Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition
Some features in the security center—for example, data related to Gmail and Drive—are not available with Cloud Identity Premium.
The security health page allows you to monitor the configuration of your security-related Admin console settings—all from one location in the Google Admin console—and to make changes to those settings.
To view the security health page:
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu SecuritySecurity center Security health.
Loading times for the security health page vary depending on your configuration.
Notes:
- Enterprise edition customers receive all security health settings. With Frontline Standard, Essentials editions, and Cloud Identity Premium Edition, you receive a subset of security health features. See the availability information in each settings section below for details.
- Changes to Admin console settings might take up to 24 hours before propagating to the security health page. Changes made to the settings through the Admin console can be audited in the Admin Console audit log.
- Super admins can view all settings on the security health page. Other admins need to be granted specific administrator privileges to view security health settings.
Status column
View the number of organizational units for which a setting is enabled or disabled. On each row, the status for these settings is displayed. For example, Enabled for 1 org unit, or Disabled for 10 org units.
View organizational units with risky configurations
To view your Google Admin console settings and make changes, under Status, click the blue links (for example, 5 org units). This opens a window that displays a tree structure with a list of organizational units with risky configurations. Click any of the organizational units in this window to directly access the security settings for that organizational unit. You can then make adjustments to your settings if needed.
Note that organizational units that inherit setting status might also be affected by your changes. For more details, see How the organizational structure works.
View security recommendations
Depending on the setting status, the far-right column displays a gray icon that you can click for a list of security recommendations, or it displays a green checkbox to indicate a secure configuration. Click the gray icons for more details and instructions.
Security health page
Security health settings
You can monitor the security health of the following settings:
Category | Setting |
---|---|
Gmail |
Supported editions: Enterprise Plus, Education, Enterprise Essentials Plus |
Supported editions: Enterprise Plus, Enterprise Essentials Plus |
|
Drive |
Supported editions: Enterprise Plus, Education, Enterprise Essentials Plus |
Device management |
Supported editions: Frontline Standard, Enterprise, Education, Enterprise Essentials PlusCloud Identity Premium |
Security |
Supported editions: Frontline Standard, Enterprise, Education, Cloud Identity Premium, Enterprise Essentials Plus |
Supported editions: Enterprise Plus, Enterprise Essentials Plus |
|
Hangouts |
Supported edition: Enterprise Plus, Education |
Groups |
Supported editions: Enterprise Plus, Education, Enterprise Essentials Plus |
Marketplace apps |
Supported editions: Enterprise Plus, Education, Enterprise Essentials Plus |
Calendar |
Supported editions: Enterprise Plus, Education, Enterprise Essentials Plus |
Supported editions: Enterprise Plus, Enterprise Essentials Plus |
|
Sites |
Supported editions: Enterprise Plus, Education, Enterprise Essentials Plus |
About making changes to your settings
Security considerations versus business needs
In addition to security considerations and best practices, you may have business needs to enable or disable certain settings. Balance these priorities when evaluating the status of your settings.
Organizational units and inheritance
You can enable or disable settings for an organizational unit. You can also configure a child organization to override the setting in a parent organization; otherwise, the child organization inherits the parent setting.
Limitations with multiple domains
You can't set different policies or configuration settings for specific domains. All settings in the Google Admin console apply to all domains that are part of your account. For more information, see Limitations with multiple domains.
For more details and instructions about the security center, see About the security center.