Context-Aware access levels combine conditions and values that define a user or device context. These access levels define the context within which users can access apps.
For example, you can create an access level for accessing Gmail that requires users to connect from a specific IP address range and require their devices to be encrypted.
Note: Before creating an access level, you should deploy endpoint verification and turn on Context-Aware access. Go to Set up endpoint verification and Turn on Context-Aware Access in Deploy Context-Aware Access for details.
Create an access level
Access levels consist of one or more conditions that you define. To access apps, users must meet the conditions. Access-level conditions contain attributes you can select, such as device policy, IP subnet, or another access level.
You can create access levels in 2 different modes, Basic and Advanced. Basic mode provides you with a list of predefined attributes that you can select. If you need to use attributes that are not in the interface, build a custom access level in Advanced mode instead.
Note: When you modify an access level, the changes take effect immediately. Be aware that changes to access levels will affect your users as soon as you make the changes. Be sure the changes are what you intend.
Expand section | Collapse all & go to top
What's next: assign access levels to apps
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.