To use Access Management, you need the Google Workspace Assured Controls add-on. For details, speak to your sales representative.
As a Google Workspace administrator, you can set up Access Management to limit the Google staff who can take support actions related to your organization's data based on predefined attributes. Access Management currently covers only the services listed below.
For more details, see Limit the Google staff who can take support actions related to your data.
Note: Actions allowed through Access Management are logged by Access Transparency.
Which services and data are covered by Access Management?
Access Management covers the primary data-at-rest, including backups:
|Google Workspace core service||Covered data|
|Gmail||Subjects, bodies, attachments|
|Calendar||Event titles, descriptions, locations|
|Chat||Names, chat room titles, spaces
Message and topic bodies in both direct messages and chat rooms
User information (including name, email address, and chat room membership)
Note: For Chat to cover group messages, you must configure Access Management at the root organizational unit. If Access Management isn't needed at child organizational units, you can explicitly turn it off for those organizational units.
|Drive||Original file content uploaded to Drive|
|Google Docs, Forms, Sheets, Sites, Slides||Contents of documents, including file body text, embedded images, embedded drawings, comments, and form responses
Note: Legacy Sites is not covered.
Note: Access Management doesn't cover data for any editions, products, or services not explicitly stated above.
Google Workspace maintains backups of primary data for disaster recovery and business continuity. In rare cases, Google Workspace uses backups to restore data and maintain high reliability.
These backups aren’t available to restore data upon customer request. Backups expire (are overwritten) on defined timelines.