989?hl=en

# data[].attributes.attachment_link.readable_text
Google takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Go to the Legal Help page to request content changes for legal reasons.

# data[].attributes.attachment_link.title
Videos Freezing when played in Google Classroom: Audio track plays but visuals are frozen - Classroom Community

# data[].attributes.attachment_link.description
Google takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

# data[].attributes.headline
GC login for Xbox & Playstation with USB keyboard

# data[].attributes.subject
GC login for Xbox & Playstation with USB keyboard

# data[].attributes.body
from Pocket

# data[].attributes.attachment_link.readable_text
(Pocket-lint) - With children facing another long period of homeschooling during the third UK-wide lockdown, parents without laptops or tablets might be wondering how else they can log onto educational services at home. Well, did you know that you can use a Xbox or PlayStation games console instead?

All you need is an Xbox One, Xbox Series S, Xbox Series X, PlayStation 4, PS4 Pro or PS5 plus a USB keyboard and your child should be able to access online schooling services, such as Google Classroom.

Here is our guide on how to access Google Classroom on either an Xbox or PlayStation console.

The Xbox consoles each have access to Microsoft Edge - the web browser that comes preinstalled as part of the Xbox user experience. This can be used to access Google Classroom (or another online education service approved by your child's school).

1. Plug a wired keyboard into your Xbox One, Xbox Series X or Xbox Series S via one of the USB ports on the front or back.

2. Press the Xbox button top-centre of a game controller and head to "My games & apps" in the side menu.

3. Click on "See all", scroll down to "Apps" and you will see Microsoft Edge in the icons on the right-hand side. Open it.

4. Type classroom.google.com into the URL bar at the top and log in as you would on a PC using your school Gmail account.

5. You can either use an Xbox controller to move the cursor or a separate USB mouse plugged into one of the other ports.

The PlayStation 4 has its own web browser that is easy to find on the PlayStation 4 (in the content menu as an icon with WWW written on it). However, it's currently a bit trickier on PS5, as there is no way to open the browser natively.

Instead, you can open the System Settings, then the User Guide. This will open up an online user manual inside a web browser page so you only have to change the URL at the top. Otherwise, the rest of the steps are the same.

1. Plug a wired keyboard and/or mouse into the USB ports on the PS4 or PS5 - each console should recognise them.

2. In the URL bar of the browser, type classroom.google.com and then log in using the details provided by your child's school.

3. You can now access Google Classroom.

In some cases you might not be able to do everything you can on a laptop or PC, but you can, at the very least, access Google Classroom and see what work your teacher has assigned for you to do.

You don't need a fancy gaming keyboard or anything expensive to plug into a console, you just need something that works. While many might have an old USB keyboard lying around, we also tested the Xbox with the cheapest USB keyboard we could find on Amazon - the Rii RK907 - to check that it works - and it does.

squirrel_widget_3800033

Of course, if you want something more advanced, there's no shortage of options to choose.

Writing by Rik Henderson. Editing by Chris Hall.

# data[].attributes.attachment_link.title
How to access Google Classroom on Xbox and PlayStation

# data[].attributes.attachment_link.description
(Pocket-lint) - With children facing another long period of homeschooling during the third UK-wide lockdown, parents without laptops or tablets might be wondering how else they can log onto educational services at home. Well, did you know that you can use a Xbox or PlayStation games console instead?

# data[].attributes.body
General G Education help centre

# data[].attributes.attachment_link.description
Official Google Workspace User Help Center where you can find tips and tutorials on using Google Workspace User and other answers to frequently asked questions.

# data[].attributes.body
YouTube tutorial on Google Meet Attendance extension

# data[].attributes.attachment_link.title
Google Meet Attendance (My Favorite So Far) v2

# data[].attributes.attachment_link.readable_text
This article is for administrators. To manage your own groups, visit the Google Groups help. This feature requires turning on Google Groups for Business.

You can use Collaborative Inboxes in Google Groups. Members of the Collaborative Inbox who have the correct permissions can assign conversations to each other for tracking.

For example, you could create a group for your technical support or customer service team with the address support@ your-domain.com. Then, add your support staff as group members and allow people outside of your organization to send messages to the group.

When your support staff gets a message, they can:

Assign responsibility for conversations to group members

Set a resolved status for conversations: complete, duplicate, or no action needed

Search for conversations according to resolution status or assignee

Before you begin

Create a Collaborative Inbox group, or enable Collaborative Inbox features for an existing group. Learn how to create a Collaborative Inbox.

Assign a conversation

You can assign responsibility for a conversation to yourself or another group member.

1. Sign in to Google Groups.

2. Click the name of a group.

3. Choose an option:

To assign a single conversation-Click the conversation.

To assign multiple conversations-Point to each conversation check the box next to the poster's name.

4. At the top, choose an option:

To assign the conversation to yourself, click Take .

To assign the conversation to another group member, click Assign . Enter the email address of the person to assign the conversation to click Assign.

5. If a conversation is assigned to you and you want to remove the assignment:

At the top, click Drop .

(Optional) Assign the conversation to another group member.

6. To view conversations within a given group that have been assigned to you:

1. At the top, in the search bar, click the Down arrow .

2. Click Assigned to select Assigned to me.

3. Click Search.

Resolve a conversation

1. Sign in to Google Groups.

2. Click the name of a group.

3. Choose an option:

To resolve a single conversation-Click the conversation.

To resolve multiple conversations-Point to each conversation check the box next to the poster's name.

4. At the top, choose an option:

If the conversation is completed, click Mark as complete .

If the conversation requires no further action, click No action needed .

If the conversation is a duplicate of a different one, click Mark as duplicate . Enter the URL of the duplicate conversation click Mark duplicate.

Manage labels

You can organize conversations with labels.

Unlike labels you create in Gmail, a label you assign to a conversation in Groups is seen by anyone who can view that conversation.

To use labels in Groups, the shared labels feature must be enabled.

1. Sign in to Google Groups.

2. Click the name of a group.

3. To turn on labels:

1. On the left, click Group settings.

2. Under Shared labels, check the Enable shared labels for this group box.

4. To create a label:

1. In the left panel, point to Labels click More Add label.

2. Enter a label name click Add.
A label name cannot contain spaces or any of the following characters:! ~ ` @ # $ % ^ & * ( ) + = { } [ ] | : ; ' " < > . ? / .

5. To apply a label to one or more conversations:

1. For a single conversation-Click the conversation.
For multiple conversations-Point to each conversation check the box next to the poster's name.

2. In the upper right, click Label .

3. Begin typing the label name check the box next to the name when the label appears.
Alternatively, you can create a new label to apply to the selected messages.

6. To delete a label:

1. In the left panel, to the right of Labels, click More Delete label.

2. Click OK.
This removes the label from the list of labels. However, any conversations with this label keep it unless you remove it.

Filter conversations

1. Sign in to Google Groups.

2. Click the name of a group.

3. At the top, in the search bar, click the Down arrow .

4. Use the search field to filter conversations by the following options:

User who posted to the conversation

Conversation subject

Words contained in the conversation

Conversations posted between a given start and end date

Conversations with attachments

Conversations marked as duplicate

Conversation marked as complete

Conversations marked as no action needed

Conversations assigned to you, assigned to any user, or not assigned to anyone

Whether the conversation is or isn't resolved
A resolved conversation has been marked as either duplicate, complete, or no action needed.

Label applied to conversations
You can enter multiple labels separated by commas. The search results include any conversations that match all of the labels you enter.

5. Click Search.

# data[].attributes.attachment_link.description
This article is for administrators. To manage your own groups, visit the Google Groups help. This feature requires turning on Google Groups for Business. You can use Collaborative Inboxes in Google Groups. Members of the Collaborative Inbox who have the correct permissions can assign conversations to each other for tracking.

# data[].attributes.attachment_link.readable_text
Now that many of our schools have closed and we have converted to distance learning, you might be wondering how you or your students can access Google Classroom; especially in one computer households or for students without devices. Well, accessing Classroom is easier than you think!

Google Classroom App

I feel like the easiest way to access Google Classroom without a computer is by using the Classroom App on a phone or a tablet. Click here for the app on the App Store and here for Google Play Once the app has been downloaded to a phone or tablet, students login with their school district accounts and will find an interface that feels very similar to the one they find at school.

This slideshow requires JavaScript.

They can click on any assignment, interact with the content, watch any videos you post (did you know that you can record videos directly into Classroom by using the camera on your phone while you are using the app?), and even create Slides and Docs right on their phones! I have known quite a few students that claim they can type an entire paper on their phone. Now is their time to shine! Teachers can even grade assignments and give feedback directly to students with the app. It is really a great tool to have at your fingertips.

Xbox and Playstation

Classroom can be opened on Xbox and Playstation. There isn't an app that the students can add to their consoles. Instead, they are going to have to use the built-in browsers that come on the two devices. On Xbox, it is Microsoft Edge. On Playstation, it is the "www" browser. Your students will probably know how to find the browsers on their consoles, but if not, each one has a search function they can access on the home screen.

Once the browser has been opened:

1. Type in classroom.google.com in the URL bar.

2. A prompt for a Google account will appear.

3. Type in your school district email and password - it doesn't end in google.com and that is ok!

4. The Classroom home screen will open up.

If students have a keyboard they can plug in, they will have a much easier time of navigation. Otherwise, they will have to use their controllers to click on the classroom tiles, open up assignments and type. I did a trial run on both consoles and was able to open assignments and interact with video and written instructions. I was also able to open attachments like Docs and Slides and type on them. It wasn't easy with a controller, but at least I could access the content. I will say, I have watched my son type faster with his controller than some kids can on a keyboard, so maybe I am worried about this for nothing!

As we all struggle with ways to meet the needs of our learners, I just thought it would be valuable to know that there are multiple options for students as they access your content.

# data[].attributes.attachment_link.title
Access Google Classroom with your phone, your Xbox or your Playstation!

# data[].attributes.attachment_link.description
Now that many of our schools have closed and we have converted to distance learning, you might be wondering how you or your students can access Google Classroom; especially in one computer households or for students without devices. Well, accessing Classroom is easier than you think!

# data[].attributes.body
Recording voice and computer audio

# data[].attributes.attachment_link.title
PRESENT VIDEO WITH SOUND IN GOOGLE MEET │ HOW TO FIX VIDEO PRESENTATION WITH NO AUDIO

# data[].attributes.attachment_link.title
5 Google Forms Features Every Teacher Should Know How to Use

# data[].attributes.body
Choosing application add ons and adding to Domain

# data[].attributes.attachment_link.readable_text
This article is for G Suite administrators. If you're not an admin and would like to add apps to your G Suite account, go to Use Google Drive apps.
You can install a G Suite Marketplace app in your organization's domain and choose who can use the app.

Note: Add-ons for Google Docs, Sheets, Slides, and Forms are moving to the G Suite Marketplace. Work with your app developers to move any Docs, Sheets, Slides, and Forms add-ons to the G Suite Marketplace. Until they're moved, don't uninstall any add-ons because you won't be able to find them in the G Suite Marketplace and reinstall them.

Warranties and support for third-party G Suite Marketplace apps are provided by the vendors and not by G Suite Support.

Before you install an app

Install a G Suite Marketplace app

1. From the Admin console Home page, click Apps G Suite Marketplace apps.

2. Click Add app to Domain Install list.

3. Browse G Suite Marketplace and click an app.

4. Choose how to install the app. You can also make changes later after you install the app.

Domain Install-Installs the app for your entire domain or for a specific organizational unit.

Individual Install-Installs the app only on your account.

5. Click Continue.

6. Review the data access requirements (you may need to scroll to view the full list), terms, and policies. Check the agreement box and click Accept.

Note: Only grant data access if you trust the app and the vendor. Providing access to a malicious app can compromise your domain's data. For information about how an app accesses your data, go to Understand data access.

7. Click Done.

8. (Optional) Turn on or off the app for organizational units.

9. (Optional) Help your users open a G Suite Marketplace app.

Note: It may take up to 24 hours for an app to be available to users.

Related topics

# data[].attributes.attachment_link.title
Install G Suite Marketplace apps in your domain

# data[].attributes.attachment_link.description
This article is for G Suite administrators. If you're not an admin and would like to add apps to your G Suite account, go to Use Google Drive apps. You can install a G Suite Marketplace app in your organization's domain and choose who can use the app.

# data[].attributes.body
Tutorial

# data[].attributes.attachment_link.readable_text
Have you ever been to a last-minute potluck where the host told you to just bring something? With no direction, you whip up a HUGE batch of your grandma's killer potato salad recipe. Eager to wow the crowd, you go all out with the garnishments! Once you arrive at the potluck, you're irritated to find that five other people brought potato salad.

Why didn't the host say something? If they had just asked people to bring certain items, you would've known to bring your killer macaroni salad instead.

Maybe you're going on a field trip, and bus sign-ups have ALWAYS been a disaster! Somehow too many kids signed up for Bus 1, and you end up wasting time the day of the field trip trying to sort it out.

If you're an elementary school teacher, I bet you have parent-teacher conferences! While there are a host of sign up programs online, maybe you want something that syncs with your own student database and doesn't require parents to sign up for yet another program.

Or how about this: do you have that one (or several) student who always uses the bathroom during class? They keep saying it's an emergency, perhaps you've complained to the parents, who think it's not that big of a deal, and you're tired of the disruption.

As many of you know, Google Forms is a powerful tool to use in a wide variety of situations. One popular application is using it as a sign-up form or scheduling appointments. Users would simply choose from a list of options, and the answers are recorded in a spreadsheet.

Here's an example of a form we used for students to sign up to work shifts for our Multicultural Fair:

Since we wanted to evenly distribute the 50 groups among the shifts, I used an add-on called Choice Eliminator. With this tool, you set the number of responses you'll accept for each choice, and as someone selects it, one spot is magically eliminated. Once all of the spots are taken, that option will disappear from your Google Form.

No more double-booking. No more mixups with busses. You can set the number of times your students can use the bathroom in a certain time period, and track them by having them sign out electronically.

And no more multiple sets of potato salad. Because yours was the best, and nobody ate it.

Choice Eliminator is genius and works really well if you set it up correctly.

You need to start out in a Google Form that is already populated with questions and multiple choices. Be sure to create unique choices, which means you can't have two different 3:00 PM spots on the form. When the add-on runs, it won't know which of those 3:00 PM spots to eliminate the choices from!

Get the Add-on

1. While in your Google Form, the three vertical dogs beside your picture or initials. Then select "Add-ons."

2. You'll most likely find Choice Eliminator 2 in the top row due to its popularity. If not, just type it in the "Search Add-ons" box. When you see it, click on the blue "+Free" button to select it.

3. Choice Eliminator 2 is now one of your add-ons and can be accessed by clicking on the puzzle piece on the top menu.

1. In your Google Form, create a question with multiple options (multiple choice works best).

2. Click on the "Add-ons" puzzle piece icon.

3. Select "Choice Eliminator 2" and then "Configure."

4. In the mini box to the right, click on your first question. Then select "Eliminate Choices." It will take a few seconds to process.

5. Click on the cog to the right for "Choice Options." When you're done, hover your mouse over the
7. Another window will open. This is where you will set the answer limit for each choice. This means that if you only want two people to bring plates, then set it to two (see the example above). Once two people have signed up for plates, then "plates" will disappear from your Google Form, and they'll need to choose another option. green circle, and then click on the red X.

1. At the top of your Google Form, go to "Send" and then click on the "Link" icon in the middle. Copy the link and paste it in a new tab or window.

2. Claim one of the spots by completing the form. I usually go into the form again and claim that same spot multiple times.

3. After you've claimed all of the spots, that choice should no longer appear on the next attempt. As I explained above, since I only had two spots for napkins, on the third time I completed the form "napkins" didn't appear.

4. If you follow steps 2-7 above, you will be led back to the popup where you set the limit for your choices. It will indicate that one spot is taken.

1. Go back to your Google Form. You should see a number beside "Responses." Click on it.

2. You will have the option to see a summary or individual responses. If you click on the green rectangle to the right, a spreadsheet with your responses will appear.

After testing it out, be sure to launch the add-on again and repopulate the choices!

1. At the top of your form, click on the "Add-ons" puzzle piece icon.

2. Select "Choice Eliminator 2" and then "Configure"

3. You will see a note from the author. Close out of the window.

4. In the popup window to the right, click on your first question. The select "Eliminate Choices." It will take a few seconds to process.

5. Click on the cog to the right "Choice Options."

6. Another window will open. This is where you originally set the limit for the number of choices available. To reset it, hover your mouse over the green circle, and then click on the box with the arrow. You will see "Restore Choices."

7. Your counts are now set to zero. Hover your mouse over the green circle and click on the red X.

Remember that student who keeps going to the bathroom? I bet you're wondering how this add-on can help with that!

It can actually help with accountability for all of your students! You can create a bathroom sign-out form with each of your students' names and then set the add-on for a set number (like three times per quarter). Whenever someone wants to go to the bathroom, they'll have to sign out, which will eliminate one of their "choices." After the third trip, they won't be able to sign out anymore until you reset it.

To set this up, you'd have each student's name as an "option" in your form, and then after you launch the add-on, set the number of times each student can go per time period (such as per month, grading period, etc.) You can also set the form to collect email addresses (which is especially useful if your school uses Google Apps for Education), so that nobody is "stealing" each other's bathroom spot.

This also creates a time stamp in a Google Sheet. If you see suspicious behavior happening in the bathroom, you can look at the time stamps to see who was out at that time!

As mentioned above, you can set appointments, especially for parent or in-class conferences. Since you're using a Google Form, you can also have fields for other information such as parent concerns they'd like to address, if they're interested in volunteering for the Fall Festival, etc.

Another benefit is if you're having students do choice projects. You can save your sanity and have them pick from certain topics. This way you'll only have maybe five per subject instead of 170 of the SAME one!

Finally, if you're holding a conference or event, you can limit the number of participants in a session based on space and to allow for more individualized attention.

The creator of the add-on has a Google+ community where he answers any questions about Choice Eliminator.

# data[].attributes.attachment_link.title
How to use Google Forms Choice Eliminator

# data[].attributes.attachment_link.description
Have you ever been to a last-minute potluck where the host told you to just bring something? With no direction, you whip up a HUGE batch of your grandma's killer potato salad recipe. Eager to wow the crowd, you go all out with the garnishments!

# data[].attributes.attachment_link.readable_text
Course Description:
Teachers will be introduced to Google Apps for Education as a resource to enhance collaboration, communication, critical thinking, and creativity with students, colleagues and their school community. Emphasis will be placed on introducing resources that provide best practices when using Google Apps for Education. The course is online and divided into 10 self paced modules. Each module can be completed individually. Teachers can demonstrate completion of each module through a Google Form.

Google Chrome is the recommended browser for this course.

After logging in to your Google Drive Account it is recommended that you go in the the settings and click on "Experience the New Drive". This may happen automatically for some users. Click here if you need help.

# data[].attributes.attachment_link.description
Teachers will be introduced to Google Apps for Education as a resource to enhance collaboration, communication, critical thinking, and creativity with students, colleagues and their school community. Emphasis will be placed on introducing resources that provide best practices when using Google Apps for Education. The course is online and divided into 10 self paced modules.

# data[].attributes.body
Differences between different G Suite accounts inc storage etc.

# data[].attributes.body
How to make it visible/invisible to students

# data[].attributes.attachment_link.readable_text
Back

I am trying to delete a google meets link that I accidentally created in my Google Classroom because I do not want any students to see it. Instead, I would like to meet with them by having them go directly to a meeting I've started in Google Meets and joining with a different code name.

Can I delete the Meets link created in Google Classroom? Will the link interfere with any Google Meetings I have for the same class outside of that link?

Upvote (99) Subscribe Unsubscribe

Recommended Answer Recommended Answers (2)

Currently it isn't possible to delete a Meet link in Classroom. As mentioned, you can make it invisible to students by toggling the option 'Visible to Students' in Class Settings (accessible via the gear icon in the upper right corner). If you've created a Meet link in Classroom and do not wish to use it, that's okay. You can still use Calendar to create other meetings with your students.

If you have suggestions about features you'd like to see added to Google Classroom, pleasesend feedback to the team by following the steps below:

1. Go to classroom.google.com.

2. In the bottom-left corner, click Help Send feedback.

3. Enter your message and then click Send.

It's important to be as detailed as possible in your description.

Let me clarify some good questions that were brought up:

1) The Meet link will be visible in the teacher view, even when you disable it for students.

2) Students can't rejoin the call if teachers are the last participant to leave a nicknamed meeting. All meetings created in Classroom are considered nicknamed meetings.

You may also find this article helpful! There's information about how to start meetings from Classroom, Google Meet or Calendar.

Reply

This question is locked and replying has been disabled.

Failed to attach file, click here to try again.

You will lose what you have written so far.

Personal information found

We found the following personal information in your message:

This information will be visible to anyone who visits or subscribes to notifications for this post. Are you sure you want to continue?

This will remove the reply from the Answers section.

Your notifications are currently off and you won't receive subscription updates. To turn them on, go to Notifications preferences on your Profile page.

This reply is no longer available.

Some community members might have badges that indicate their identity or level of participation in a community.

Google Employee - Googler guides and community managers

Community Specialist - Google partners who share their expertise

Platinum Product Expert - Seasoned members who contribute beyond providing help through mentoring, creating content, and more

Gold Product Expert - Trusted members who are knowledgeable and active contributors

Silver Product Expert - New members who are developing their product knowledge

Community content may not be verified or up-to-date.

# data[].attributes.attachment_link.title
How do I delete a Google Meets link that I created in my Google Classroom? - Classroom Community

# data[].attributes.attachment_link.description
Back I am trying to delete a google meets link that I accidentally created in my Google Classroom because I do not want any students to see it. Instead, I would like to meet with them by having them go directly to a meeting I've started in Google Meets and joining with a different code name.

# data[].attributes.attachment_link.readable_text
This feature is available with the G Suite Enterprise, G Suite Enterprise for Education editions and is coming soon to G Suite Enterprise Essentials. For details, see Compare G Suite editions.
Through September 30, 2020, G Suite customers have free access to advanced Google Meet video conference features, such as larger meetings (up to 250 participants), live streaming, and recording. After September 30, Google Meet feature availability will be determined by the customer's G Suite license agreement. Recorded meetings, however, will stay in the respective owner's Drive.

Tip: If you're a G Suite administrator who manages Google Meet for your organization, first allow live streaming.

If you use Google Meet and Google Calendar for work or school, you can add view-only live streaming to an event for up to 100,000 people.

Who can view a live stream

Only guests in your organization can view a live stream. All participants in your organization can stop and start the stream during the meeting, and record the event. Guests who join as "view-only" can't participate in the meeting or control streaming and recording.

Supported Meet browsers

You can use these browsers to view live stream meetings:

What you can share via live-stream with Meet

Real-time employee and staff training

Academic information with students

Conference materials that can't be shared in person.

Organization-wide presentations with multiple presenters
Guests may be designated as view-only

Set up a live stream

Part 1: Create a live stream event

1. Open Google Calendar.

2. Click Create More options.

3. Add the event details, such as date, time, and description.

4. Add the guests that can fully participate in the video meeting.

You can add up to 250 participants. All guests added to this event can be seen, heard, and present their screen.

People from other organizations can be added. Only people in your organization can record and control streaming. For example, use this event to invite the speakers for your organization's meeting.

5. To add the video meeting, Click Add conferencing Hangouts Meet.

6. Next to Join Hangouts Meet, click Down arrow Add live stream.

7. To invite view-only guests, select an option:

Click Copy share the live stream URL in an email or chat message.

Continue to Part 2: Create an additional event for view-only guests.
Tip: Only guests within your organization can view the live stream. You can add up to 100,000 view-only guests.

8. Click Save.

9. Streaming does not automatically start. During the meeting, select More Start streaming.

Part 2: Create an additional event for view-only guests

Remove a live stream from an event

Start and stop a live stream

Record a live-stream event

Full participants from the same organization as the meeting organizer can record the live stream so people can watch the event after the meeting ends. Live-stream events are not automatically recorded, so you must manually start and stop recording. Learn how to Record a video meeting.

Guests who join view-only cannot control recording.

Watch a live-stream event

Tip: People using the live-stream link cannot interact with the meeting participants or others in the live stream.

To watch a live-stream event, guests can:

Click the live-stream link in the Calendar event or an email.

Watch from a meeting room that is added to the event and set up with Chromebox or Chromebase for meetings.

When you watch a live-stream event, you can:

Stop and start the live playback.

Set the playback speed and video quality.

Play the video on a TV.

Switch to full-screen mode.

Tip: To watch the event later, ask the meeting organizer if a recording is available. The live-stream can only be viewed while being broadcast live.
Related topics:

# data[].attributes.attachment_link.description
This feature is available with the G Suite Enterprise, G Suite Enterprise for Education editions and is coming soon to G Suite Enterprise Essentials. For details, see Compare G Suite editions. Through September 30, 2020, G Suite customers have free access to advanced Google Meet video conference features, such as larger meetings (up to 250 participants), live streaming, and recording.

# data[].attributes.attachment_link.readable_text
Beginning June 15, 2020, Google Meet will have separate settings in the Google Admin console that allow you to enable or disable Meet independently of classic Hangouts chat.

If you take no action before June 15 -Google Meet will automatically be enabled for your organization starting on June 15. This means everyone in your organization will be able to create and join Meet video meetings.

What you need to know about these changes

These changes are being released to G Suite customers on a rolling basis. If you don't see the changes in your Admin console, check back in a few days.

From May 15-June 15, you can change Meet settings (except the service status) using the Hangouts Meet and Google Hangouts or Google Meet settings. Changes in one service are reflected in the other.

Changes to the Google Meet service status take effect after June 15. Changes to all other Meet settings, such video calling, recording, and other premium features, take effect immediately.

Turn on video meetings

When the Google Meet service is on, users will be able to create and join video meetings in your organization.

Allow users to create and join video meetings

Complete all of the following steps to turn on the Hangouts Meet and Google Hangouts and Google Meet services.

1. To allow users to join meetings, turn on the Hangouts Meet and Google Hangouts service:
Note: This change takes effect immediately.

1. From the Admin console Home page, go to Apps
G Suite
Hangouts Meet and Google Hangouts.

2. Next to Service status, click the Down arrow .

3. Select On for everyone.

4. Click Save. If you configured an organizational unit or group, you might be able to Inherit or Override a parent organizational unit, or Unset a group.

2. To allow users to create meetings, turn on video calling in the Hangouts Meet and Google Hangouts service.
Note: This change takes effect immediately.

1. From the Admin console Home page, go to Apps
G Suite
Hangouts Meet and Google Hangouts.

2. Click Meet video settings.

3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

4. Click Video calling.

5. Check the Let users place video and voice calls box.

6. Click Save.

3. Turn on the Google Meet service.
Note: This change takes effect after June 15, and will allow users to create and join calls in Meet.

1. From the Admin console Home page, go to Apps G Suite Google Meet.

2. Next to Service status, click the Down arrow .

3. Select On for everyone.

4. Click Save.

Changes typically take effect in minutes, but can take up to 24 hours. For details, go to How changes propagate to Google services.

(Optional) Turn advanced Meet features on or off

You might want to manage video meeting features, such as joining a meeting by phone and recording and streaming meetings. If so, go to Manage Meet video meeting settings.

(Optional) Grant access to manage Meet settings

Make someone else in your G Suite account an administrator to help you perform Meet management tasks in your Google Admin console. This way, if you're busy or on vacation, someone else can help with tasks.

For example, you can create and assign a custom admin role that includes Google Meet, and assign the role to a user.

Note: Before June 15, change all existing custom admin roles that include Hangouts Meet and Google Hangouts to Google Meet if current admins should retain access to Meet settings.

You need to be a super administrator to give a user access to the Meet admin settings. You create a custom admin role with the Manage Meet Settings privilege and then assign that role to the user.

Tip: You can also grant access to Organizational Units or Groups so the admin can help limit access to advanced Meet features, such as recording.

Create a custom Meet Admin role

1. From the Admin console Home page, go to Admin roles.

2. Click Create new role.

3. Enter a role name and description and click Continue.

4. Under Admin console privileges, go to Google Meet and check the Manage Meet Settings box.

5. Click Continue, review your changes and then click Create Role.

6. Click Assign role.

7. Search for and select the users that should have admin privileges. If you can't find the user in the list, see Find a user account.

8. Click Assign Role.

Assign an existing custom role to a user

1. From the Admin console Home page, click Users.

2. Click the user's name to open their account page. If you can't find the user in the list, see Find a user account.

3. Click Admin roles and privileges Assign roles.

4. Next to the role name that includes the Manage Meet Settings privilege, click Turn on .

5. Click Save.

Related topics

Review HIPAA compliance

G Suite organizations subject to the Health Insurance Portability and Accountability Act (HIPAA) should review HIPAA Compliance with G Suite and Cloud Identity.

Related topics

# data[].attributes.attachment_link.description
Beginning June 15, 2020, Google Meet will have separate settings in the Google Admin console that allow you to enable or disable Meet independently of classic Hangouts chat. If you take no action before June 15 -Google Meet will automatically be enabled for your organization starting on June 15.

# data[].attributes.attachment_link.readable_text
Your users want a unified sign-on across all their enterprise cloud applications. Our single sign-on (SSO) feature includes OpenID Connect (OIDC) identity provider support and support for Security Assertion Markup Language (SAML) 2.0. Once you configure your users' enterprise cloud applications to use SAML 2.0, they can use their G Suite or Cloud Identity credentials to sign in to enterprise cloud applications with single sign-on (SSO).

See the articles below to configure each of the pre integrated cloud applications. Refer to the SAML apps catalog article for links to articles for each of the pre integrated cloud applications. Use the SAML-based Federated SSO article to set up your own cloud applications that are not in the pre integrated applications list to support SAML 2.0 SSO using G Suite or Cloud Identity credentials.

# data[].attributes.attachment_link.description
Your users want a unified sign-on across all their enterprise cloud applications. Our single sign-on (SSO) feature includes OpenID Connect (OIDC) identity provider support and support for Security Assertion Markup Language (SAML) 2.0. Once you configure your users' enterprise cloud applications to use SAML 2.0, they can use their G Suite or Cloud Identity credentials to sign in to enterprise cloud applications with single sign-on (SSO).

# data[].attributes.attachment_link.description
Want to get more out of Google apps at work or school?

# data[].attributes.body
Force users to sign inagain after a set period of time.

# data[].attributes.attachment_link.readable_text
This feature is available with G Suite Business, Education, Enterprise, and Cloud Identity Premium editions. Compare editions

As an administrator, you can control how long users can access Google services, such as Gmail, without having to sign in again. For example, for users that work remotely or from untrusted locations, you might want to limit the time that they can access sensitive resources by applying a shorter session length. If users want to continue accessing a resource when a session ends, they're prompted to sign in again and start a new session.

How the settings work on mobile devices varies by device and app (see Considerations below). By default, the session length for Google services is 14 days.

Considerations

When and how users sign in

When a session expires for a user, they see the Verify it's you page and must sign in again.

When you change the session length, users need to sign out and in again for settings to take effect.

Users might not sign out for some time. If you want them to sign in again sooner, you can reset users' sign-in cookies. You have to reset each user one at a time. For details, see Block access to your Google service on a lost device.

If you set the session to never expire, users never have to sign in again.

If you need some users to sign in more frequently than others, place them in different organizational units. Then, apply different session lengths to them. That way, certain users won't be interrupted to sign in when it isn't necessary.

You can also require users to sign in with 2-Step Verification (2SV). To verify trusted devices, you could have users touch their security key. For details, see Set up 2-Step Verification.

Mobile devices

You can't configure session lengths for native mobile apps, such as Gmail or Google Calendar, on Android or Apple® iOS®devices.

For Chrome Browser:

You can only apply session-length settings to Chrome Browser on Android or iOS devices when the user is not signed in. If the user is signed in, settings won't apply. However, you can apply session-length settings as normal on other mobile browsers, such as Apple® Safari® and Mozilla® Firefox®.

Third-party identity providers

If you're using a third-party identity provider (IdP), such as Okta® or Ping®, and you set session lengths for your users, you need to set the IdP session length parameter to expire before the Google session expires. That way, your users will be forced to sign in again. If the third-party IdP session is still valid when the Google session expires, the Google session might be renewed automatically without the user signing in again.

For details on how to set the session length on your specific IdP, refer to your IdP's documentation.

Supported licenses

This feature is available with:

G Suite Business

G Suite Enterprise

G Suite for Education

Cloud Identity Premium

Set session durations

1. From the Admin console Home page, go to Security

Google session control.

To see Security on the Home page, you might have to click More controls at the bottom.

2. On the left, select the organizational unit where you want to set session length.
For all users, select the top-level organizational unit. Otherwise, select another organization to make settings for its users. Initially, an organization inherits the settings of its parent organization.

3. For Session control, under Web session duration, choose the length of time after which the user has to sign in again.

4. Click Override to keep the setting the same, even if the parent setting changes.

5. If the organizational unit's status is already Overridden, choose an option:

Inherit-Reverts to the same setting as its parent.

Save-Saves your new setting (even if the parent setting changes).

How can we improve it?

# data[].attributes.attachment_link.description
This feature is available with G Suite Business, Education, Enterprise, and Cloud Identity Premium editions. Compare editions As an administrator, you can control how long users can access Google services, such as Gmail, without having to sign in again.

# data[].attributes.body
Using groups to augment OU settings - allowing secruity features to be turned on or off for certian groups of users.

# data[].attributes.attachment_link.readable_text
Exception groups augment your organizational structure by allowing you to create custom sets of users that have Google security services configured differently. Exception groups augment the ability to turn on or off services by organizational unit. This additional layer allows you to apply special security settings to select subsets of existing organizations. The rest of the users in your organization are unaffected by these changes.

For instance, you might have an organizational structure resembling:
To apply a setting change to the entire organization:

1. In the Admin console, click Security > Advanced security settings.

2. Select the top-level organizational unit (your-domain.com) and make your changes.

3. (Optional) To isolate the exception to all of Engineering or Marketing, select that organizational unit instead.
All settings are inherited down through sub-organizations unless otherwise overridden.

To make a custom setting change, (for example, enforce 2-step verification for all of your contractors):

1. Create a group that contains all of your contractors.

2. Select the top-level organization and also select the group to apply the change to all contractors in the domain.
The settings are applied to the intersection of the organization and group (members of both).

3. (Optional) You can further refine this filtering by selecting lower-level organizations (for example, all of Engineering > Production or all of Marketing > Corporate) before selecting the desired group.
This setting would apply to all contractors in those organizations only. Similarly, you can make a custom setting change at a higher-level organization and then override it by navigating to the lower-level organization and altering the settings.

To create and use an Exempt from 2-Step enforcement exception group:

1. Follow the instructions in Create a group in the admin console to create an Exempt from 2-Step enforcement group on your domain.
Note: If you use Google Cloud Directory Sync (GCDS) to synchronize your Active Directory groups, create the group in Active Directory first then add your users to this group, run GCDS to sync the group, and skip the next step.

2. Add users to the group who will not be required to use 2-step verification to sign in to their Gmail account.

3. Click Security

4. Click Basic Settings > Two-step verification. For details, see 2-step verification enforcement.

5. Click the Go to advanced settings to enforce 2-step verification link.

6. Select the domain.

7. In the Group filters section, click Select and find the group you created (Exempt from 2-Step enforcement).

8. Select Turn off enforcement and click Save.

9. In the Group filters section, click No admin groups selected.

10. Select Turn on enforcement now and click Save.

11. Once each member of this group enables 2-step verification, they can be removed from the Exempt from 2-Step enforcement exception group.

# data[].attributes.attachment_link.description
Exception groups augment your organizational structure by allowing you to create custom sets of users that have Google security services configured differently. Exception groups augment the ability to turn on or off services by organizational unit. This additional layer allows you to apply special security settings to select subsets of existing organizations.

# data[].attributes.attachment_link.readable_text
Your users might have third-party apps that don't support the latest authentication protocols and don't work for users with 2-Step Verification (2SV). Legacy email apps are examples of such apps.

Apps that don't support the latest protocols

If a user sees a "password incorrect" error when trying to sign in to an app that doesn't support the latest protocols, an App password could solve the problem. App passwords give apps permission to access a Google Account without the user divulging their Google password to the app.

App passwords bypass 2SV

Because App passwords bypass 2SV:

App passwords are discouraged-It's better to install more secure apps that use modern authentication protocols. However, if some of your users have legacy apps that require App passwords, you'll need to allow your users to access less secure apps. Your users can then sign in using an App password.

Enforcing security keys disables App passwords-You can't require users to use a security key for 2SV and also let them use App passwords to sign in to legacy apps. If you enforce security keys as the 2SV method for your users, your company has security requirements that you don't want to circumvent.

# data[].attributes.attachment_link.title
How 2-Step Verification works with legacy apps

# data[].attributes.attachment_link.description
Your users might have third-party apps that don't support the latest authentication protocols and don't work for users with 2-Step Verification (2SV). Legacy email apps are examples of such apps. If a user sees a "password incorrect" error when trying to sign in to an app that doesn't support the latest protocols, an App password could solve the problem.

# data[].attributes.body
Useful for when employee does the administrative tasks on Google Suite

# data[].attributes.attachment_link.readable_text
These security best practices are for administrators of G Suite and Cloud Identity.

Select your business size

Small businesses (1-100 users)

Don't have an IT admin? Does one of your employees do administrative tasks (such as adding users) in addition to their regular jobs?

If you don't have an IT admin, this checklist gives you a baseline set of security​ ​best practices you should follow.

OPEN CHECKLIST

Does your small business have special security requirements?

If your small business has special regulatory, privacy, or security requirements, you might have the information security needs of a much larger company. Follow the security best practices for medium and large businesses in the checklist below.

Medium and large businesses (100+ users)

To help keep your business secure and running efficiently, you use dedicated IT resources, either in-house or provided by a third party.

This checklist recommends the security best practices you should follow to strengthen the​ ​security and privacy of your information.

OPEN CHECKLIST

# data[].attributes.attachment_link.description
These security best practices are for administrators of G Suite and Cloud Identity. Don't have an IT admin? Does one of your employees do administrative tasks (such as adding users) in addition to their regular jobs? If you don't have an IT admin, this checklist gives you a baseline set of security​ ​best practices you should follow.

# data[].attributes.attachment_link.readable_text
As your organization's administrator, keep your organization's data safe and secure when an user leaves by completing the following best practices:

1. Wipe any mobile devices
Use the Admin console to remotely remove data from the user's device. You can remote wipe the entire device or only erase your organization's data.

2. Revoke password recovery access
Remove the user's recovery email address and phone number so they can't use the password recovery feature to access their old account.

3. Change the user's password
This can greatly reduce the risk of unauthorized access to their old account.

4. Revoke all OAuth 2.0 application tokens
Changing a user's password also revokes OAuth 2.0 tokens issued for accessing certain products. Review all authorized access and revoke any other authorized applications.

5. Reset the user's sign-in cookies
This also reduces the risk of unauthorized access.

6. Revoke security keys and app password access
Revoke any security keys or application-specific passwords that have been granted access to the user's account.

7. Delete the user's account
Move any of the user's data that you want to save to another account. Then delete their original account completely. This is the best way to ensure they can't access your organization's data.

# data[].attributes.attachment_link.title
Maintain data security after an employee leaves

# data[].attributes.attachment_link.description
As your organization's administrator, keep your organization's data safe and secure when an user leaves by completing the following best practices: Wipe any mobile devices Use the Admin console to remotely remove data from the user's device. You can remote wipe the entire device or only erase your organization's data.

# data[].attributes.attachment_link.readable_text
You can block sign-in attempts from some apps or devices that are less secure. Apps that are less secure don't use modern security standards, such as OAuth. Using apps and devices that don't use modern security standards increases the risk of accounts being compromised. Blocking these apps and devices helps keep your users and data safe.

Examples of apps that don't support modern security standards include:

​Native mail, contacts, and calendar sync applications on older versions of iOS and OSX​

​Some computer mail clients, such as older versions of Microsoft Outlook

Examples of apps that do support modern security standards are Gmail, Windows Mail, Office 365, Outlook for Mac, Instagram, PayPal, Amazon, Facebook, and Basecamp.

Transitioning to more secure app access to Google Accounts

Less secure apps can make it easier for hijackers to break into user accounts and devices. Blocking sign-ins from these apps helps keep accounts safe. For these reasons, Google is limiting password-based programmatic sign-ins to Google Accounts.

If you don't allow sign-ins from less secure apps

You won't be able to turn on the less secure apps enforcement setting (it's no longer available in the Admin console). You can still allow users to turn on or off access to less secure apps on their individual accounts. Google will turn off the less secure apps setting on individual accounts for users who stop using it.

If you allow sign-ins from less secure apps

Because Google is beginning to shut off Google Account access to less secure apps, the enforcement option is no longer available. We recommend turning off less secure apps access now. You should start using alternatives to less secure apps.

As Google gradually moves away from allowing less secure apps to access Google Accounts, you'll receive email notifications about changes that affect you.

Notice of setting removal

Google will automatically turn off the Less secure apps setting on individual accounts for users who stop using it. Users can turn it back on until the setting is removed.

The Less secure apps setting will be removed from the Admin console in Feb, 2021. If you haven't already transitioned to more secure apps, do so by this date.

Use alternatives to less secure apps

To promote better security for user accounts, you should start using alternatives to less secure apps as soon as possible.

Use apps in your company that use OAuth 2.0 authentication. Deploy new applications or update your existing apps to support OAuth 2.0 for authentication.

If some users can't migrate to a more secure platform, they can use alternatives.

Apple Mail configured with POP3

Re-add your Google Account to Apple Mail and configure it to use IMAP with OAuth.

This automatically initiates the connection with OAuth.

iOS Mail

Continue using iOS Mail as long as you have iOS 6.0 or later.

OAuth support is automatically included in iOS 6.0 and later when you add an account using the Google option.

Outlook for Windows via
password-based POP or IMAP

G Suite Sync for Microsoft Outlook (GSSMO).
Web-based or latest version of Outlook.

Set up G Suite for Outlook for your users
G Suite Sync for Microsoft Outlook download

Thunderbird

Re-add your Google Account to Thunderbird and configure it to use IMAP with OAuth.

This automatically initiates the connection with OAuth.

Legacy office devices

Examples: scanners and multifunctional printers that send email

Continue using legacy office devices with SMTP. Other protocols (such as POP3 and IMAP) will be blocked unless they use OAuth.

Any other app

Request that the app developer update the app to use OAuth 2.0.

Manage access to less secure apps

You can allow users to turn on or off access by less secure apps or disable their ability to allow less secure apps.

1. Select the setting for less secure apps:

Disable access to less secure apps (Recommended)
Users can't turn on access to less secure apps.
When you disable access to less secure apps while a less secure app has an open connection with a user account, the app will time out when it tries to refresh the connection. Timeout periods vary per app.

Allow users to manage their access to less secure apps
Users can turn on or turn off access to less secure apps.

2. Apply settings for organizational units or your domain. You can also customize permissions for groups of users.

3. Click Save.

Monitor accounts that allow less secure apps

Use Account Activity Reports to see whether users can allow less secure apps to access their accounts. On the toolbar, click Select columns to add less secure apps status to the report.

# data[].attributes.attachment_link.description
You can block sign-in attempts from some apps or devices that are less secure. Apps that are less secure don't use modern security standards, such as OAuth. Using apps and devices that don't use modern security standards increases the risk of accounts being compromised. Blocking these apps and devices helps keep your users and data safe.

# data[].attributes.attachment_link.readable_text
As your organization's administrator, you can let users and non-super administrators recover their account if they forget their password:

Option 1: Let users reset passwords themselves through an automated system (you need to turn on non-admin password recovery in your Admin console).

Option 2: Ask users to contact an administrator to reset their password.

Option 1: Let users reset passwords themselves

This feature isn't available if your organization uses single sign-on (SSO) or G Suite Password Sync. It also doesn't work for users under the age of 18. Go to details below.

You can let users who aren't super admins reset their own passwords without contacting an administrator. Users must add a recovery phone number or email address to their account where they can receive recovery instructions by voice, text message, or email. They can then reset their password by entering their Google Account address and following automated instructions.

Turn on non-admin password recovery

By default, only super admins can reset a forgotten password using the automated system. Here's how to let users and non-super admins do this:

Now, if users in your organization click Forgot password? on the sign-in page, they get instructions on recovering their password. If users added a recovery phone number or email address to their account, they can reset their password. Users with 2-Step Verification can reset their password only with their recovery email address. Users who haven't added recovery information are directed to contact an administrator.

Tell users to set up a recovery phone number or email address where they can receive password recovery instructions.

Immediately remove a user's recovery information when they leave your organization or if their account might be hijacked. Go to details below.

Prevent unauthorized access to a user's account

If you turn on non-admin password recovery, immediately remove a user's recovery information if...

The user is terminated or leaves your organization. That way they can't recover their password to access their old account.

You suspect the account has been hijacked and the user's recovery information is no longer legitimate.

To remove a user's recovery information or check if it's been hacked, sign in to the account as the user. Then follow steps to set up a recovery phone number or email address.

When non-admin password recovery isn't available

G Suite for Education users under the age of 18-Younger G Suite for Education users aren't permitted to add a recovery phone number or email to their account. They can't reset a forgotten password on their own.
Note: Users of any age with primary or secondary education accounts can't supply a recovery phone number or email. The option to add a phone number or email is not available for these types of accounts.

Only users with Higher Education accounts, administrators, and teachers using G Suite for Education can supply a recovery phone number or email.

Organizations using SSO or GSPS-If your organization uses single sign-on (SSO), you won't have the enable non-admin user password recovery option in your Admin console.

If your organization uses G Suite Password Sync for Active Directory (GSPS) and you prevented users from changing their G Suite passwords, users are redirected to Active Directory to reset their passwords. This keeps their Active Directory passwords in sync with G Suite.

Option 2: Ask users to contact an administrator

If a user clicks Forgot password? on the sign-in page, and you haven't turned on non-admin password recovery, they get a message to contact their administrator. Make sure you've provided a way for users to contact an administrator if they can't sign in to their account.

See also Reset a user's password.

# data[].attributes.attachment_link.description
As your organization's administrator, you can let users and non-super administrators recover their account if they forget their password: Option 1: Let users reset passwords themselves through an automated system (you need to turn on non-admin password recovery in your Admin console). Option 2: Ask users to contact an administrator to reset their password.

# data[].attributes.body
For allowing access to G Drive for collaboration

# data[].attributes.attachment_link.title
Whitelist trusted G Suite domains - G Suite Administrator Help

# data[].attributes.attachment_link.description
This feature is available with the G Suite Enterprise or Business or Education or Nonprofits edition. Compare editions As a G Suite administrator, you can let

# data[].attributes.attachment_link.readable_text
If you own another domain, you can add it to your G Suite or Cloud Identity account.

You can add a domain (or subdomain) as:

A domain alias: You and your users get email addresses at the domain. Send email and receive email at your primary domain and domain alias. No additional cost.

OR

An additional domain: Create user accounts at this domain (also called a secondary domain). If you have G Suite legacy free edition, you can only add a domain alias not an additional domain.

To add email addresses to your domain, you can create aliases for a user or group (mailing list) at no additional cost.

STEP 1. Choose how to use your domain

Option 1: Give users an email address at the domain

Add the domain as a domain alias.

✓

Each user gets an email address at both your primary domain and domain alias

✓

Each mailing group (such as @info or @support) also gets an email address at the domain alias

✓

Everyone can send and receive email from either address

✓

All messages arrive in the user's primary inbox

✓

No additional cost per user or group. Add up to 20 domain aliases.

Example: You signed up for G Suite with your-company.net (your primary domain). You own the domain other-company.com and add it as a domain alias.

You and your team automatically get email addresses at both domains.

For information on restrictions, go to Limitations with multiple domains.

Option 2: Create new users at the domain

Add the domain as an additional (secondary) domain

✓

Good for managing separate teams of users or businesses at different domains

✓

Create user accounts for the additional domain

✓

Each domain has a different set of users

✓

Users get a G Suite account, email address, and mailbox for their domain

✓

Pay for each user account in the additional domain

Example: You manage two separate teams that have their own domain. You add other-company.com as a secondary domain.

Each team member has their own email address, mailbox, and user account for their domain. You manage all domains and users in your Admin console at your primary domain

ann@your-company.net
nguyen@your-company.net
lyle@your-company.net

aditya@other-company.com
coraline@other-company.com
vincent@other-company.com

STEP 2. Add the domain alias or additional domain

1. From the Admin console Home page, go to Domains

Manage domains.

2. Add the domain to your account. The Admin console includes either of these steps (both work the same way):

Click Add a domain or a domain alias.

Then click Add a domain alias of primary-domain-name or Add another domain (not available with the legacy free edition of G Suite).

OR

Click Add a domain or Add a domain alias.

(Note: To add a domain alias to secondary domain, use the Domains Aliases API.)

3. Enter the name of the domain or subdomain. You must own the domain name, and it can't be used with any other Google Account. If the domain is already in use, you'll get an error message. Check troubleshooting tips.

4. Click Continue and verify domain ownership
Follow the instructions toverify that you own the domain. If you need assistance, contact your domain host (typically where you purchased your domain) or G Suite Support.

5. Click Verify and continue to setup email delivery.

6. Update the domain's MX records to set up Gmail ( G Suite only) for your added domain.

7. Click I have completed these steps.

Once your domain is active, go to Step 3 to set up your users with their new email address or account.

STEP 3. Start using your domain

Receive messages

Messages sent to your alias address automatically arrive in your inbox. To test, send a message from another account ( not your G Suite account) to your new alias.

Send messages from your alias address

Add your alias address to your Gmail account.

1. On your computer, open Gmail.

2. In the top right, click Settings Settings.

3. Click the Accounts and Import or Accounts tab.

4. In the "Send mail as" section, click Add another email address.

5. Enter your name and your alias address.

6. Check the Treat as an alias box.

7. Click Next Step and follow the confirmation steps.

When you send a message in Gmail, click From to select an address.

How your primary email address and alias work together

You sign in your G Suite account with your email address.

You can create documents and files only with your email address

People can share files with either your email address or alias.

Google Calendar invites and sharing invites are sent only from your email address.

Tip: Share the sample message and instructions with your G Suite users.

Use your additional domain

Once your additional domain is active:

1. In the Admin console, add new user accountsto your additional domain.

2. At the right of the @ sign, click the Down arrow and select the user's domain.

We recommend reviewing Limitations with multiple domains for help with managing users accounts.

Related topics

# data[].attributes.attachment_link.description
If you own another domain, you can add it to your G Suite or Cloud Identity account. You can add a domain (or subdomain) as: A domain alias: You and your users get email addresses at the domain. Send email and receive email at your primary domain and domain alias.

# data[].attributes.attachment_link.readable_text
To sign your organization up for a Google Cloud product, you need an internet domain name. This is the unique name that appears after the @ sign in email addresses, and after www. in web addresses. It typically takes the form of your organization's name and a standard Internet suffix, such as yourbusiness.com or stateuniversity.edu. You can use a domain name that you already own. Or you can purchase a domain when you sign up for Google services.

Using your domains with Google Cloud services

Choose your primary domain at sign-up

When you sign up for a Google Cloud product, you provide the primary domain name you want to use with your services. This must either be a domain name you already own, or you can purchase a domain during the sign-up process. Choose this name carefully as it becomes the main brand for your Google services and you can't change the name later.

See Choose your primary domain.

Customize web addresses for your primary domain

This lets users access your Google services or business web sites at easy-to-remember addresses such as mail. yourdomain.com, www. yourdomain.com, or simply yourdomain.com.

See Customize web addresses for G Suite services.

Add other domains you own

If your organization owns multiple internet domains, you can add these to your Google account at no extra cost. That way, users at all your domains can use your Google services. For example, a retailer might have domains for different product lines, or a state university might own a domain for each campus.

See Add a domain or domain alias.

# data[].attributes.attachment_link.description
To sign your organization up for a Google Cloud product, you need an internet domain name. This is the unique name that appears after the @ sign in email addresses, and after www. in web addresses. It typically takes the form of your organization's name and a standard Internet suffix, such as yourbusiness.com or stateuniversity.edu.

# data[].attributes.body
Understanding different audit logs

# data[].attributes.body
find out why messages weren't delivered etc

# data[].attributes.attachment_link.readable_text
You can sift through the delivery logs for your domains and evaluate message delivery using Email Log Search in the Google Admin console. The reports help you track down missing messages, such as those quarantined as spam or otherwise routed incorrectly. You can also use the tool to determine message IP addresses and troubleshoot how policies affect mail flow.

In addition to tracking the delivery of a message, you can use Email Log Search to investigate the status of a message after it has been delivered to a user's Gmail mailbox. This includes the current assigned labels, message location, and whether or not the message has been deleted.
The Email Log Search tool isn't available to resellers when accessing a resold domain Admin console using the reseller console.​
How do I start using the tool?

1. Learn about the tool-Use this article for guidelines.

2. Perform a search-See Find messages with Email Log Search for steps on using the tool.

3. Examine the results-See View Email Log Search result details for a description of the output.

4. Analyze the route and delivery states-See Interpret Email Log Search results for recommendations on using search results to investigate delivery issues.

5. Examine the post-delivery message state-See Post-delivery message status for a description of the output.

What messages appear in search results?

Messages sent from 1 hour ago to the past 7 days, or for a date range you specify in the past 30 days.
Note: Search results for messages older than 30 days show only post-delivery message details.

Post-delivery message details have no time constraints and are always retained.

Messages to or from any G Suite user in your domains.

Messages sent to a group in Google Groups and other mailing lists containing your G Suite users.

What search criteria can I use?

A specific date and time range.
Note: When you search for messages older than 30 days, message ID and recipient address are required fields.

A particular envelope sender or recipient-enter a full or partial email address, or just the domain (for example, company.com).

A particular sender or recipient IP address.

A specific message ID.

# data[].attributes.attachment_link.description
You can sift through the delivery logs for your domains and evaluate message delivery using Email Log Search in the Google Admin console. The reports help you track down missing messages, such as those quarantined as spam or otherwise routed incorrectly. You can also use the tool to determine message IP addresses and troubleshoot how policies affect mail flow.

# data[].attributes.body
View a record of all admin actions on G Suite

# data[].attributes.attachment_link.readable_text
You can use the Admin audit log to see a record of actions performed in your Google Admin console. For example, you can see when an administrator added a user or turned on a G Suite service.

For other services and activities, such as Google Drive and user activity, see the list of audit logs.

Note: For details on when log data becomes available and how long it's retained, see Data retention and lag times.

Step 1: Open your Admin audit log

1. From the Admin console Home page, go to Reports.

2. On the left, under Audit, click Admin.

3. (Optional) Next to the columns, click Manage columns and select the columns that you want to see or hide.

Step 2: Understand Admin audit log data

Data you can view

Event name

The action that was logged, such as revoking a security key or deleting a user.

Event description

Details about the action, such as the name of the deleted user.

IP address

IP address of the administrator. Usually reflects the administrator's physical location, but could be a proxy server or a VPN address.

Date

Date and time of the event (displayed in your browser's default time zone).

Admin

Name of the admin who performed the action. If an admin performs an action that triggers a change to a user's license, then you will see License Manager instead.

Details on audit logs

Information on how the log records some activities:

The access group is listed as Group Email(s):groupname. The log shows the change was made to the top-level organization. However, the change affected only the members of the access group, not the top-level organization.

If a service is unset for an access group, the change is shown as inherited from the top-level organization. However, members of the group receive the service on/off setting of any other access groups they belong to, and then their organization.
Service Gmail changed to INHERIT_FROM_PARENT for Solarmora organization unit in Solarmora.com (Group Email(s): {access-gmail-testers@solamora.com})
Step 3: Customize and export your audit log data

Filter the audit log data by user or activity

You can narrow your audit log to show specific events or administrators. For example, find all log events for when an admin changed a password for a particular user.

1. Open your Admin audit log as shown above.

2. Click Add a filter.

3. Select and enter the criteria for your filter and if needed, click Apply.

4. (Optional) To filter by organizational unit, at the top right, click Organization filter, select the organizational unit, and click Apply.

5. (Optional) To specify a date range to search, click Date range and select a period from the list or enter a start and end date and time. If needed, click Apply.

Filter by organizational unit

You can filter by organizational unit to compare statistics between child organizational units in a domain.

1. Open your report as shown above.

2. At the top, click Organization filter.

3. Select an organizational unit and click Apply.

Filter by date

1. Open your report as shown above.

2. At the top, click Date range.

3. Select a period from the list or enter a start and end date and time.

4. If needed, click Apply.

You can only filter the current organizational unit hierarchy, even when searching for older data. Data before December 20, 2018 will not appear in the filtered results.

Export your audit log data

You can export your audit log data to Google Sheets or download it to a CSV file.

1. Open your audit log as shown above.

2. (Optional) To change the data to include in your export, click Manage columns , select or remove the columns that you want to export, and click Save.

3. Click Download .

4. Under Select columns, click Currently selected columns or All columns.

5. Under Select format, click Google Sheets or comma-separated values (CSV).

6. Click Download.

You can export a maximum of 100,000 rows to Sheets or CSV.

How old is the data I'm seeing?

For details on exactly when data becomes available and how long it's retained, see Data retention and lag times.

Step 4: Set up email alerts

You can get email alerts for any combination of the data that you can view in the log except the date and time range.

1. Open your Admin audit log as shown above.

2. Click Add a filter.

3. Enter or select the criteria for your filter and click Create Alert.

4. Enter a name for the alert.

5. (Optional) To send the alert to all super administrators, under Recipients, click Turn on .

6. Enter the email addresses of alert recipients.

7. Click Create.

To edit your custom alerts, see Administrator email alerts.

# data[].attributes.attachment_link.description
You can use the Admin audit log to see a record of actions performed in your Google Admin console. For example, you can see when an administrator added a user or turned on a G Suite service. For other services and activities, such as Google Drive and user activity, see the list of audit logs.

# data[].attributes.attachment_link.readable_text
As an administrator, you can examine potential security risks, measure user collaboration, track who signs in and when, analyze administrator activity, and much more. You can view domain-level data alongside granular, user-level details through graphs and tables.

Admin console reports

Click a report below to get started.

Highlights-Gives you an overview of trends and key metrics of in your organization. This includes your team's use of G Suite services, document visibility for files in Drive, storage space, file sharing activity, and basic security metrics.

Security-Lets you assess your domain's overall exposure to data breach and lets you see if your team is using 2-Step Verification, who's installing third-party apps on their mobile devices, if documents are being shared outside your domain, and more.

Apps Usage Activity- Gives you more information about your organization's Gmail and Drive usage, like types of email activity, the number of docs created and shared, and how much Drive storage each team member is using.

Account Activity-Offers a master report of the highlights of security and apps usage activity information, which you can use with the audit logs.

Audit Logs-Give you information about specific events, like administrator activity, mobile activity, and more.

Related topics
Receive administrator email alerts

# data[].attributes.attachment_link.description
As an administrator, you can examine potential security risks, measure user collaboration, track who signs in and when, analyze administrator activity, and much more. You can view domain-level data alongside granular, user-level details through graphs and tables. Click a report below to get started.

# data[].attributes.body
Retrieving relevant results from Vault

# data[].attributes.attachment_link.readable_text
A matter in Vault is a virtual container for all of the data related to your inquiry. You can't search Vault without one.

3. Search for Gmail and classic Hangouts messages

Searching for messages in a large domain with many users can be tricky. Sometimes you'll find too many messages, and other times you won't find enough. However, with the right search terms, Vault can find just the messages you're looking for.

Count your search results

A quick way to assess the effectiveness of your search is to use the Count results function, available from the Search drop-down arrow. Vault counts the number of messages that match your search criteria. You can then widen or narrow your search based on the requirements of your matter.

You found too many messages

You didn't find enough messages

Here are some additional queries you can use to find just the messages needed for your matter.

Exclude messages that have been quarantined.

This query excludes messages in admin quarantine:
-label:^admin_quarantine

While you're reviewing search results, the top of the screen shows the terms you just entered.

Click the search bar to bring up the quick-search form and modify your terms.

4. Search Drive for files

When you search for files in Drive, you have to search either by account names or by an organizational unit (with fewer than 5,000 users). Vault searches file names and the contents of supported file types.

File types indexed by Vault

Note: Google Apps for Government customers cannot search the contents of files. However, they can search file names and other file properties.

You can preview files from Google Apps and most types of user-uploaded files directly in Vault.

5. Save your search

Once you've finalized your search parameters, you can save the query and quickly perform this search later. Saved searches are dynamic; that is, your future searches will include messages and files created since the last time you searched.

6. Export and analyze

After you've found the messages or files needed for your matter:

# data[].attributes.attachment_link.title
Get started with Vault search and export

# data[].attributes.attachment_link.description
A matter in Vault is a virtual container for all of the data related to your inquiry. You can't search Vault without one. Searching for messages in a large domain with many users can be tricky. Sometimes you'll find too many messages, and other times you won't find enough.

# data[].attributes.body
Placing hold on certain email classifications for legal purposes.

# data[].attributes.attachment_link.readable_text
If your G Suite administrator deletes a user's account in the Admin console, the user's data is no longer available in Vault and cannot be restored. If you want to hold or retain a user's data, the user must have both G Suite and Vault licenses. Learn more about Preserving data for users.

Gmail uses labels to organize messages in user inboxes. There are two types of labels:

user-visible labels-these labels appear in Gmail's user interface. A few common labels are present in all Gmail accounts, and users can create new labels to help organize their messages.

system-generated labels-these labels are used by Gmail's backend systems to classify messages. They're invisible to end users.

System-generated labels control how messages are presented to Gmail users. For example, Gmail may apply the finance label to messages that come from a user's bank and the travel label to messages that include hotel reservations.

When a user creates a label that matches a system-generated label, Gmail can disambiguate these labels and display messages appropriately. However, Vault can't distinguish system-generated labels from user-created labels that have the same name. Creating a hold that's based on a system-generated label could cause the hold to include more messages than you intend to cover.

For example, let's say an organization is required to retain all data related to corporate finance for 7 years:

Employees are instructed to create a label named finance and apply it to messages that include corporate financial information.

Some employees have their personal bank statements sent to their corporate accounts; Gmail applies the system-generated label named finance to these messages.

In this scenario, a hold based on label:finance will include the messages with employees' personal bank statements.

We recommend you use caution when basing holds on the following labels:

# data[].attributes.attachment_link.description
If your G Suite administrator deletes a user's account in the Admin console, the user's data is no longer available in Vault and cannot be restored. If you want to hold or retain a user's data, the user must have both G Suite and Vault licenses. Learn more about Preserving data for users.

# data[].attributes.body
Archiving Google data

# data[].attributes.attachment_link.readable_text
Use retention rules to control how long data is preserved. You can:

Keep data for as long as you need it. If your organization is required to preserve data for a period of time, you can configure Vault to retain it even if users delete messages and files, and then empty their trash.

Remove data when you no longer need it. If your organization is required to delete sensitive data after a period of time, you can configure Vault to remove it from user accounts and expunge it from all Google systems.

WARNING: An improperly configured retention rule can cause the immediate and irreversible purging of data from user accounts. Use caution when creating or changing retention rules. We recommend that you test new rules on a small group of users before applying them to your entire organization.

When retention coverage ends, Vault immediately begins to remove affected data. The time it takes to purge expired data varies depending on the type of data. Learn more about how long it takes to remove data after retention expires.

Custom retention rule- Controls how long specific types of data are retained. You can create as many custom rules as your organization needs:

Gmail and Groups-you can base custom rules on organizational units, date ranges, or specific search terms.

Drive-you can base custom rules on organizational units and define expiration based on last modified dates (to address staleness) or created dates (to address compliance requirements).

Google Chat and classic Hangouts-you can set custom retention rules for organizational units or for all rooms in the domain. You can define expiration based on when messages were sent or last modified.

Default retention rule- Sets a global rule for your entire organization. The default rule applies to data only when a custom rule or a hold doesn't apply.

Important information about retention

What's the difference between a hold and a retention rule?

Both preserve data in Vault, however, there are important differences:

Holds are typically created in response to​ an investigation or legal issue.

Retention rules are used to proactively control how long data is preserved.

Holds preserve data indefinitely.

Retention rules preserve data for a specified period.

A hold takes precedence over a retention rule. When a hold is deleted, data is then subject to applicable retention rules

After retention coverage expires, data is removed from all Google systems (unless it is being preserved by a hold)

Only those who have access to a matter can see who and what is on hold.

Only those who have retention rule privileges can manage retention rules.

Removing data from Vault removes the same data from user accounts

Vault is fully integrated with the products it supports. As a result, there's no separate archive. If you create a retention rule that applies to all messages or files, it could potentially delete data that your users expect to keep. For example, if you set a default retention rule to retain all messages for 365 days, and you have no custom rules or holds, Vault deletes every message in your domain that is older than 1 year.

The retention coverage period isn't affected by the date you create a retention rule

The retention coverage period begins:

Gmail and Groups-on the day the message is sent (Gmail) or posted (Groups).

Drive-either on the day the file was created or the day it was last modified, depending on how you configured the retention rule.

Google Chat-on the day the message was sent or was last edited by a user. When a user deletes a message, it has no effect on retention coverage.

Retention coverage periods can be extended by custom retention rules and holds

When the default retention period expires, Vault expunges a message or file only if:

It is not being retained by any custom retention rules. Data is always kept as required by the custom rule with the longest retention period. Custom retention rules always take precedence over the default retention rule, even if the custom retention rule is shorter than the default retention rule.

It is not subject to a hold. When the hold is removed, retention rules take effect as expected.

Data can remain in Vault after all retention rules expire

The background process that removes data from Google systems keeps data available in Vault for approximately 30 days before it is fully expunged:

Messages in a user's Gmail or posted in Groups when all retention rules expire are immediately removed from the user's view. However, they remain available to Vault administrators for approximately 30 additional days, during which you can search for, export, or place holds on them. After 30 days, you can no longer retrieve these messages.

Messages deleted by users or Group Managers less than 30 days before retention coverage expires are kept as long as necessary to meet the maximum of 30 days. For example, if a user deletes messages and empties them from trash 20 days before the retention coverage expires, you can search for them in Vault for another 10 days. After that time you can no longer retrieve them.

Gmail messages that were deleted more than 30 days before the retention coverage expires are immediately expunged at the end of the retention period, and you can't retrieve them.

Files in Drive are expunged up to 15 days after retention coverage expires, and you can't retrieve them.

Google Chat and classic Hangouts messages are kept for 30 additional days after a user or a retention rule removes them from a conversation or a room. The expunge process begins on Day 30 and may take several additional days to complete depending on the number of messages being expunged.

See removal and expunging scenarios for additional examples of how this works.

Some files stored in Drive are excluded from coverage by Drive retention rules

Some Google Apps store their data in Drive. Because these apps can be adversely affected by unexpected data deletion, they may be excluded from Drive retention rules. Vault supports the following apps:

Covered by Drive rules

Vault only retains jams that have been saved to users' Drives. Unsaved jams are discarded when the Jamboard session ends and are unavailable to Vault.

Google Meet

Excluded by default

You can enable retention for Google Meet.

Lapses in retention coverage can cause the immediate expunging of of data

Use caution when modifying existing retention rules. Services can immediately expunge unprotected data that users deleted over 30 days ago.

# data[].attributes.attachment_link.description
Use retention rules to control how long data is preserved. You can: Keep data for as long as you need it. If your organization is required to preserve data for a period of time, you can configure Vault to retain it even if users delete messages and files, and then empty their trash.

# data[].attributes.body
Using links to share with people outside domain.

# data[].attributes.attachment_link.readable_text
You can share the files and folders that you store in Google Drive with anyone.

When you share from Google Drive, you can control whether people can edit, comment on or only view the file. When you share content from Google Drive, the Google Drive programme policies apply.

Step 1: Find the file that you want to share

Share a single file

1. On a computer, go to Google Drive, Docs, Sheets or Slides.

2. Click the file that you want to share.

3. Click Share or Share .

Step 2: Choose whom to share with & how they can use your file

Share with specific people

1. Under 'People', enter the email address that you want to share with.
Note: If you share with an email address that isn't a Google Account, they'll only be able to view the file.

2. To choose what someone can do with your file, click the Down arrow .

3. If you don't want to send an email to people, click Advanced and untick the Notify people box. If you notify people, each email address you enter will be included in the email.

4. Click Send.

Share a link to the file

You can send other people a link to your file so anyone on the Internet with the link can use it. When you share a link to a file, your name will be visible as the owner of the file.

1. At the top-right, click Get shareable link.

2. Next to 'Anyone with the link', click the Down arrow .

3. Copy and paste the link in an email or any place that you want to share it.

If you want anyone on the Internet to search for, find and open your file, you can publicly share a file. When you publicly share a file, your name will be visible as the owner of the file.

1. Click Get shareable link.

2. Next to 'Anyone with the link', click the Down arrow .

3. Click More On - Public on the web.

4. Click Save.

5. Click Done.

People who aren't signed in to a Google Account show up as anonymous animals in your file. Learn more about anonymous animals.

Share & collaborate on a file with more than 100 people

Up to 100 people with view, edit or comment permissions can work on a Google Docs, Sheets or Slides file at the same time. When more than 100 people are accessing a file, only the owner and some users with editing permissions can edit the file.

To share and collaborate on a file with more than 100 people:

Publish the file

Create a Google Site

Collect feedback with Google Forms

If you need to gather a lot of information, create a Google Form. Responses will be recorded in a Google Sheet. Give edit access only to people who need to work with the responses. To let more than 100 people view the responses, publish the spreadsheet to the web and create a link to share with viewers. Learn how to publish a file.

Fix problems with documents shared with many people

If your document is shared with many people and it's crashing or not updating quickly, try these troubleshooting tips:

Instead of allowing people to comment on a document or spreadsheet, create a Google Form to collect feedback. Learn how to create a Google Form.

If you're making a copy of a document, don't include resolved comments and suggestions. Learn how to make a copy.

Delete older information or move data into a new document.

Ask viewers to close the document when they aren't using it.

Include only the most important information in a published document. Shorter documents load faster.

Reduce the amount of people with edit access to a document.

If collecting information from multiple documents, create a new, view-only document to share with a large number of people.

Limit how a file is shared

When you share a file with someone, you can choose what they can do with it.

View: People can view, but can't change or share the file with others.

Comment: People can make comments and suggestions, but can't change or share the file with others.

Edit: People can make changes, accept or reject suggestions and share the file with others.

Change with whom your link is shared

When you share a link to a file, you control how widely the file is shared. These options depend on whether you have a work, school or Gmail Google Account.

On - Public on the web: Anyone can search on Google and get access to your file, without signing in to their Google Account.

On - Anyone with the link: Anyone who has the link can use your file, without signing in to their Google Account.

Off - Specific people: Only people with whom you share the file will be able to use it.

Related articles

# data[].attributes.attachment_link.description
You can share the files and folders that you store in Google Drive with anyone. When you share from Google Drive, you can control whether people can edit, comment on or only view the file. When you share content from Google Drive, the Google Drive programme policies apply.

# data[].attributes.body
Settings for file sharing

# data[].attributes.attachment_link.readable_text
This feature is available with G Suite Enterprise, Enterprise for Education, Drive Enterprise, Business, Education, and Nonprofits edition. Compare editions

As an administrator, you can restrict access to files in a shared drive. You can also set the default access for new shared drives. You can apply these restrictions in a specific organizational unit or to your entire organization.

You can also prevent shared drive members with Manager access from modifying settings. In the shared drive, you can restrict:

Non-members from accessing files

People outside your organization from accessing files

Commenters and viewers from downloading, copying, and printing files

Moving and sharing files

When a file is moved into a shared drive, it keeps its file-sharing permissions. So if an owner sets their file to prevent downloading, copying, and printing, it stays like that after it's moved to a shared drive. Moving files does not affect sharing permissions or user roles, such as Content manager or Viewer.

Users can't share files with anyone outside the shared drive's restrictions. For example, if a shared drive restricts users outside the organization from accessing the shared drive's content, external users are removed from files in that shared drive in the future.

If you change a shared drive's restriction settings, this does not automatically remove existing users or change a file's sharing permissions. For example, assume a user outside the organization is added to a file. Then later on, a restriction is applied to the file's shared drive. In that case, the external user is not removed from the file. This means a user might regain access if restrictions are relaxed in the future.

Set the default access for all new shared drives

Admins can define the following options to restrict access to all new shared drives. See the G Suite Updates blog for more information.

Use the default sharing restrictions to restrict access to the content in all new shared drives. These settings must be actively enabled.

Define the default sharing restrictions

1. From the Admin console Home page, go to Apps
G Suite
Drive and Docs.

2. Select Sharing settings.

3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.
You can select an organizational unit or group for this feature only if you have G Suite Enterprise, Business, Education, Nonprofits, or Drive Enterprise edition. (Compare G Suite editions.)

4. Next to Shared drive creation, select the default restrictions for all new shared drives.

Prevent users in your organization from creating new shared drives

Prevent full-access members from modifying shared drive settings

Prevent people outside your organization from accessing files in the shared drive

Prevent non-members of the shared drive from accessing files in the shared drive

Prevent commenters and viewers from downloading, copying and printing files in the shared drive

Note: If Prevent full-access members from modifying the shared drive's settings is not checked, full access members can override any of these default restrictions for individual shared drives.

Key things to remember

If a document is moved in to a shared drive with default sharing restrictions:

These default settings override any document-level sharing settings, which might result in some users losing access to documents. If members will lose access, a warning is displayed before the file is moved.

The document's protections still apply if the shared drive has less restrictive protections.

If a document is moved out of the shared drive to My Drive within the same organization:

The document's original sharing settings are used instead. This can result in users gaining or losing access.

Document-level restrictions always stay in place unless specifically changed or removed from the document. Shared drive restrictions only apply to documents when they are in the shared drive.

Changes to these default restrictions do not affect existing shared drives:

If these default restrictions are changed, users are not removed from the shared drive or individual file permissions.

If the shared drive restrictions are more restrictive than the file permissions, however, some users might lose access to the file.

If the shared drive default restrictions are removed, some users might regain access.

Restrict access for an existing shared drive

1. From the Admin console Home page, go to Apps
G Suite
Drive and Docs.

2. Select Manage shared drives.

3. Hover over a shared drive, and click the Settings button.

4. Select Prevent full-access members from modifying shared drive settings to keep people from overriding the default settings for the shared drive.

5. If full-access members can modify shared drive settings, click Edit to modify any of the following options:

Sharing outside your organization-Allow or prevent external people from accessing files in the shared drive.

Sharing with non-members-Allow or prevent shared drive members from giving non-members access to files in the shared drive.

Download, copy, and print-Allow or prevent commenters and viewers from downloading, copying, and printing files in the shared drive.

Control sharing for your organization

Use the following settings to restrict sharing for your organization. These settings apply to all Drive files. For example, if your organization restricts sharing outside of the organization, shared drive content is also restricted.

Restrict users from moving content outside of your organization

This feature is available with G Suite Enterprise, Enterprise for Education, Drive Enterprise, Business, Education, and Nonprofits edition. Compare editions
You can control who can move files and folders outside of your organization in these situations:

Moving content from a shared drive in your organization to a shared drive owned by another organization

Moving content from a shared drive in your organization to someone's My Drive in another organization

Moving content from someone's My Drive in your organization to a shared drive owned by another organization

1. From the Admin console Home page, go to Apps
G Suite
Drive and Docs.

2. Click Sharing settings.

3. Select the desired organizational unit or group.

Important: If you select a child organizational unit or group, this setting only controls moving content from someone's My Drive to a shared drive in a different organization (for example, another business or school). Moving content from a shared drive to another organization is always controlled by the top-level organization setting. This is because shared drives are owned by the top-level organization.

4. In Distributing content outside of your organization, select an option from the table below, then click Save.

Option

Description

Anyone
Anyone with Manager access to a shared drive can move files from that shared drive to a Drive location in a different organization. Learn about user access permissions.

In addition, anyone in the selected organizational unit or group can copy content from their My Drive to a shared drive owned by a different organization (for example, another business, group, or school). Learn about migrating content to a shared drive.

Only users in your organization
Only people in your organization with Manager access to a shared drive can move files from that shared drive to a Drive location in a different organization.

In addition, users in the selected organizational unit or group can copy content from their My Drive to a shared drive owned by a different organization.

No one
Files on a shared drive cannot be moved to a Drive location in a different organization.

In addition, no one in the selected organizational unit or group can copy content from My Drive to a shared drive owned by a different organization.

It can take up to 24 hours to see changes. During this time, both old and new settings might be intermittently enforced.

Set file-sharing permissions

Set permissions for your organization

Shared drives use the top-level organization settings. For example, if external sharing is disabled for a user's organizational unit but allowed at the top-level organization, the user can share documents in shared drives with people outside the company or school.

Admins can define additional restrictions for each organizational unit using the default settings for the creation of new shared drives. A shared drive's restrictions can't be broader than the top-level organization's restrictions. But you can use the default settings to further restrict access for shared drives created in specific organizational units.

Share all files and folders in a shared drive

Add members to a shared drive to grant access to files in the shared drive.

See Store and share files with shared drives for more information.

Share a specific file

Shared drive members can also share specific files with people who aren't members of the shared drive.

See Share files outside of shared drives for more information.

How can we improve it?

# data[].attributes.attachment_link.title
Control access to files in shared drives

# data[].attributes.attachment_link.description
This feature is available with G Suite Enterprise, Enterprise for Education, Drive Enterprise, Business, Education, and Nonprofits edition. Compare editions As an administrator, you can restrict access to files in a shared drive. You can also set the default access for new shared drives.

# data[].attributes.body
Useing Chrome extension to access G Docs files offline

# data[].attributes.attachment_link.readable_text
If you aren't connected to the internet, you can still create, view, and edit files on:

Use Google Docs, Sheets, and Slides offline

You can save the most recently opened documents on your computer.

Before you turn on offline access

How to turn on offline access

1. Open Google Drive.

2. At the top right, click Settings Settings.

3. Turn on Offline setting.

4. To work offline, in your Chrome browser, open Google Docs, Sheets, or Slides.

Tip:

If you want to use offline access for another Google Account, make sure you're signed in to the right Chrome profile. Learn how to switch Chrome profiles.

You can also turn on offline access from Docs, Sheets, or Slides settings. If you turn on offline access for Docs, Sheets, Slides, or Drive, then the rest will also be available offline.

Alternatively, to turn on offline access, open any Google document, spreadsheet, or presentation, and click See document status Turn on Turn on.

Turn off offline access

Make specific files available offline

If you have enough storage, some of your most recent files will be automatically saved offline. To manually select files to save offline:

1. Follow the steps above to turn on offline access in Google Drive.

2. Open the Google Docs, Sheets, or Slides home screen.

3. On the file you want to use offline, click More .

4. Click Available offline. A check mark will appear in the bottom left corner to show that the file is available offline.

Tip: You can also make a file available offline by opening a Google document, spreadsheet, or presentation, and clicking File Make available offline.

Check if a document is ready for offline use

1. On your computer, open a file in Docs, Sheets, or Slides.

2. Click See document status .

Tip: If your document is not ready to edit offline, an explanation will appear.

Fix problems with using files offline

If you're having trouble working with Google Docs, Sheets, or Slides offline, try these steps.

Check your browser

Error message: "Checking offline sync status. Please wait."

Error message: "Offline sync is disabled by your administrator."

Error message: "Another user has already enabled offline access on this computer."

Offline setup failed

Offline is already on

Learn how to disable offline.

Error message: Could not sync document or trouble syncing

1. On your computer, open the Google Doc, Sheet, or Slide.

2. At the top, click File Make available offline. The check mark should disappear.

3. At the top, click File Make available offline.

1. Make your file smaller.
Tip: Copy smaller sections of the original document into new documents.

2. At the top of your new smaller document, click File Make available offline.

Help us improve offline access

Take this survey to help us understand your offline experience with Google Docs, Sheets, and Slides.

# data[].attributes.attachment_link.title
Work on Google Docs, Sheets, & Slides offline

# data[].attributes.attachment_link.description
If you aren't connected to the internet, you can still create, view, and edit files on: You can save the most recently opened documents on your computer. Open Google Drive. At the top right, click Settings Settings. Turn on Offline setting. To work offline, in your Chrome browser, open Google Docs, Sheets, or Slides.

# data[].attributes.body
For when a user accidentally deletes something important!

# data[].attributes.attachment_link.readable_text
This article is for administrators. If you want to restore deleted messages for your own consumer Gmail account, see Delete or recover deleted Gmail messages. If you want to restore files for your own consumer Drive account, see Find or recover a file.
If a G Suite user permanently deletes their Gmail or Drive data and later wants to get it back, you may be able to retrieve it for them. As an administrator, you can restore the user's data from the Admin console within a date range you specify.

You can restore only permanently deleted items. An item is permanently deleted when the user's Trash is emptied. Note that if your organization uses Google Vault, permanently deleted items might still be retained in your Vault archive, depending on your retention policy.

Sharing: After you restore an item in Drive, the user needs to re-share the item for others to have access.

Limited time to restore files and messages

You have a limited time from when the data was permanently deleted to restore files and messages. After that, the data cannot be recovered and is gone forever.

What you can do

Restore data that was permanently deleted within the past 25 days.

Select a date range to restore data that was deleted within that range.

Check a user's Gmail inbox or Drive folder to confirm the data is restored.

Restore data to a shared drive, or restore a deleted shared drive. Learn more

What you can't do

Restore data that was permanently deleted more than 25 days ago.

From the spam folder, restore deleted messages.

Restore deleted email drafts.

In Drive, restore deleted Google My Maps files or Fusion Tables.

From the user's Trash, restore data.

If a user met their Drive storage quota, restore their Drive data.

In Drive, have more than 1 ongoing restore. If you start a restore while another one is in progress, one of the restores will be cancelled.

Restore Gmail and Drive data

1. From the Admin console Home page, go to Users.

2. In the Users list, find the user. If you need help, see Find a user account.

3. Hover over the user and click More Restore data. You can also find this option at the top-left of theuser's account page, under More .

4. Select the date range for the data you want to restore, from within the last 25 days.

5. Select the type of data you want to restore: Drive or Gmail.

6. Click Restore.

Restore deleted shared drives or data

See Restore deleted files or shared drives.

Confirm data was restored

To confirm that you restored the data:

1. Check the user's Gmail inbox for restored email messages.

2. Check the user's Drive folder for restored Drive data.
The Drive data is restored to the user's Drive folder in the same location as before it was deleted.

# data[].attributes.attachment_link.title
Restore a G Suite user's Gmail and Drive data

# data[].attributes.attachment_link.description
This article is for administrators. If you want to restore deleted messages for your own consumer Gmail account, see Delete or recover deleted Gmail messages. If you want to restore files for your own consumer Drive account, see Find or recover a file.

# data[].attributes.body
Setting up policies for specific computers

# data[].attributes.attachment_link.readable_text
Get started: Drive setup guide for admins

This article is for administrators. To access your own files offline, see Work on Docs, Sheets, & Slides offline.
As a G Suite administrator, you can control whether users in your organization can access their Google Docs, Sheets, and Slides when their computers aren't connected to the internet. By default, offline access is enabled for organizations, and users can turn it on or off for their own accounts as needed.

If you are in the Drive web offline Beta these controls affect all Drive files, not just the Docs editors. Click the following link to apply to the Drive web offline Beta.

Note: This option does not apply to Drive File Stream. See Find & keep files and folders offline when using Drive File Stream.

Option 1: Use policies to control offline access from computers

As a G Suite administrator, you can use policies to control offline access to Docs, Sheets, and Slides on computers running Windows ®, Mac ®, and Linux ® operating systems. This option requires you to push managed policies to each computer. If you select this option before you set up policies, users lose offline access if they previously had it.

After you select this option, users can enable offline access only if a managed policy is installed on their computer. See the instructions below for each type of computer.

Note: This option is not available for ChromeOS devices or mobile devices (phones and tablets).

Step 1: Install the policy on each managed computer

To allow Drive files to be stored and accessed offline on managed computers:

Download the configuration files to the computers.

Distribute the files to computers running Windows®, Mac®, and Linux® operating systems.

See the instructions below for each type of computer.

Note: This process is not required if Allow all users to enable offline access is selected.

Windows devices (via the Microsoft Group Policy)

1. Download and unzip these Windows Group Policy template files:

2. Open the ADMX file using your Group Policy Editor to enable offline access:

Select Allowed domains for Google Docs Offline support-Allows users within the specified domains to enable docs offline, but offline editing is disabled by default.

(Optional) Select Auto enabled domains for Google Docs Offline support-Auto-enables offline doc access for all users with this policy. Leave this off if users must manually enable offline access.

3. Update the option values with the desired domains. Separate multiple domains with a comma (for example, domain1.com, domain2.com, and so on).

Note: If you see an error "Encountered an error while parsing", this means that Windows cannot parse the filename and you need to rename it. For example, try removing the underscore from the filename by changing GoogleDocs_WinADMX to GoogleDocsOffline.

Related information

Mac OS devices

1. Download and edit the policy.

1. Download the macOS plist file.

2. Open the file in any text editor.

3. Edit the file to enable offline access.

(Required) To enable offline access for the devices, replace the first instance of "YOUR_DOMAIN_HERE.com" to your domain.

(Optional) To auto-enable offline doc access for all users with this policy, replace the second instance of "YOUR_DOMAIN_HERE.com" to your domain. Leave this unchanged if users must manually enable offline access.

4. Save the file, if not auto-saved by your editor.

2. Create a /Computers/local_computer node, if necessary. See Configuring Apps and Extensions by Policy. for instructions.

3. Run the following command to import the updated plist file, or follow the instructions for your enterprise Mac management system:

$ dscl -u admin_username /Local/Default -mcximport /Computers/local_computer GoogleDocs_MacConfig.plist

4. Run the following command to propagate these changes immediately:

$ sudo mcxrefresh -n username

Tip: For more information, see Configuring Apps and Extensions by Policy.

Linux devices

1. Download and edit the policy.

1. Download the Linux configuration file.

2. Open the config file in any text editor.

3. Edit the file to enable offline access.

(Required) To enable offline access for the devices, replace the first instance of "YOUR_DOMAIN_HERE.com" to your domain.

(Optional) To auto-enable offline doc access for all users with this policy, replace the second instance of "YOUR_DOMAIN_HERE.com" to your domain. Leave this unchanged if users must manually enable offline access.

4. Save the file, if not auto-saved by your editor.

2. Place the config file in /etc/opt/chrome/policies/managed/.

Step 2: Enable offline access for managed computer

Enable offline access after the policy is installed and configured on each managed computer. Offline access is disabled on any computer that does not have the policy.

1. From the Admin console Home page, go to Apps
G Suite
Drive and Docs.

2. Click Features and Applications.

3. (Managed computers only) Install the managed device policy on each computer.

4. Next to Offline, select Control offline access using device policies.
Recent files will be synced and saved on managed computers that have the policy set up.

5. Tell your users how to sync files for offline use.

Option 2: Allow users to turn on offline access (recommended)

The easiest method to allow offline access is to enable offline access for all users.

1. From the Admin console Home page, go to Apps
G Suite
Drive and Docs.

2. Click Features and Applications.

3. Next to Offline, select Allow users to enable offline access (recommended).
Recent files will be synced and saved on the user's computer and computers they trust.

4. Tell your users to how to sync files for offline use.

How can we improve it?

# data[].attributes.attachment_link.description
This article is for administrators. To access your own files offline, see Work on Docs, Sheets, & Slides offline. As a G Suite administrator, you can control whether users in your organization can access their Google Docs, Sheets, and Slides when their computers aren't connected to the internet.

# data[].attributes.body
Sync choices

# data[].attributes.attachment_link.readable_text
There are 2 ways to access Drive files and keep them in sync on all your devices.

Drive File Stream is best for most organizations. This application lets you stream My Drive and shared drive files directly from the cloud. You can also make Drive files available for offline access.

Backup and Sync is our consumer sync client that organizations can use, too. With Backup and Sync, all your Drive content is stored locally.

Choose and deploy your sync solution

# data[].attributes.attachment_link.title
Stream (or sync) Drive files to users' computers

# data[].attributes.attachment_link.description
There are 2 ways to access Drive files and keep them in sync on all your devices. Drive File Stream is best for most organizations. This application lets you stream My Drive and shared drive files directly from the cloud. You can also make Drive files available for offline access.

# data[].attributes.attachment_link.readable_text
Manage Drive for your business or school
With Google Drive, you and your organization can easily back up and share all your documents-from anywhere and using any device, including your laptop, mobile phone, or tablet.

# data[].attributes.attachment_link.description
Manage Drive for your business or school With Google Drive, you and your organization can easily back up and share all your documents-from anywhere and using any device, including your laptop, mobile phone, or tablet.

# data[].attributes.attachment_link.description
Manage Calendar for your G Suite team With Google Calendar, you and your team can easily schedule events and resources, join meetings, share group calendars, and more.

# data[].attributes.body
eg removing multimedia attachments from incoming emails

# data[].attributes.attachment_link.readable_text
As a G Suite administrator, you can set up compliance rules for message attachments, such as documents, video and sound files, images, and compressed files and archives. Rules specify conditions based on file type, file name, and message size. They also specify how to handle messages that meet the conditions.

Compliance actions

The following actions can be taken on a message that contains an attachment:

Reject the message

Quarantine the message and attachment for review

Modify the delivery of the message and the attachment

You can also set up a rule to detect encrypted attachments. This distinction can be useful if you need to send unencrypted copies of message attachments to an archive server for regulatory purposes.

How attachments are scanned

Gmail supports binary file-type detection for pre-defined and custom file types, which helps prevent people from circumventing attachment rules by renaming extensions. Files are scanned based file type, for example doc. Gmail scans the filenames of files inside archives, including encrypted archives and nested non-encrypted archives. However, the inner archives of an encrypted archive cannot be scanned.

Gmail cannot open or inspect attachments that are password-protected files or archives. This includes ZIP files that are password protected. G Suite can inspect ZIP file attachments if they are not password protected.

How settings are applied

Unless you change the options, the rules apply to all users in an organizational unit. You can disable in a child organization any rules they inherit from a parent organization.. You can also add multiple rules to each organization.

When you set up multiple rules, what happens to a message depends on the conditions you set and which rule has precedence. For details, see How multiple settings affect message behavior.

Enhance message security with hosted S/MIME

You can improve message security with S/MIME. For example, set up a rule that requires S/MIME encryption for outgoing messages. Set this rule up with the Encryption option, described in step 4 above.

For an overview, see Enhance message security with hosted S/MIME.

This feature is only available with G Suite Enterprise and G Suite Enterprise for Education.

Set up an attachment compliance rule

Initial step: Go to Gmail advanced settings in the Google Admin console

1. From the Admin console Home page, go to Apps
G Suite Gmail
Advanced settings.

Tip: To see Advanced settings, scroll to the bottom of the Gmail page.

2. Scroll to the Attachment compliance setting in the Compliance section, hover over the setting, and click Configure. If the setting is already configured, hover over the setting and click Edit or Add another.

3. For each new setting, enter a unique description.

Go to the next step to configure the setting.

Step 1: Enter email messages to affect

You can set up the rule for inbound, outbound, or internal messages. Internal messages are sent and received within the domains and subdomains associated with your organization.

1. Check the boxes next to the messages you want the rule to apply to.

2. Go to the next step to continue.

Step 2: Add one or more expressions to specify what's searched

You can add up to 10 expressions. Each expression must individually added and saved.

1. From the list, specify whether any or all conditions must match to trigger what happens to the message. For example, if you select If ANY of the following match the message, any matching condition can trigger the consequence to the message.

2. Click Add.

3. From the list, choose what you want to specify for the expression:

File type-Select the attachment types to include. You can also enter a custom file type to look for matches based on that file type.

Note: For your protection, file types that are considered to be executables are automatically rejected. To see a complete list of extensions, see File types and extensions supported in expressions.

File name -Enter an attachment name that you want to include. Any part of an attachment file name is returned as a match, whether it's upper or lowercase.

Message size-Enter, in megabytes, the size limit for messages. The size includes the message body and all attachments. (This is the raw size of the entire message, which may be up to 33% larger than the native size of the message and attachments due to normal encoding overhead.)

4. Click Save. You might need to scroll to see it.

5. Go to the next step to continue.

Step 3: Specify what happens if expressions match

1. Specify whether to modify, reject, or quarantine a message when conditions are met. (Details below.)

2. Configure the options for the actions you choose.

3. (Optional) Click Show options to configure additional options to limit the application of this setting. See Configure additional parameters, below, for details.

4. Go to Save the configuration.

Reject message

Rejects the message before reaching the recipient. You can enter a message to notify the sender about why the message was rejected. For matching messages, no other routing or compliance rules are applied.

Note: Gmail automatically adds an SMTP rejection code, such as 550 5.7.1. This is a requirement of the SMTP standard and can't be deleted.

Quarantine message

Sends the message to an admin quarantine where you can review the message before you send or reject it. This option is only available for the Users account type. For details, see Account types to affect.

To notify your users when their sent messages are quarantined, check the Notify sender when mail is quarantined (onward delivery only) box.

Modify message

Add headers, remove attachments, change the envelope recipient, add more recipients, and change the route. For details, see Options for modifying messages.

Note: We recommend that you use the routing settings for the specific use cases they are intended to support. For example, you can set up the same routing options by using an Attachment compliance setting or a Routing setting. Use an Attachment compliance setting for attachment-related use cases, and a Routing setting for general routing-related use cases, such as dual delivery. Learn about mail routing, including use cases and examples.

Controls
Add X-Gm-Original-To header

Add a header tag if the recipient is changed. When you do, the downstream server will know the original envelope recipient. An example of the header tag format is X-Gm-Original-To: user@solarmora.com.

Add X-Gm-Spam and X-GM-Phishy headers

Add headers to indicate the spam and phishing status of the message. For example, an administrator at a downstream server can use this information to set up rules that handle spam and phishing differently from clean mail. For details, see Add spam headers setting to all default routing rules.

Add custom headers
You can add custom headers to messages that are affected by this setting. For example, you can add a header that matches the description that you entered for the setting. This can help you analyze why a message was routed in a certain way or why a rule was triggered.
Prepend custom subject
You can enter a string to add to the beginning of the subject of applicable messages. For example, you could enter Confidential in this field for sensitive emails. If a message triggers the rule and its subject is Monthly report, recipients will see the following subject: [Confidential] Monthly report.
Change route and Also reroute spam

Change route-You can change the destination of the message from the default Gmail server to a different mail server, such as Microsoft ® Exchange.

Note: Before you can change the route, you need to add the new route in the Admin console. For details, see Add mail routes for advanced Gmail delivery.

Also reroute spam-This option is available if you select Change route. Blatant spam is dropped instantly at delivery time. However, check the Also reroute spam box to route any additional email you mark as spam.

Leaving the box unchecked has normal messages rerouted, but not spam. G Suite email settings (for example, a list of preauthorized senders) overrides spam settings.

Change envelope recipient

The message bypasses the original recipient's mailbox and goes to the new recipient.

You can change the envelope recipient in one of the following ways:

Replace the recipient's entire email address-After Replace recipient, enter the full email address, such as user@solarmora.com.

Replace the username-To change just the username of the recipient's email address and keep the domain the same, before @existing-domain, enter the username, such as user.

Replace the domain-To change just the domain of the recipient's email address and keep the username the same, after existing-username@, enter the domain, such as solarmora.com.

An MX lookup on the new recipient's domain determines the destination server. Or, if you're using the Change route control, the specified route determines the destination server.

If you'd rather Bcc an additional recipient, use the Add more recipients option, described below.

Bypass spam filter for this message

Deliver incoming messages to recipients even if the spam filter identifies them as spam. This option applies to only incoming messages only. You can't bypass spam filters for outgoing messages.

Note: This option is not available for the Groups account type. For details, see Account types to affect.

Remove attachments from message
You can remove any attachments from messages. You can also append text to notify recipients that attachments were removed.
Add more recipients

1. To set up dual or multiple delivery, check the Add more recipients box click Add .

2. To add individual email addresses, select Basic from the list click Save.

3. (Optional) To add more addresses, click Add .

4. (Optional) To choose advanced options for your secondary delivery, select Advanced from the list.
You can change the envelope recipient, add headers, prepend a custom subject, and remove attachments for secondary deliveries.

When you add recipients, consider that:

Each rule has a limit of 100 additional recipients.

Settings for the primary delivery also apply to the secondary deliveries.

For secondary deliveries, the Do not deliver spam to this recipient and Suppress bounces from this recipient boxes are checked by default.

Adding additional recipients creates a message for each added recipient. Advanced Gmail settings apply to each message.

Encryption (onward delivery only)

By default, Gmail tries to deliver messages using Transport Layer Security (TLS). If secure transport isn't available, the message is delivered over a nonsecure connection.

To require all messages meeting the conditions in the setting to be transmitted through a secure connection, check the Require secure transport (TLS) box. If TLS isn't available on the sending or receiving side, the message won't be sent.

If you have a G Suite Enterprise or Enterprise for Education account, you can also bounce messages or require that messages can only be sent if they are S/MIME encrypted. For details, go to Enhance message security with hosted S/MIME.

This feature is only available with G Suite Enterprise and G Suite Enterprise for Education.

Tip: We recommend that you test new rules to make sure they work correctly for your organization. For more information, see Best practices for faster rules testing.

Configure additional parameters (Optional)

To set up additional options for a routing policy, such as creating address lists or choosing the account types it will affect, at the bottom, click Show options.

Address lists

You can specify address lists as a criteria for whether to bypass or apply a given setting. Address lists can contain email addresses, domains, or both.

There are two methods used to determine if the address list is matched. If multiple lists are specified, the address must match at least one of the lists:

Correspondent (default) G Suite considers the "from" field for received mail and the recipients for sent mail. For senders, the authentication requirement is also checked. (Details below.).

Recipient: G Suite always checks to see if the recipients are present in address lists.

The options for whether to bypass or apply a given setting are:

Bypass this setting for specific addresses / domains-Skips the setting entirely if the address list matches, regardless of any other criteria specified in the setting.

Only apply this setting for specific addresses / domains-The address list match becomes a condition for whether the setting is applied. If there are other criteria in the setting, such as match expressions, account types, or envelope filters, those conditions must also match for the setting to be applied.

To use address lists to control application of this setting:

1. In the Options section, check the Use address lists to bypass or control application of this setting box.

2. Select one of the options:

Bypass this setting for specific addresses / domains

Only apply this setting for specific addresses / domains

3. Click Use existing or create a new one.

4. Select the name of an existing list, or, to create a new one, enter a custom name for a new list in the Create new list field, and then click Create.

5. Move the pointer over the list name, and click Edit.

6. To add email addresses or domains to the list, click Add .

7. Enter a full email address or domain name, such as solarmora.com. Or, to add a list in bulk, enter a comma or space delimited list of addresses after clicking Add .

Note: If you want to bypass this setting for approved senders that don't have authentication, uncheck the Require sender authentication box. Use this option with caution as it can potentially lead to spoofing. Learn more about sender authentication.

8. Click Save.

9. To include additional email addresses or domains in the list, repeat steps 5 to 7.

10. When you're done, go to Account types to affect.

Learn more about address lists, including how to search, or view all entries in the list, and how addresses are matched against the address lists.

Account types to affect (Required)

Depending on the message action you chose and the type of organizational unit you're configuring, some account types might not be available.

Select one or more account types that the setting applies to:

Users (default)-The setting applies to provisioned G Suite users. For sending and outbound mail, the setting is triggered when your users send email. For receiving and inbound mail, the setting is triggered when your users receive email.

Groups-The setting applies to groups set up in your organization. For sending and outbound mail, the setting is triggered when your groups forward email or summaries to members. For receiving and inbound mail, the setting is triggered when your groups receive email.

Unrecognized/Catch-all-The setting is triggered when your organization receives email that doesn't match one of your provisioned G Suite users. This selection only applies to received and inbound email.

Note: The Groups and Unrecognized/Catch-all account types don't apply to these controls:

Add X-Gm-Spam and X-Gm-Phishy headers

Bypass spam filter for this message

Also reroute spam

When you're finished, go to Add and save the setting.

Envelope filter

You can choose to affect only specific envelope senders and recipients. You can specify a single recipient, a number of users using a regular expression, or email groups.

To set up an envelope filter:

1. Check one or both of these options:

Only affect specific envelope senders

Only affect specific envelope recipients

2. From the list, choose an option:

When you're finished, go to Save the configuration.

Save the configuration

Final step: Add and save the setting

1. Click Add setting or Save.
New settings appear on the Gmail Advanced settings page.

2. At the bottom, click Save.

Common and custom file types supported in expressions

The table below defines common and custom file types you can use in an attachment compliance expression. For your protection, file types that are considered executables are automatically rejected. Learn more about blocked file types.

Common file types. By default, all common file types are matched by file format and filename to identify the type of content and the attachment's extension. Examples include image/photo.jpg or document/letter.doc.

Custom file types. By default, custom file types are matched only by filename, for example, photo.jpg or letter.doc. To match custom file types to file format as well, check the Also match files based on file format box.

Documents

.cpr, .cwk, .cws, .dcx, .doc, .docm, .docx, .dot, .dotm, .dotx, .fax, .fp, .fp3, .frm, .gim, .gix, .gna, .gnx, .gra, .mcw, .mdb, .mdn, .met, .mpp, .obd, .odg, .odp, .ods, .odt, .pdf, .potm, .potx, .ppam, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .pre, .prs, .rtf, .shb, .shw, .sldx, .sldm, .wb1, .wb2, .wdb, .wk1, .wk3, .wk4, .wks, .wp, .wpw, .wp4, .wp5, .wp6, .wpd, .wps, .wpt, .wq1, .wq2, .wri, .ws1, .ws2, .ws3, .ws4, .ws5, .ws6, .ws7, .wsd, .xlam, .xlm, .xls, .xlsb, .xlsm, .xlsx, .xlt, .xltm, .xltx

Images

.ai, .art, .att, .bmp, .cal, .cdr, .cdt, .cdx, .cmf, .cmp, .dib, .drw, .emf, .eps, .fh3, .fif, .fpx, .gem, .gif, .html, .icb, .iff, .ima, .img, .jbf, .jff, .jif, .jpeg, .jpg, .jtf, .kdc, .kfx, .lbm, .mac, .mic, .pbm, .pcd, .pcs, .pct, .pcx, .pgm, .pic, .pif, .png, .pnt, .ppm, .ps, .psd, .ras, .raw, .sct, .sdr, .sdt, .sep, .shg, .tga, .tif, .tiff, .vda, .vst, .wil, .wmf, .wpg, .wvl

Audio (music & sound)

.aif, .aiff, .ams, asf, .cda, .dcr, .dsm, .idd, .it, .mdl, .med, .mid, .mp3, .mtm, .mod, .mus, .nsa, .ra, .ram, .rm, .rmi, .rtm, .snd, .stm, .svx, .s3m, .ult, .voc, .wav, .wow

Video & multimedia

.avi, .cfb, .cmv, .dir, .gal, .m3d, .mmm, .mov, .mpe, .mpeg, .mvb, .qt, .qtm, .xtp, .xy3, .xy4, .xyp, .xyw, .mpg, .wmv

Compressed and archive file formats

.7z, .ace, .bz, .bz2, .cab, .gz, .hex, .hqx, .lzh, .pages, .rar, .sea, .sit, .tar, .tgz, .uue, .zip, .zoo

Custom types

asc., .brf, .c, .c++, .cc, .cpp, .css, .csv, .cxx, .eps2, .eps3, .epsf, .epsi, .epub, .es, .fnt, .fon, .h, .h++, .hh, .hpp, .hwp, .hxx, .jpe, .js, .kml, .kmz, .markdown, .md, .mdown, .mhtml, .mkd, .mkdn, .numbers, .otf, .otp, .ott, .php, .pht, .phtml, .pot, .qjs, .qjsp, .sdc, .sdd, .sdw, .shtm, .shtml, .svg, .svgz, .swf, .swfl, .sxc, .sxd, .sxi, .sxw, .tsv, .ttf, .wml, .xhtml, .xlb, .xml, .xps, .xsd, .xsl

Note: Although you can enter unsupported custom file types, they are matched only by filename, for example, document.sac.

How can we improve it?

# data[].attributes.attachment_link.description
As a G Suite administrator, you can set up compliance rules for message attachments, such as documents, video and sound files, images, and compressed files and archives. Rules specify conditions based on file type, file name, and message size. They also specify how to handle messages that meet the conditions.

# data[].attributes.body
eg compliance or information

# data[].attributes.attachment_link.readable_text
You can configure outbound messages with footer text for legal compliance, or for informational and promotional requirements. The footer is added below the last existing text portion of a message, and is limited to 10,000 characters.

The Append footer setting applies to all users in an organizational unit. Users within child organizations inherit the settings you create for the parent organization.

Set up an email footer for your domain or organization

1. From the Admin console Home page, go to Apps
G Suite Gmail
Advanced settings.

Tip: To see Advanced settings, scroll to the bottom of the Gmail page.

2. On the left, select an organization.

3. Scroll to the Append footer setting in the Compliance section, hover over the setting, and click Configure. If the setting is already configured, hover over the setting and click Edit or Add another.

4. Enter the footer text. Optionally, use the formatting tools.

5. (Optional) Select append the footer to internal messages being sent within your organization.

6. Click Add Setting or Save. Any new settings are added to the Advanced settings page.

7. At the bottom, click Save.

8. Test the footer by sending a message to an address outside of your domain. There may be some delay in saving the changes and taking effect on new mail.

Note: Messages sent using a third-party email client, such as Microsoft ® Outlook or Apple ® Mail, have the appropriate footer applied when sending outbound. However, if a message is sent as plain text, a text-only version of the footer is applied to the message. In this case any images in the configured footer aren't applied to the message.

# data[].attributes.attachment_link.title
Configure outbound messages with footer text

# data[].attributes.attachment_link.description
You can configure outbound messages with footer text for legal compliance, or for informational and promotional requirements. The footer is added below the last existing text portion of a message, and is limited to 10,000 characters. The Append footer setting applies to all users in an organizational unit.

# data[].attributes.body
NB work in an individual child's G Drive cannot be viewed by anyone else (inc teachers)

# data[].attributes.attachment_link.readable_text
Back

I'd like to be able to access student's individual drive folders in order to see work - like Google Docs - that they are doing that isn't an 'official assignment'. For instance, I want to help edit and probe their note-taking skills and resources used.

Upvote (21) Subscribe Unsubscribe

Recommended Answer Recommended Answers (0)

What do you mean by "automatic"?

Hi,

This is currently available in Google Classroom, but If this is a feature you'd like to see added to Google Classroom, you can click the "?" in the lower left corner of Google Classroom and send feedback to the developers. All feedback is read and prioritized according to volume received, so your voice will be heard!

Be as specific as possible in your feedback to help the developers understand exactly what circumstances this feature would be useful to you.

Hi Linda,

You can't access the student's own folder in their Drive (unless you log in to their Google account), but you can see all the work they have submitted for the course in it's assignment file in YOUR Classroom folder in Drive. You can access this by clicking the link on the top right of the Classwork page.

You can also open up your own Drive directly and find the Classroom folder, where all assignments live.

Reply

This question is locked and replying has been disabled.

Failed to attach file, click here to try again.

You will lose what you have written so far.

Personal information found

We found the following personal information in your message:

This information will be visible to anyone who visits or subscribes to notifications for this post. Are you sure you want to continue?

This will remove the reply from the Answers section.

Your notifications are currently off and you won't receive subscription updates. To turn them on, go to Notifications preferences on your Profile page.

This reply is no longer available.

Some community members might have badges that indicate their identity or level of participation in a community.

Google Employee - Googler guides and community managers

Community Specialist - Google partners who share their expertise

Platinum Product Expert - Seasoned members who contribute beyond providing help through mentoring, creating content, and more

Gold Product Expert - Trusted members who are knowledgeable and active contributors

Silver Product Expert - New members who are developing their product knowledge

Community content may not be verified or up-to-date.

# data[].attributes.attachment_link.title
Can teachers see students individual Classroom Drive folders? - Classroom Community

# data[].attributes.attachment_link.description
Back I'd like to be able to access student's individual drive folders in order to see work - like Google Docs - that they are doing that isn't an 'official assignment'. For instance, I want to help edit and probe their note-taking skills and resources used.

# data[].attributes.attachment_link.readable_text
This article is for teachers
You can see a list of an individual student's assignments, grades, and missing work all in one place. You can filter the list by status-turned in, returned with grade, or missing. You can also email it to the student and their guardian.

See the list of a student's work and its status

1. Click the class.

2. At the top, click People and then the student's name.
Note: You can only view the work of a student who has joined the class.

3. (Optional) To see details or answers, click the work View Details.

4. (Optional) To filter the student's work, under Filters, click Turned in, Returned with grade, or Missing.

Email the list of a student's work

You can email the list to the student. You can also email it to the student's guardian if email summaries for guardians are turned on. For more details, see Set up guardian email summaries.

1. Click the class and choose an option:

At the top, click People and then the student's name.

At the top, click Classwork and then click an assignment or question and on the left, click the student's name. Then, on the right, click their name again.

2. Click Email .

3. Next to Student, click the Down arrow and select Student, Guardians, or Student and guardians.

4. (Optional) Enter a message.

5. Check the Include student work summary box and click Send.

How can we improve it?

# data[].attributes.attachment_link.title
View all of a student's work in one place

# data[].attributes.attachment_link.description
This article is for teachers You can see a list of an individual student's assignments, grades, and missing work all in one place. You can filter the list by status-turned in, returned with grade, or missing. You can also email it to the student and their guardian.

# data[].attributes.attachment_link.title
Post announcements to your students - Computer - Classroom Help

# data[].attributes.attachment_link.description
This page is for teachers. Students go here. You can post announcements to your class on the Stream page. Announcements are posts with no assignments. Use them to give notices to your students. Annou

# data[].attributes.body
gov.uk

# data[].attributes.attachment_link.readable_text
Tell us whether you accept cookies

We use cookies to collect information about how you use GOV.UK. We use this information to make the website work as well as possible and improve government services.

Guidance to support schools with data protection activity, including compliance with the General Data Protection Regulation (GDPR).

Documents

This file may not be suitable for users of assistive technology.

Request an accessible format.

If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email alternative.formats@education.gov.uk . Please tell us what format you need. It will help us if you say what assistive technology you use.

Details

To meet the General Data Protection Regulation (GDPR), which came into force in May 2018, all organisations handling personal data, including schools, need to have the right governance measures.

This guidance will help schools develop policies and processes for data management, from collecting and handling the data through to the ability to respond quickly and appropriately to data breaches.

We have made changes to the toolkit following feedback received from schools and other interested parties.

We will continue to use feedback to improve and update the toolkit. Please send any comments to data.modernisation@education.gov.uk with the subject heading 'GDPR toolkit feedback'.

Is there anything wrong with this page?

# data[].attributes.attachment_link.description
We use cookies to collect information about how you use GOV.UK. We use this information to make the website work as well as possible and improve government services. Guidance to support schools with data protection activity, including compliance with the General Data Protection Regulation (GDPR).

# data[].attributes.body
Information Commissioners Office - GDPR regulating body

# data[].attributes.attachment_link.description
Practical advice on how data protection affects your business, including keeping employees' and customers' personal information secure.

# data[].attributes.body
G Suite for Education

# data[].attributes.attachment_link.readable_text
This Privacy Notice is meant to help G Suite for Education users and parents understand what data we collect, why we collect it, and what we do with it. This Notice includes information about our privacy practices that are specific to G Suite for Education and summarizes the most relevant portions of the Google Privacy Policy, which provides additional examples and explanations that may be useful. We hope you will take the time to read this Notice and the Google Privacy Policy, which both apply to G Suite for Education accounts.

Information we collect

A G Suite for Education account is a Google Account created and managed by a school for use by students and educators. When creating this account, the school may provide Google with certain personal information about its students and educators, which includes a user's name, email address, and password in most cases, but could also include secondary email, phone, and address if the school chooses to provide that information. Google may also collect personal information directly from users of G Suite for Education accounts, such as telephone number, profile photo or other information they add to a G Suite for Education account.

Google also collects information based on the use of our services. This includes:

device information, such as the hardware model, operating system version, unique device identifiers, and mobile network information including phone number of the user;

log information, including details of how a user used our service, device event information, and the user's Internet protocol (IP) address;

location information, as determined by various technologies including IP address, GPS, and other sensors;

unique application numbers, such as application version number; and

cookies or similar technologies which are used to collect and store information about a browser or device, such as preferred language and other settings.

How we use information we collect

1. In G Suite for Education Core Services

2. The G Suite for Education Core Services ("Core Services") are listed in the Services Summary and include Gmail, Calendar, Classroom, Contacts, Drive, Docs, Forms, Groups, Sheets, Sites, Slides, Talk/Hangouts, Vault, and Chrome Sync. These services are provided to a school under itsG Suite for Education agreement and, as applicable, Data Processing Amendment. (Users and parents can ask their school if it has accepted the Data Processing Amendment.)

3. User personal information collected in the Core Services is used only to provide the Core Services. Google does not serve ads in the Core Services or use personal information collected in the Core Services for advertising purposes.

4. In Google services generally

5. Besides the Core Services, G Suite for Education users may have access to other Google services that we make generally available for consumers, such as Google Maps, Blogger, and YouTube. We call these "Additional Services" since they are outside of the Core Services.

6. The Google Privacy Policy describes fully how Google services generally use information, including for G Suite for Education users. To summarize, we use the information we collect from all of our services to provide, maintain, protect and improve them, to develop new ones, and to protect Google and our users. We also use this information to offer users tailored content, such as more relevant search results. We may combine personal information from one service with information, including personal information, from other Google services.

7. Google may serve ads to G Suite for Education users in the Additional Services. For G Suite for Education users in primary and secondary (K-12) schools, Google does not use any user personal information (or any information associated with a G Suite for Education Account) to target ads, whether in Core Services or other Google services accessed while using a G Suite for Education account.

Learn more about Core and Additional Services for G Suite for Education users.

Information users share

A school may allow students to access Google services such as Google Docs and Sites, which include features where users can share information with others or publicly. When users share information publicly, it may be indexable by search engines, including Google. Our services provide users with various options for sharing and removing content.

Information we share

Information we collect may be shared outside of Google in limited circumstances. We do not share personal information with companies, organizations and individuals outside of Google unless one of the following circumstances applies:

With user consent. We will share personal information with companies, organizations or individuals outside of Google when we have user consent or parents' consent (as applicable).

With G Suite for Education administrators. G Suite for Education administrators have access to information stored in the Google Accounts of users in that school or domain.

For external processing. We provide personal information to our affiliates or other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.

For legal reasons. We will share personal information with companies, organizations or individuals outside of Google if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:

1. meet any applicable law, regulation, legal process or enforceable governmental request.

2. enforce applicable Terms of Service, including investigation of potential violations.

3. detect, prevent, or otherwise address fraud, security or technical issues.

4. protect against harm to the rights, property or safety of Google, our users or the public as required or permitted by law.

We may share non-personal information publicly and with our partners - like publishers or connected sites. For example, we may share information publicly to show trends about the general use of our services.

Transparency and choice

We provide a variety of user controls that enable G Suite for Education users to make meaningful choices about how information is used in Google services. Depending on the settings enabled by the school, users can use the various controls described in the Privacy Policy, such as Google activity controls, to manage their privacy and information. We provide additional information for parents, students, and administrators on the G Suite for Education Privacy Center.

Parental review and deletion of information

The parents of G Suite for Education users in Primary/Secondary (K-12) schools can access their child's personal information or request that it be deleted through the school administrator. School administrators can provide for parental access and deletion of personal information consistent with the functionality of our services. If a parent wishes to stop any further collection or use of the child's information, the parent can request that the administrator use the service controls available to them to limit the child's access to features or services, or delete the child's account entirely. Guidance for administrators on how to use service controls to accomplish this is available in the G Suite Help Center.

Interpretation of conflicting terms

This Notice is intended to provide the key information about our collection and use of data for G Suite for Education users, and is consistent with the Google Privacy Policy and the G Suite for Education agreement, which provide additional examples and explanations that may be useful. Where there are terms that differ, as with the limitations on advertising in G Suite for Education, the G Suite for Education agreement (as amended) takes precedence, followed by this Privacy Notice and then the Google Privacy Policy.

Contact us

If you have questions about management of G Suite for Education accounts or use of personal information by a school, please contact the G Suite for Education account administrator. If you have questions about our practices, please visit the G Suite for Education Privacy Center. Also see our Privacy Troubleshooter for more questions about privacy and Google's products and services. G Suite for Education administrators can contact Google about the information in this Notice by submitting the contact form while signed in to their administrator account. Parents can also contact Google about the information in this Notice.

Google

1600 Amphitheatre Parkway, Mountain View, CA 94043 USA

Phone: +1 650-253-0000

# data[].attributes.attachment_link.description
This Privacy Notice is meant to help G Suite for Education users and parents understand what data we collect, why we collect it, and what we do with it. This Notice includes information about our privacy practices that are specific to G Suite for Education and summarizes the most relevant portions of the Google Privacy Policy, which provides additional examples and explanations that may be useful.

# data[].attributes.attachment_link.readable_text
To parents and guardians,

At [insert name of school/district], we use G Suite for Education, and we are seeking your permission to provide and manage a G Suite for Education account for your child. G Suite for Education is a set of education productivity tools from Google including Gmail, Calendar, Docs, Classroom, and more used by tens of millions of students and teachers around the world. At [insert name of school/district], students will use their G Suite accounts to complete assignments, communicate with their teachers, [if applicable, insert sign into their Chromebooks], and learn 21st century digital citizenship skills.

The notice below provides answers to common questions about what Google can and can't do with your child's personal information, including:

What personal information does Google collect?

How does Google use this information?

Will Google disclose my child's personal information?

Does Google use student personal information for users in K-12 schools to target advertising?

Can my child share information with others using the G Suite for Education account?

Please read it carefully, let us know of any questions, and then sign below to indicate that you've read the notice and give your consent. If you don't provide your consent, we will not create a G Suite for Education account for your child. [Your school/district may wish to describe here how not providing consent to use Google services will impact the educational experience. For example, students who cannot use Google services may need to use other software to complete assignments or collaborate with peers.]
I give permission for [insert name of school/district] to create/maintain a G Suite for Education account for my child and for Google to collect, use, and disclose information about my child only for the purposes described in the notice below.
Thank you,
[Insert name of school administrator]

________________________________________________
Full name of student

________________________________________________
Printed name of parent/guardian

____________________________ _____________
Signature of parent/guardian Date

[G Suite for Education Notice to Parents and Guardians - Google recommends not editing this section except for replacing highlighted text with your school's info]

G Suite for Education Notice to Parents and Guardians

This notice describes the personal information we provide to Google for these accounts and how Google collects, uses, and discloses personal information from students in connection with these accounts.

Using their G Suite for Education accounts, students may access and use the following "Core Services" offered by Google (described at https://gsuite.google.com/terms/user_features.html):

[Include this section if your school provides access to Additional Services -- learn more about what Additional Services are, and how they differ from Core Services, in the Help Center at https://support.google.com/a/answer/6356441] In addition, we also allow students to access certain other Google services with their G Suite for Education accounts. Specifically, your child may have access to the following "Additional Services":

Google provides information about the information it collects, as well as how it uses and discloses the information it collects from G Suite for Education accounts in its G Suite for Education Privacy Notice. You can read that notice online at https://gsuite.google.com/terms/education_privacy.html You should review this information in its entirety, but below are answers to some common questions:

What personal information does Google collect?

When creating a student account, [insert name of school/district] may provide Google with certain personal information about the student, including, for example, a name, email address, and password. Google may also collect personal information directly from students, such as telephone number for account recovery or a profile photo added to the G Suite for Education account.

When a student uses Google services, Google also collects information based on the use of those services. This includes:

device information, such as the hardware model, operating system version, unique device identifiers, and mobile network information including phone number;

log information, including details of how a user used Google services, device event information, and the user's Internet protocol (IP) address;

location information, as determined by various technologies including IP address, GPS, and other sensors;

unique application numbers, such as application version number; and

cookies or similar technologies which are used to collect and store information about a browser or device, such as preferred language and other settings.

How does Google use this information?

In G Suite for Education Core Services, Google uses student personal information to provide, maintain, and protect the services. Google does not serve ads in the Core Services or use personal information collected in the Core Services for advertising purposes.
[Include this section if your school provides access to Additional Services] In Google Additional Services, Google uses the information collected from all Additional Services to provide, maintain, protect and improve them, to develop new ones, and to protect Google and its users. Google may also use this information to offer tailored content, such as more relevant search results. Google may combine personal information from one service with information, including personal information, from other Google services.
Does Google use student personal information for users in K-12 schools to target advertising?

No. For G Suite for Education users in primary and secondary (K-12) schools, Google does not use any user personal information (or any information associated with an G Suite for Education Account) to target ads, whether in Core Services or in other Additional Services accessed while using an G Suite for Education account.

Can my child share information with others using the G Suite for Education account?
[As applicable for school/district] We may allow students to access Google services such as Google Docs and Sites, which include features where users can share information with others or publicly. When users share information publicly, it may be indexable by search engines, including Google.
Will Google disclose my child's personal information?

Google will not share personal information with companies, organizations and individuals outside of Google unless one of the following circumstances applies:

With parental or guardian consent. Google will share personal information with companies, organizations or individuals outside of Google when it has parents' consent (for users below the age of consent), which may be obtained through G Suite for Education schools.

With [insert name of school/district]. G Suite for Education accounts, because they are school-managed accounts, give administrators access to information stored in them.

For external processing. Google may provide personal information to affiliates or other trusted businesses or persons to process it for Google, based on Google's instructions and in compliance with the G Suite for Education privacy notice and any other appropriate confidentiality and security measures.

For legal reasons. Google will share personal information with companies, organizations or individuals outside of Google if it has a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:

meet any applicable law, regulation, legal process or enforceable governmental request.

enforce applicable Terms of Service, including investigation of potential violations.

detect, prevent, or otherwise address fraud, security or technical issues.

protect against harm to the rights, property or safety of Google, Google users or the public as required or permitted by law.

Google also shares non-personal information -- such as trends about the use of its services -- publicly and with its partners.

What choices do I have as a parent or guardian?

First, you can consent to the collection and use of your child's information by Google. If you don't provide your consent, we will not create a G Suite for Education account for your child, and Google will not collect or use your child's information as described in this notice.

If you consent to your child's use of G Suite for Education, you can access or request deletion of your child's G Suite for Education account by contacting [insert contact information for school administrator]. If you wish to stop any further collection or use of your child's information, you can request that we use the service controls available to limit your child's access to features or services, or delete your child's account entirely. You and your child can also visit https://myaccount.google.com while signed in to the G Suite for Education account to view and manage the personal information and settings of the account.

What if I have more questions or would like to read further?

If you have questions about our use of Google's G Suite for Education accounts or the choices available to you, please contact [insert contact information for the school administrator]. If you want to learn more about how Google collects, uses, and discloses personal information to provide services to us, please review the G Suite for Education Privacy Center (at https://www.google.com/edu/trust/), the G Suite for Education Privacy Notice (at https://gsuite.google.com/terms/education_privacy.html), and the Google Privacy Policy (at https://www.google.com/intl/en/policies/privacy/).

The Core G Suite for Education services are provided to us under Google's Apps for Education agreement (at https://www.google.com/apps/intl/en/terms/education_terms.html) [if school/district has accepted the Data Processing Amendment (see https://support.google.com/a/answer/2888485?hl=en), insert: and the Data Processing Amendment (at https://www.google.com/intl/en/work/apps/terms/dpa_terms.html)].

# data[].attributes.attachment_link.title
Notice template for schools when gathering parent or guardian consent

# data[].attributes.attachment_link.description
To parents and guardians, At [insert name of school/district], we use G Suite for Education, and we are seeking your permission to provide and manage a G Suite for Education account for your child. G Suite for Education is a set of education productivity tools from Google including Gmail, Calendar, Docs, Classroom, and more used by tens of millions of students and teachers around the world.

# data[].attributes.body
Pointers from Google

# data[].attributes.attachment_link.readable_text
At Google, we believe it's important for parents (which we'll use in this article to include guardians) to understand how their children use Google services in the classroom. This article will help primary and secondary (K-12) schools that use G Suite for Education ensure that they can communicate effectively with parents and guardians about their students' use of Google services with G Suite for Education accounts, and help obtain parents' consent where appropriate.

Because school administrators can determine which services are available and the policies for each service, each school's use of G Suite is different. We believe that schools are in the best position to tailor the information they share with parents based on their school's actual use of Google services. There's no one-size-fits-all solution, but Google aims to give schools the information they need about our services and our privacy and security practices so they can keep parents well informed.

G Suite for Education schools can follow the steps below to help parents understand how the school uses Google services, what information Google gets when they use these services, and how Google uses that information.

1. Determine which Google services your school will use

G Suite for Education offers two categories of Google services: Core Services (like Gmail, Drive, Calendar, and Classroom) that are provided under your school's G Suite for Education agreement, and Additional Services (like YouTube, Maps, and Blogger) that are designed for consumer users and can be used with G Suite for Education accounts if allowed for educational purposes by a school's domain administrator. This article explains more about the differences between Core and Additional Services.

G Suite for Education administrators can manage which Core and Additional Services their users can access with their accounts. K-12 schools should note which services they allow students to access, so they can share information about those services with parents.

2. Get parent or guardian consent where appropriate

Schools may need or want to get a parent or guardian's consent for the Google services they allow students to access. For schools in the United States, Google provides this template to help them do that, but it's up to schools to determine how best to use it, to fill it with their own contact information and information about the services they enable, and to share it along with the resources for parents below.

Additional Services require consent for minor users: G Suite for Education requires in its agreement (section 2.5) that schools obtain parent or guardian consent for any Additional Services they allow students under the age of 18 to use.

Schools may opt to get consent for Core Services as well: As a best practice, school may also want to get parent or guardian consent for the Core Services they enable. Otherwise, a school would provide consent for Core Services on parents' behalf by signing up for and using these G Suite for Education services.

Resources to share with parents and guardians

In addition to the template notice above, we recommend that schools share the resources listed below with parents and guardians as part of getting their consent:

Schools in different countries and communities have different regulations and approaches, and Google cannot advise you on compliance with the laws applicable to your school. You should obtain parental consent in a manner that complies with the laws of your jurisdiction.

# data[].attributes.attachment_link.title
Communicating with Parents and Guardians about G Suite for Education

# data[].attributes.attachment_link.description
At Google, we believe it's important for parents (which we'll use in this article to include guardians) to understand how their children use Google services in the classroom.

# data[].attributes.body
Simple guide for teachers

# data[].attributes.attachment_link.title
The NEW Google Classroom - Full Tutorial

# data[].attributes.body
Using groups to turn on or off certain privileges where these don't sit within a single part of the OU

# data[].attributes.attachment_link.readable_text
Manage your groups

This article is for G Suite administrators. To manage your own groups, visit the Google Groups help.

As a G Suite Groups administrator, you can view information about all your organization's groups in the Admin console. This information includes group names, email addresses, descriptions, aliases, members, and access settings. Learn more about the Admin console.

If Groups for Business is ON, you can also view and edit group details in the Groups UI.

Open all | Close all

Group name, email, description, alias & settings

Change a group's email address, description, or alias in the Admin console

Change group settings in new Groups

Welcome message & group type

Add or change a group's welcome message in classic Groups

This feature requires turning on Google Groups for Business and using classic Groups.
Welcome messages appear below the group name on the group's topic list in classic Groups.

1. Sign in to Google Groups.

2. If you're using new Groups, temporarily go back to classic Groups:

1. In the upper right, click Settings .

2. Click Go back to classic Groups until the next release.

3. Click My groups.

4. Click the name of a group.

5. On the left under the group name, do one of the following:

To create a message, click Add welcome message, create your message, then click Save.

To change the message, click Edit welcome message, make your changes, then click Save.

To remove the message, click Clear welcome message, then click OK.

Change a group's type in classic Groups

This feature requires turning on Google Groups for Business and using classic Groups.
You can change your group type to take advantage of features available to different types of groups. If Groups for Business is off, you can only create mailing list type groups and groups used for access and security.

1. Sign in to Google Groups.

2. If you're using new Groups, temporarily go back to classic Groups:

1. In the upper right, click Settings .

2. Click Go back to classic Groups until the next release.

3. Click My groups.

4. Click the name of a group.

5. In the left panel, click Group settings.

6. Go to General Enable additional Google Groups features.

7. In the Select a group type list, choose a group type.

8. Click Save.

Members

Change permission settings for a group role in the Admin console

A group's access level setting determines which permissions apply to each group role-that is owners, managers, and members.

1. Click the name of a group.

2. Click Settings. The tasks that can be performed by members, owners, and managers are displayed.

3. Change the settings for roles as needed.

4. Click Save.

Access settings

Change access settings in the Admin console

As a G Suite Groups administrator, you can edit group access settings in the Admin console. Access settings control what group members can do in a group, based on their role and your organization's sharing options.

1. Click the name of a group.

2. Click Settings. The tasks that can be performed by members, owners, and managers are displayed.

3. Scroll down on the page to see who can join the group and whether external members are allowed.

4. To edit access settings, click Edit in the upper right of the Access type section.

5. In the Access type section, click the table cells to change access settings. If the settings have been customized, click Custom at the top of the page to see preconfigured settings, such as Public and Restricted.

Setting

Description

Access type

Select a preconfigured access type or choose settings manually:

Public-Open to anyone in your organization. Depending on your settings, it can also be open to people outside your organization. Groups with the Public setting might get more spam messages. Malicious senders often send spam to email addresses they find on public websites.

Team-Open to a specific team in your organization. Select this setting to create a group for a specific internal department or team.

Announcement only-Used to broadcast information to a group. For example, use this setting for a group that receives company news.

Restricted-A private group setting for employees who share private or sensitive information.

Custom-Shows that settings have been manually configured.

Access settings

Choose settings for each category of users. These settings form the basis of what people are allowed to do in the group. However, you can also set role-based permissions for the group in Google Groups, groups.google.com. Learn about group roles.

Note: The External category includes anyone outside your organization. External people can be group members or non-members.

Contact owners-Who is allowed to email group owners directly.

View members-Who is allowed to view group members.

View topics-Who is allowed to view topics posted in the group. Non-members outside your organization (External) can only view topics if Groups for Business sharing options are set to Public on the Internet.

Publish posts-Who is allowed to publish messages to the group.

Membership settings

Choose whether group members who have the owner, manager, or member role can add people to the group directly, invite people to join the group, and approve requests to join the group.

Who can join the group

Choose how to add people to the group:

Allow members outside your organization

Turn this setting off to prevent external people from being added to the group. Or turn the setting on to allow external people in the group.

Note: G Suite Groups administrators can always add external people to groups from the Admin console.

To remove access, click cells that have check marks.

To add access, click cells that are empty.

Light-shaded cells can't be changed.

Dark-shaded cells can be changed.

6. Click Save.

Find all the groups you own or manage

Related topics

How can we improve it?

# data[].attributes.attachment_link.description
This article is for G Suite administrators. To manage your own groups, visit the Google Groups help. As a G Suite Groups administrator, you can view information about all your organization's groups in the Admin console. This information includes group names, email addresses, descriptions, aliases, members, and access settings.

# data[].attributes.attachment_link.readable_text
Note: We make every effort to launch products and features according to the processes described below, but we can't guarantee that every change will follow these guidelines. We reserve the right to change our process at any time.
You don't have to install software updates to get new features in G Suite. Most new features appear in users' accounts automatically. As an administrator, you can choose whether these features appear soon after the launch is announced or later by selecting a release track. Some features must be enabled before your users can access them. Most features are available to both the Rapid and Scheduled Release tracks in multiple languages.

Tip: We have several resources to help you track the G Suite releases that might impact your users. For details, see Ways to track new releases.

Choose a release track

You can choose to have a domain on either the Rapid or Scheduled Release track.

Rapid Release track-Your users are among the first to see new features when they're released to G Suite. This means your users typically can access new features immediately or soon after they're launched to consumers.

Scheduled Release track (default)-Your users get new features at least one week after they're released to Rapid Release domains. This gives you more time to prepare your organization for changes.

Tip: Select the Scheduled Release track for your production domain. Then set up Rapid Release in a test domain to try out new features before they're available to your users.

What launches follow release tracks?

Launches that typically follow release tracks involve significant changes for users to the web-based version of these products: Gmail, Hangouts Meet, and Google Calendar, Drive, Docs, Sheets, Slides, Groups, Keep, Voice, and Sites.

Typically, these launches do not follow release tracks:

Admin features that don't impact users

User features controlled by admins (that is, when admins have to turn the feature on)

Mobile features

Noticeable changes to products not listed above

Release pace within tracks

To ensure a smooth rollout, Google releases features at different paces depending on their nature and complexity. In each feature's launch announcement on the G Suite Updates blog, one of the following paces will be indicated, along with the date the rollout starts for each release track:

Full rollout (1-3 days for feature visibility)

Gradual rollout (up to 15 days for feature visibility)

Extended rollout (potentially longer than 15 days for feature visibility)

See and change the release track

Warning: If you switch from Rapid to Scheduled Release, your users might lose access to features currently on the Rapid Release track.

1. From the Admin console Home page, go to Company profile

Profile.

2. In the New User Features section, select Rapid release or Scheduled release.

3. Click Save.

It can take up to 24 hours for the change to take effect.

Related topics

# data[].attributes.attachment_link.description
Note: We make every effort to launch products and features according to the processes described below, but we can't guarantee that every change will follow these guidelines. We reserve the right to change our process at any time. You don't have to install software updates to get new features in G Suite.

# data[].attributes.headline
Managing Access to Google Suite Services

# data[].attributes.subject
Managing Access to Google Suite Services

# data[].attributes.attachment_link.readable_text
As a G Suite administrator, you can control who uses which Google services from their account. Just turn the service on or off for those people in your Google Admin console. When users sign in to their account, they see only those services that are turned on for them.

Changes typically take effect in minutes, but can take up to 24 hours. For details, see How changes propagate to Google services.

Option 1: Control access for organizational units

The easiest way to turn a service on or off for specific users is using organizational units. For example, suppose you want only your Marketing team to use YouTube. Create one organizational unit for Marketing, and another for everyone else. Then leave the service turned on for Marketing and turn it off for the others.

Click a service name below for instructions (requires an administrator account).

Option 2: Customize access using access groups

If you already use organizational units to control other settings for users, you might instead want to control service access using groups. This lets you control access for any group of users no matter what your organizational structure.

See Customize access to G Suite services using access groups

Related topics

# data[].attributes.attachment_link.title
Turn a service on or off for G Suite users

# data[].attributes.attachment_link.description
As a G Suite administrator, you can control who uses which Google services from their account. Just turn the service on or off for those people in your Google Admin console. When users sign in to their account, they see only those services that are turned on for them.

# data[].attributes.body
for passwords

# data[].attributes.attachment_link.readable_text
This MD5 hash generator is useful for encoding passwords, credit cards numbers and other sensitive date into MySQL, Postgress or other databases. PHP programmers, ASP programmers and anyone developing on MySQL, SQL, Postgress or similar should find this online tool an especially handy resource.

What is an MD5 hash?

An MD5 hash is created by taking a string of an any length and encoding it into a 128-bit fingerprint. Encoding the same string using the MD5 algorithm will always result in the same 128-bit hash output. MD5 hashes are commonly used with smaller strings when storing passwords, credit card numbers or other sensitive data in databases such as the popular MySQL. This tool provides a quick and easy way to encode an MD5 hash from a simple string of up to 256 characters in length.

MD5 hashes are also used to ensure the data integrity of files. Because the MD5 hash algorithm always produces the same output for the same given input, users can compare a hash of the source file with a newly created hash of the destination file to check that it is intact and unmodified.

An MD5 hash is NOT encryption. It is simply a fingerprint of the given input. However, it is a one-way transaction and as such it is almost impossible to reverse engineer an MD5 hash to retrieve the original string.

# data[].attributes.attachment_link.description
A tool for creating an MD5 hash from a string. Use this fast, free tool to create an MD5 hash from a string.

# data[].attributes.attachment_link.readable_text
Before people on your team can sign in and use your organization's Google services (for example, G Suite or Cloud Identity), they need a user account. If you have many users, you can add their accounts all at once from a spreadsheet.

Before you begin

Make sure this is the right option: Upload users with a spreadsheet only if you're adding up to 150K users. However, if you have an LDAP server, such as Microsoft® Active Directory®, or have programming skills, we recommend other options for larger organizations. For details, go to Options for adding users.

Make sure you have enough licenses (Annual Plan only): Before you add users, you might need to add licenses to your account. Learn how to get more licenses.

Open all | Close all

Add users from a spreadsheet

Step 1: Download the template file

1. From the Admin console Home page, go to Users.

2. At the top of the page, click Bulk upload users.

3. Download the sample CSV (comma-separated values) template.

4. Open the CSV file in a spreadsheet application, such as Google Sheets or Microsoft® Excel.
The file has columns for the attributes that can appear in each user's profile. Profiles appear in the Admin console and users' Contacts manager.

Step 2: Enter users' information

1. For each user you want to add, enter the following required information in these columns in the spreadsheet:

2. (Optional) Fill in the other columns only if you want. Otherwise, you can leave them blank.
Go to the format guidelines below for help with entering information in columns, especially:

Multiple values in a column

Values with commas or line breaks, such as a physical address

Step 3: Save the file

After you've filled in the spreadsheet, save it as a CSV file (.csv).
Notes:

Maximum CSV file size is 35 MB.

Maximum number of records per file is 150,000.
If your file is larger or has too many records, open it in your spreadsheet program, split the table into separate files, and save each one as a CSV file. Make sure you include the column headings row in all CSV files.

To upload non-ASCII or double byte usernames, first save the CSV file in UTF-8, including BOM.

Step 4: Upload the file

1. After you've filled in the spreadsheet, save it as a CSV file.

2. At the top of the Users page, click Bulk upload users.

3. Click Attach CSV.

4. Click Upload. If there's an error, enter the missing information in your spreadsheet and upload the file again. For more information, go to common errors below.
Your Tasks list opens automatically and shows the progress of the upload. Once processing is complete, you'll receive an email report.

If there's a processing error, download the log file from your Tasks list. For more information, go to common errors below.

It can take up to 24 hours for new users to have access to G Suite services and appear in the global Directory. Learn more about the global Directory.

Follow spreadsheet format guidelines

General guidelines

If you want to...

Follow these guidelines...

Enter multiple values in a column
For multiple values in a single column, such as phone numbers and email addresses, separate them with a comma (but no spaces)-for example: username1@ domain.com, username2@ domain.com

Enter values with commas, line breaks, or double quotes
Enclose the values in double quotation marks-for example, "123 Anystreet, Anytown"

Upload non-ASCII or double byte usernames
Be sure to save the CSV file in UTF-8 so the usernames are readable.

Add more columns
You can enter information only in the columns available in the downloaded file. You can't add new columns, such as those for custom attributes.

Upload existing users
If you enter the email address or email alias of an existing user in the Email Address column, the existing user's account will be updated with any changes you make to their information in the other columns.

Column reference

Required columns

Column

Description/Format

First Name / Last Name
A first name and last name can each have up to 60 characters.

Email Address
The user's sign-in name. Enter the full email address: username@ yourdomain.com

Password
By default, a password must have at least 8 characters. You can change password requirements for your organization.

If you're updating existing users and you don't want to change their passwords, enter **** (4 asterisks).

Org Unit Path

For placing users in an organizational unit.

If you haven't yet set up an organizational hierarchy: Enter a / (forward slash) only to place all users in the top-level parent organizational unit. You can move users to other organizational units you create later.

If you've already set up an organizational hierarchy: Use the format in the following examples​ to place each user in an organizational unit-in either your top-level parent organizational unit or a child organizational unit below it.

Examples:

/ (for the top-level parent - don't enter your domain name)

/Sales (for a child below the top-level parent)

/Students/First Grade

Optional columns

Column

Format

Password Hash Function [Upload Only]

Specify one of the following supported hash functions: MD5, SHA-1, or crypt.

The Password column must contain the hashed password. For example, if you use SHA-1 and the hash of password abc is xyz, enter xyz in the Password column.

Tip: You can find utilities on the web to generate hashed passwords using the supported hash functions.

Recovery Email and Recovery Phone

For providing recovery information used for login challenges.

Recovery email-An email address outside of your domain.

Recovery phone-Must be in the E.164 format. They must start with the plus sign (+), followed by the country code, area code, and phone number. Entries can have a maximum of 15 digits. Example: +16505551212.

Employee ID-Some login challenges ask users to enter their employee ID. The ID can contain numbers, letters, and symbols. For details, go to Add employee ID as a login challenge.

Work/Home Address
If you include commas or line breaks in an address, enclose the address in double quotation marks-for example, "123 Anystreet, Anytown"

New Primary Email [Upload Only]
For editing existing user accounts only. Specify a new primary email address (username).

Building ID, Floor Name, and Floor Section

To enter this information, follow these guidelines.

Change Password at Next Sign-In
To require a user to change their password the next time they sign in to their account, enter TRUE. Otherwise, leave the column empty or enter FALSE.

New Status [Upload Only]
For editing existing user accounts only. To archive or suspend a user, enter Archived or Suspended. To unarchive or restore a suspended user, enter Active.

Resolve common errors

Errors when you upload your CSV file

Error

Cause/Solution

File is empty
Your file doesn't contain any information.

Incorrect file format or unknown column name
The columns in your file should be titled First Name, Last Name, Email Address, Password, and Org Unit Path.

File must have the "column name" column
A required column is missing.

Empty "column name" in row nn
A column that requires information is empty in a specific row.

For example, you'll see the error Empty "Org Unit Path [Required]" in row 2 if you didn'tenter the organizational unit in which you want the place a user's account. Go to Org Unit Path above.

File is too large to upload
The CSV file is over 35 MB or there are more than 150,000 records in the file. Open the file and split the table into separate files. Save each one as a CSV file. Make sure you include the column headings row in all CSV files.

"Email Address [Required]" contains reserved username in row nn
Certain accounts are reserved and can't be created-for example, abuse and postmaster.

Read Only columns
Delete any "read only" columns before uploading the file.

Errors in the log file

Error

Cause/Solution

ACTION FAILED: UNKNOWN ERROR
Most likely, a temporary error occurred. Try uploading the CSV file again, or uploading items in smaller batches. This error can also occur is you've entered an incorrect domain name in a user's email address (after the @ sign) in the Email Address column.

ACTION FAILED: OU INVALID

This error usually means one of the following:

The Org Unit Path column isn't formatted correctly.

One or more organizational units you entered don't exist in the Admin console. Make sure the organizational unit names match those in your organizational hierarchy in the Admin console.

Maintain user accounts

Edit accounts with a spreadsheet

Want someone to do this for you? Get professional help with setup.

How can we improve it?

# data[].attributes.attachment_link.description
Before people on your team can sign in and use your organization's Google services (for example, G Suite or Cloud Identity), they need a user account. If you have many users, you can add their accounts all at once from a spreadsheet.

# data[].attributes.attachment_link.readable_text
The easiest way to give administrator privileges to another user is to assign pre-built administrator roles. Each role grants one or more privileges that together, allow performing a common business function. For example, one role allows managing user accounts, another role manages groups, another role manages calendars and resources, and so on. Assign multiple roles to grant all privileges in those roles.

If these roles don't meet your needs, you can create a custom admin role to assign specific privileges to individual users.

Assign roles now Create a custom role

Here's what each role can do:

Super Admin

Has access to all features in the Admin console and Admin API, and can manage every aspect of your organization's account.

Super administrators also have full access to all users' calendars and event details. After you assign the Super Admin role to a user, it can take up to 24 hours for the calendar privileges to be available.
Only super administrators can...

Create or assign administrator roles

Reset administrator passwords

Restore deleted users

Manage an administrator's settings

Set up billing and control license management

Grant domain-wide delegation/manage API client access

Install G Suite Marketplace apps

Manage Google Calendar resource access-level controls

Manage global Directory settings

Use the data migration service

Transfer ownership of files during the user deletion process

Allow users to turn on 2-Step Verification

At least one user in your account needs to be a super administrator, but we recommend having at least two. That way, if one of you forgets your password the other can reset it for you. Having more than three super administrators, however, limits all your administrators' options for password recovery. For details, Reset your administrator password.

Groups Admin

Has full control over Google Groups created in your Admin console. This administrator can perform the following tasks both from the Admin console and via the Admin API:

View user profiles and your organizational structure

Create new groups in the Admin console

Manage members of groups created in the Admin console

Manage group access settings

Delete groups from the Admin console

View organizational units

User Management Admin

Can perform all actions on users who aren't administrators. This administrator can perform the following tasks both from the Admin console and via the Admin API:

View user profiles and your organizational structure

View organizational units

Create and delete user accounts *

Rename users and change passwords *

Manage a user's individual security settings *

Perform these other user management tasks *

* Applies only for users who aren't administrators. This administrator can't assign administrator privileges, reset an administrator's password, or make other changes to an administrator account. Only a super administrator can perform those tasks.

Help Desk Admin

Can reset passwords for users who aren't administrators, both in the Admin console and via the Admin API. This administrator can also view user profiles and your organizational structure. This administrator can view organizational units.

Services Admin

Lets you manage certain service settings and devices that have been added to your Admin console, including for example: Calendar, Drive and Docs, and other services. This administrator can:

Turn services On or Off *

Change service settings and permissions *

Manage Calendar resources
Note: Users with the Services admin role can only create, edit, and delete resources. They can't modify the sharing settings of Calendar resources.

Manage Chrome and mobile devices listed in the Admin console

View organizational units

* Applies only for certain products you've added to your account (G Suite services, Google Voice, and so on), Marketplace apps, and free Google services like Blogger. Some products and services such as Google Vault and Cloud Print don' support the Services admin role.

Mobile Admin

Can manage mobile devices using advanced mobile device management. This administrator can:

Provision and approve devices

Whitelist apps

Block or wipe devices and accounts

Set Android and iOS device policies

See groups and users in the domain

Don't see this role in your Admin console? This role is available only to customers who signed up for G Suite after February 2018. If you joined before this date, you can create a custom role with the same access.

Google Voice Admin

Can manage all Google Voice settings and provisioning except assign Voice licenses. This administrator can:

Add locations

Assign numbers to users

Port numbers

Change service addresses

Set up desk phones

Set up an auto attendant

Reseller Admin (applies only to G Suite Authorized Resellers) Can administer, provision, and manage their customers. This administrator has access to:

The Reseller console

Admin consoles for their customers' domains

Reseller-related APIs

Users who have only the Reseller Admin role bypass their own organization's Admin console when they sign in.

How can we improve it?

# data[].attributes.attachment_link.description
The easiest way to give administrator privileges to another user is to assign pre-built administrator roles. Each role grants one or more privileges that together, allow performing a common business function. For example, one role allows managing user accounts, another role manages groups, another role manages calendars and resources, and so on.

# data[].attributes.body
for regular contacts outside HPSAJS

# data[].attributes.attachment_link.readable_text
If your users often contact people outside your domain, such as consultants or partners, you can add them to your Directory as shared external contacts. People in your organization can find the profile information for shared external contacts in many Google services, such as when they enter addresses in Gmail. Shared external contacts aren't available in Cloud Search results.

Add external contacts

You can add external contacts to your Directory in two ways:

External contact limits

You can add up to 50,000 external contacts.

If you have a large organization, add only the shared external contacts that most users need. When only a few users need a particular external contact, either:

# data[].attributes.attachment_link.title
Add shared external contacts to the Directory

# data[].attributes.attachment_link.description
If your users often contact people outside your domain, such as consultants or partners, you can add them to your Directory as shared external contacts. People in your organization can find the profile information for shared external contacts in many Google services, such as when they enter addresses in Gmail.

# data[].attributes.body
eg to change pupil profiles

# data[].attributes.attachment_link.readable_text
By default, users in your organization can find the profile information of everyone else. To limit who users can find in autocomplete lists, Contacts, and searches, you can set up a custom directory. You can assign directories by organizational unit, so some users can get a custom directory while some get all contacts in the Directory or none. Learn more about visibility settings.

For example, you can set up a custom directory for temporary employees that includes only people in their team and let full-time employees find all users in the Directory.

You can create up to 100 custom directories.

Required privileges

To create custom directories, you need all the following administrator privileges:

Services > Services Settings

Admin API Privileges > Groups > Read (minimum required if groups are already set up). If you need to create or edit groups, you'll need those additional Groups privileges.

Step 1: Hide the Directory

If you don't want users to find contact information until you set up your custom directories, turn off contact sharing.

Step 2: Organize your users

Set up organizational units and groups to use custom directories. To add users to a custom directory, you put the users in groups and add those groups to the custom directory. You then assign custom directories to organizational units.

1. Create organizational units that correspond to the sets of users who you'll assign custom directories to. For example, if you want full-time employees to use a different directory than interns, create an organizational unit for each set of employees.

2. Add users to organizational units.

3. Create Google groups and add users to them. You use these groups to populate custom directories. For example, you could create groups of executives, full-time employees, interns, and vendors.

Tip: To hide the members of a group, set the group's access level to Restricted. To hide the group email address from users who aren't group members, hide the group from the Groups directory.

Step 3: Create a custom directory

1. From the Admin console Home page, go to Menu

Directory

Directory settings.

2. Click Visibility settings.

3. On the left, select the organizational unit you want to create the directory for.

4. In the Directory visibility section, select Users in a custom directory.

5. At the bottom, click Create New.

6. Enter a name for the custom directory.

7. In the Include groups section, check the boxes next to the groups you want to include in the custom directory. To go directly to a group, enter the name of the group and click Search.
Note: When you add a group to a custom directory, the group is not hidden from other users. Everyone can find the Group address and view group members if group access levels allow it. Learn more about how to manage groups.

8. Click Create, and then click Save.

Step 4: Show the Directory

To let people in your organization find and use contact information, turn on contact sharing. Now:

Users that are assigned a custom directory can find only people in that custom directory. They can find all shared external contacts. They can also find all Groups that are visible to them.

Users in organizational units that aren't assigned a custom directory can find either:

Everyone in the Directory, if their organizational unit doesn't inherit a custom directory, or

Only people in a custom directory, if their organizational unit inherits a custom directory from a parent organizational unit.

It can take up to 24 hours for changes to custom directories to become available.

# data[].attributes.attachment_link.title
Customize a directory for a team or group

# data[].attributes.attachment_link.description
By default, users in your organization can find the profile information of everyone else. To limit who users can find in autocomplete lists, Contacts, and searches, you can set up a custom directory. You can assign directories by organizational unit, so some users can get a custom directory while some get all contacts in the Directory or none.

# data[].attributes.attachment_link.title
[External] G Suite for Education Quickstart IT Setup Guide [March 2020]

# data[].attributes.attachment_link.readable_text
As a Directory admin, you can add information such as phone numbers, secondary email addresses, and desk location to users' profiles. You can edit user profiles individually in the Admin console. Edit users in bulk with the G Suite Admin SDK Directory API or Google Cloud Directory Sync.

Rich profile information connects users

When you add profile information to user profiles, people in your organization find it in many Google services:

Individual and group addresses autocomplete as users enter them in Google services like Gmail, Google Docs, and Drive.

Calendar intelligently suggests meeting rooms based on the location and number of guests (requires Calendar setup).

Users find profile information in Google services. For example, when users point at or tap someone's profile photo, they open a person information card.

Users see organization relationships. If you add managers to users' profiles organization-wide, Google automatically generates a reporting chain. Available in Google services on Android and iOS, as well as in Cloud Search on all devices.

What you can update

You can add, edit, or delete the following information:

You can also let users update some of their profile settings, including name, photo, and work location. Note: Gmail users can change their display name themselves.

Update a user profile

This method is the simplest way to update a few user profiles. If you need to update many profiles, use one of the bulk update methods described in the following sections.

1. From the Admin console Home page, go to Users.

2. In the Users list, find the user. If you need help, go to Find a user account.

3. Click the user's name to open their account page.

4. Click User information.

5. Click any of the following sections to edit the user's profile information:

Contact information-Secondary email addresses, phone numbers, and physical addresses

Email aliases-Additional domain email addresses

Employee information-ID, job title, employee type, manager email, department, cost center, building ID, floor name, and floor section

Custom attribute fields-If you or another admin created custom attributes for user profiles, enter or edit their values

Tip: After you add information to a field, another field appears to let you add another entry. To specify details of an entry, such as Home or Work, click the menu at the right. To delete an entry, click Remove on the right.

6. At the bottom right, click Save.

7. (Optional) To return to the user's account page, at the top right, click the Up arrow .

Note: It can take up to 24 hours for changes to appear.

Update many profiles from a spreadsheet

This method lets you update many profiles at once without programming or Google Cloud Directory Sync.

1. From the Admin console Home page, go to Users.

2. At the top of the page, click Bulk upload users.

3. Download existing users' data into a CSV (comma-separated values) file.

4. Open the CSV file in a spreadsheet application, such as Google Sheets or Microsoft® Excel®.
The file has columns for each profile attribute.

5. Update or fill in the users' profile information. If you don't want to show an attribute, leave the column blank.
Tip: To add multiple phone numbers or addresses for a user, enter the values in the column and separate the values with commas.

6. Save the CSV file as a CSV file type.

7. Click Upload to upload the file.
For guidelines and tips, go to Add several users at once.

Note: It can take up to 24 hours for changes to appear.

Bulk update profiles (LDAP or API)

These methods let you update many profiles with data from your organization's LDAP directory or other source.

Available user profile fields

To set the profile information that is shared throughout Google services, edit the following fields.

* When you update user profiles with the Directory API, we recommend you update both the addresses[].formatted property and individual address properties. Individual address properties aren't synchronized to the Admin console or Directory.

Related topics

For other ways to update user profiles, go to:

# data[].attributes.attachment_link.description
As a Directory admin, you can add information such as phone numbers, secondary email addresses, and desk location to users' profiles. You can edit user profiles individually in the Admin console. Edit users in bulk with the G Suite Admin SDK Directory API or Google Cloud Directory Sync.

# data[].attributes.headline
How Google Suite Organisational Structure Works

# data[].attributes.subject
How Google Suite Organisational Structure Works

# data[].attributes.body
NB each user can only belong to one OU

# data[].attributes.attachment_link.title
How the organizational structure works - G Suite Administrator Help

# data[].attributes.attachment_link.description
Initially in your Google Admin console, all your users and devices are placed in a single organizational unit. All settings you make in the Admin console apply to this top-level organization and there

# data[].attributes.body
Google Suite admin help

# data[].attributes.attachment_link.readable_text
This page is for G Suite administrators who manage user accounts for a company, school, or other group, or for Cloud Identity administrators. If you want to delete your own personal Google Account, go here instead.

When a user leaves your organization, you can delete their account. As an administrator, you can transfer files and data owned by the user. Files that the user doesn't own are not affected. If you don't transfer the content to another user, the content is deleted.

If you delete a user

If you delete a user, they can't access any of your organization's G Suite services and the following data is deleted:

G Suite data-All file types, Gmail, and calendar data (except for shared calendars).

Sites pages-Except for pages created by the user in classic Sites. As an admin, you can delete the classic Sites pages. See Edit classic Sites at your domain.

Google Vault-All the user's Vault data is deleted after 30 days, regardless of any retention settings or holds that might be in effect. Data that's in a deleted state can be recovered for up to 20 days only. Deleted data can be expunged immediately. See Google Vault FAQ.

Google Play-The user's Google Play developer account. You can transfer some apps to another developer account. For details, see Transfer apps to a different developer account.

Google Cloud Platform (GCP)-The user can't access GCP resources. The user's Identity and Access Management (IAM) policy bindings remain on the associated resources for up to 30 days. If the user isn't a member of a GCP organization, any projects become orphaned. For details, see Suspended vs Orphaned Projects.

Brand Account assets-Any assets owned solely by one user, such as YouTube channels. If there are other owners, the assets are transferred to another owner's G Suite account. If the user is the sole owner, consider choosing a new owner before you delete the user. For details, see Manage your Brand Account.

YouTube videos and other non-core services content-Content in the user's non-core services, such as YouTube videos and Blogger blogs.

Cloud Identity-All data for that user.

Classroom-If you delete a G Suite for Education account, the teacher or student can't access Classroom or Drive.

Google Groups-The user doesn't have access to the service, but any groups they created are not deleted, even if they were the only member.

For more information on how to export or transfer ownership of user data in the products listed above, see Before you delete a user (below). You must wait until the user's account is completely deleted from G Suite before you can reuse the user's G Suite license. The deletion process can take from several hours to a maximum of 24 hours.

Before you delete a user

Make sure you really want to delete them

Review If you delete a user (above).

If you're trying to resolve a conflicting account, don't delete the account to address the problem. If that person uses G Suite services for email, calendars, and other services, they'll lose data and access to services when you delete their account. Instead, see About conflicting accounts.

If you want to change the username of a team member, you don't need to delete their account. You can create an alias-a nickname-for that user. Then, they can have an email address using that name. See Rename a user or change a user's email address.

Transfer their email

Transfer important files and data

You can only transfer files and data owned by the user. Whoever you transfer the data to becomes the new owner. Files that the user doesn't own aren't affected. Content that's not transferred to another user is deleted. Google Drive files are deleted after 20 days. You have options for transferring files either during the user deletion process or before you delete the user.

During the user deletion process:

If you're a super admin, you can transfer the files to another user. See Delete a user.

You can include files that aren't shared with anyone. However, even if you don't select this option, unshared files might be transferred if they're in a shared folder.

Files in shared drives aren't transferred. These files are owned by your organization, not individual users. Learn more about shared drives.

Before a user is deleted:

Transfer shared calendars

The user's primary calendar is deleted after 20 days. Any shared calendars aren't deleted. To transfer ownership of shared calendars, give another user permission to make changes and manage sharing on the shared calendar. See Share your calendar with someone.

Set up an autoreply and forward emails from their email address

Check if you have business email powered by G Suite

Transfer ownership of a class

Delete a user

1. From the Admin console Home page, go to Users.

2. (Optional) To delete a single user:

1. In the Users list, find the user. For details, see find a user account.

2. Point to the user you want to delete and click More Delete user.

3. (Optional) To delete multiple users:

1. From the Users list, check the box next to each user that you want to delete.

2. At the top of the page, click More Delete selected users.
Tip: If all users belong to the same organizational unit, select it on the left to find the users more easily.

4. If you're a delegated admin (not a super admin), check the boxes to confirm that you understand the impact of deleting the account.

5. (Optional, for super admins only) To transfer ownership of user content:

1. Check the boxes next to each option that you want.

2. In the Transfer to box, enter the first few characters of the user's name or email address that you want to transfer the files to. When you see the account you want, select it.

6. Click Delete User or Delete Users.

When the data is transferred and the account deleted, we email the contacts you set up in Company profile Profile Contact information.

Restore a deleted user

You can restore a recently deleted account for up to 20 days only. See Restore a recently deleted user.

# data[].attributes.attachment_link.description
This page is for G Suite administrators who manage user accounts for a company, school, or other group, or for Cloud Identity administrators. If you want to delete your own personal Google Account, go here instead. When a user leaves your organization, you can delete their account.

# data[].attributes.body
Google Suite admin help

# data[].attributes.attachment_link.title
Manage passwords - G Suite Administrator Help

# data[].attributes.attachment_link.description
As a G Suite administrator, you can reset and manage passwords for users in your organization.

# data[].attributes.body
Google Suite admin help

# data[].attributes.attachment_link.readable_text
You can temporarily block a user's access to your organization's Google services by suspending their account. When you suspend an account, the user's:

Email, documents, calendars, Google+ posts or other data aren't deleted.

Shared documents are still accessible to collaborators.

New email and calendar invitations are blocked.

Note: If Google suspended an account, rather than an administrator, email might still be delivered, depending on the context of the suspension.

After suspending a user, you can restore the account at any time.

Important: Suspended accounts are still charged at the same rate as active accounts on both the Annual billing plan and the Flexible plan. To avoid charges for a user account you don't need, you can delete it instead.

Before you begin

What happens to a suspended user's account and data?

If you suspend a user's account while they're in a classic Hangouts chat, the user can continue to participate until the session is over.

Suspend an individual user

1. From the Admin console Home page, go to Users.

2. In the Users list, find the user. If you need help, see Find a user account.

3. Hover over the user you want to suspend and click More Suspend user.
You can also find this option at the top-left of the user's account page, under More .

4. Click Suspend to confirm.

Suspend users in bulk

To suspend multiple users using a CSV file, follow the directions in Add several users at once.

In the downloaded CSV template, in the New Status [Upload Only] column, enter Suspended.

# data[].attributes.attachment_link.description
You can temporarily block a user's access to your organization's Google services by suspending their account. When you suspend an account, the user's: Email, documents, calendars, Google+ posts or other data aren't deleted. Shared documents are still accessible to collaborators. New email and calendar invitations are blocked.

# data[].attributes.body
Google Suite admin help

# data[].attributes.attachment_link.readable_text
This article is for administrators. To change your display name, go here instead. To change your email address for work or school, ask your admin to follow the instructions in this article.
As an admin for your organization's G Suite or Cloud Identity service, you can change a user's name and email address in the Google Admin console. When you change the display name, you change the name that shows up in emails they send, calendar invites, and other Google services.

When you change a user's email address, they must use the new email address to sign in to their Google Account. Changing a user's name doesn't affect their email address, unless you also change the address. If a user simply needs an alternative email address, consider setting up an email alias.

Note: When you change or update an email address while renaming a user, the previous email address automatically becomes an alias. When the maximum number of allowed aliases is reached (30), you can't rename the user. If you try, the operation fails.

Change a user's name or email address

1. From the Admin console Home page, go to Users.

2. In the Users list, find the user. Learn how to find a user account.

3. Point to the user that you want to rename and click Rename user.
You can also find this option at the top-left of the user's account page.

4. Change any of the following details:

5. Click Rename.

If you change an email address...

The user must now sign in to their Google Account with the new address.

The user continues to receive mail at the old address (it becomes an email alias).

If the user's new primary email address matches an existing Google Account, you might be prompted to resolve the conflict before you can rename the user. Learn more about conflicting accounts.

If you change a display name...

The new name appears:

In messages the user sends (unless they change their own Gmail settings)

In calendar invites, shared docs, and other Google services (unless the user changes their Google+ profile)

In your company's Directory

Important: G Suite users' old display names are not private, and might be visible to other users in some circumstances.

Related topics

# data[].attributes.attachment_link.title
Rename a user or change a user's email address

# data[].attributes.attachment_link.description
This article is for administrators. To change your display name, go here instead. To change your email address for work or school, ask your admin to follow the instructions in this article. As an admin for your organization's G Suite or Cloud Identity service, you can change a user's name and email address in the Google Admin console.

# data[].attributes.body
Google Suite help