Google Cloud Google Workspace Administrator

Identity at the edges decides how smoothly people reach their work. You add and verify domains, configure SAML single sign-on, and set up buildings and bookable rooms and equipment.

• Primary, secondary and alias domains
• DNS records and domain verification
• SAML single sign-on configuration
• Provisioning from an external directory
• Buildings, rooms and bookable resources
• Troubleshooting sign-in failures

You build A domain and sign-on setup with SSO tested for one test group.

Mail problems reach the help desk fastest. You configure routing and compliance rules, authenticate outgoing mail with SPF, DKIM and DMARC, and tune spam and phishing protection.

• MX records and mail flow
• Routing, split delivery and compliance rules
• SPF, DKIM and DMARC setup
• Spam, phishing and malware settings
• Allowlists, blocklists and quarantine
• Reading and acting on DMARC reports

You build A mail configuration with routing rules, authentication records and a DMARC rollout plan.

Files leak through generous sharing more than through hacking. You control sharing inside and outside the company, set up shared drives with the right ownership, and handle departing users’ files.

• Drive sharing settings by organizational unit
• Shared drives: roles, settings and ownership
• External sharing and link controls
• Transferring ownership and recovering files
• Storage and quota management
• Sharing policies for different departments

You build A sharing policy and shared drive layout for three departments.

Collaboration tools need guardrails too. You configure calendar sharing and resources, Meet security and recording options, and Chat spaces including who can message outside the company.

• Calendar sharing and interop settings
• Resource calendars and booking rules
• Meet access, recording and moderation settings
• Chat spaces, history and external chat
• Apps and add-ons in collaboration tools
• Setting differences by organizational unit

You build A collaboration settings plan with different rules for staff, contractors and guests.

AI and automation tools spread quickly unless administrators set direction. You decide who gets Gemini and where its data may go, and control how people build with AppSheet and Apps Script.

• Turning Gemini on by user group
• Data protections and what Gemini can access
• Admin controls for Gemini features in apps
• AppSheet access and data connections
• Apps Script permissions and governance
• Communicating usage rules to users

You build A rollout plan for Gemini and automation tools with settings by group.

Legal and records requirements turn into settings. You create retention rules, place holds, search and export data for investigations, and keep an audit trail of who used Vault.

• Retention rules by service and organizational unit
• Legal holds and their effect on deletion
• Searching and exporting for eDiscovery
• Vault roles and audit
• Matters and workflow
• Retention for departed users

You build A retention policy and a documented eDiscovery search for a sample legal matter.

Sensitive information needs rules that act before a mistake does. You write DLP rules, set Drive trust rules for sharing, apply classification labels, and control where data is stored and exported.

• Detectors and DLP rule design
• Drive trust rules for internal and external sharing
• Classification labels and their policy effects
• Data regions and export controls
• Testing rules before enforcement
• Reviewing incidents and tuning rules

You build A set of DLP and trust rules with test cases and a rollout plan.

Account takeover is the common failure. You enforce password and 2-step verification policies, assign administrator roles with care, apply context-aware access, and control which third-party apps can reach data.

• Password and 2-step verification enforcement
• Admin roles and delegated administration
• Context-aware access rules
• Third-party app and API access controls
• Security center and investigation tool
• Responding to a compromised account

You build A security policy set with a response procedure for a compromised account.

Devices carry company data out of the building. You choose a management level for mobile devices, support personal phones, remove access when staff leave, and manage Chrome policies and extensions.

• Basic and advanced mobile management
• Policies for personal and company devices
• Enrolling, locking and wiping devices
• Chrome browser and ChromeOS policies
• Extension allowlists and installation rules
• Offboarding devices

You build A device and browser policy for three user groups, with an offboarding checklist.

Most support tickets have a log entry behind them. You read audit logs, check service status, trace lost mail and failed calendar invitations, and use Google’s admin tools to find causes instead of guessing.

• Audit and activity logs in the admin console
• Email Log Search and message tracing
• Admin Toolbox and header analysis
• Service status and incident checks
• Calendar and sharing problems
• Account and sign-in troubleshooting

You build A troubleshooting guide with six traced support cases and their fixes.

Set up one environment as a new administrator would. You create the structure, secure it, set service policies and compliance rules, and then work through a set of support problems.

• Planning the structure and policies
• Configuring services and security
• Applying compliance and device controls
• Working through support cases
• Documenting the setup

You build A documented Workspace environment with structure, policies, compliance rules and a support runbook.