Provide more secure access to data & resources

As an administrator, you can grant access to sensitive information and resources using security groups. You can make any new or existing group a security group. The only groups that can join security groups are other security groups. This limitation guarantees that only authorized people have access.

Create a security group

You can create a group as a security group. 

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. On the Admin console Home page, go to Groups.
  3. Click Create group.
  4. Enter the group informationand thencheck the Security boxand thenclick Next.
  5. Fill out the access settingsand thenclick Next.
  6. Enter the security settingsand thenclick Create Group
  7. Click Done.

For details on entering group information and settings, see Create a group.  

Change a group into a security group

After you add a security label to a group, it takes on the qualities of a security group. This process adds security features to any type of group and locks down membership permissions, but it doesn’t remove any other features of the original group.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. On the Admin console Home page, go to Groups.
  3. Click on the group nameand thenGroup Informationand thenLabels.
  4. Check the Security box.
  5. Click Save.
    This action is permanent.
    The group now has a security label in the groups list.

Automate security policies using dynamic security groups

You can enforce policies using dynamic groups by first adding a security label to them.

For example, you might set policies for everyone at your company who works in a specific geographic location. 

  1. Create a dynamic group of everyone with that location in their user profiles.
    As employees move and change their location in their profile, the system automatically adds or removes them from the dynamic group. 
  2. Add a security label to the dynamic group.
    Doing so allows you to apply policies to dynamic groups.
  3. Create a policy and choose which policies take precedence by following the steps in Customize service settings with configuration groups.
Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
73010
false