To use Access Management and Access Approvals, you need the Google Workspace Assured Controls add-on. For details, speak to your sales representative.
As a Google Workspace administrator, you can set up Access Management to limit the Google staff who can take support actions related to your organization's data based on predefined attributes.
Access Approvals requires Google staff who can take support actions related to your organization's data to request approval before viewing data necessary for support.
Access Management and Access Approvals currently cover only the services listed below.
For more details, see the following help articles:
- Limit the Google staff who can take support actions related to your data
- Require Google staff to request approval before viewing support data
Note: Actions allowed through Access Management and Access Approvals are logged by Access Transparency.
Services and data covered by Access Management and Access Approvals
Primary data
Access Management and Access Approvals cover the primary data-at-rest, including backups:
Google Workspace core service | Covered data |
Gmail | Subjects, bodies, attachments |
Calendar | Event titles, descriptions, locations |
Chat | Names, chat room titles, spaces Message and topic bodies in both direct messages and chat rooms User information (including name, email address, and chat room membership) Note: For Chat to cover group messages, you must configure Access Management and Access Approvals at the root organizational unit. If Access Management and Access Approvals aren't needed at child organizational units, you can explicitly turn it off for those organizational units. |
Drive | Original file content uploaded to Drive |
Google Docs, Forms, Sheets, Sites, Slides | Contents of documents, including file body text, embedded images, embedded drawings, comments, and form responses Note: Legacy Sites is not covered. |
Note: Access Management and Access Approvals don't cover data for any editions, products, or services not explicitly stated above.
Backups
Google Workspace maintains backups of primary data for disaster recovery and business continuity. In rare cases, Google Workspace uses backups to restore data and maintain high reliability.
These backups aren’t available to restore data upon customer request. Backups expire (are overwritten) on defined timelines.