Configure settings for your investigations

Security investigation tool
Supported editions for this feature: Frontline Standard, Enterprise Standard, Enterprise Plus, Education Standard, Education Plus, Enterprise Essentials Plus, Cloud Identity Premium. Compare your edition

From the security investigation tool, use the Settings window to configure settings for your investigations.

What you can configure

Investigation settings apply to all administrators in your organization. Using these settings, super admins can do the following:

  • Turn on the Require reviewer setting to require reviewers for actions on large data sets—where over 300 items are affected.
  • Allow admins with the appropriate privileges to view sensitive content.
  • Require admins to enter justification text before they can view sensitive content.
  • Allow admins with the appropriate privileges to enter justification text before performing actions in the investigation tool.

Turn on the Require reviewer setting

You must be signed in as a super administrator for this task.

Require reviewers for bulk actions in the security investigation tool:

  1. Sign in to your Google Admin console.

    Sign in using an account with super administrator privileges (does not end in @gmail.com).

  2. In the Admin console, go to Menu and then Securityand thenSecurity centerand thenInvestigation tool.
  3. Click Settings .
  4. Turn on the Require reviewer setting.
  5. Click Apply.

For more details and instructions, see Require reviewers for bulk actions.

Turn on the View sensitive content setting

You must be signed in as a super administrator for this task.

Allow admins with the appropriate privileges to view sensitive content. This setting applies to apps such as email, chat messages, and chat attachments.

  1. Sign in to your Google Admin console.

    Sign in using an account with super administrator privileges (does not end in @gmail.com).

  2. In the Admin console, go to Menu and then Securityand thenSecurity centerand thenInvestigation tool.
  3. Click Settings .
  4. Turn on the View sensitive content setting.
  5. (Optional) To require admins to enter justification text before viewing sensitive content, turn on the toggle button. 
  6. Click Apply.

For more details and instructions, see View sensitive content.

If you previously had this setting turned off (for Gmail), admins who were able to access chat content won't be able to do so any longer. To make sure admins with the correct privileges can access chat content, you'll need to turn on the View sensitive content setting.

Turn on the Enable action justification setting

You must be signed in as a super administrator for this task.

Allow admins with the appropriate privileges to enter justification text before performing actions in the tool:

  1. Sign in to your Google Admin console.

    Sign in using an account with super administrator privileges (does not end in @gmail.com).

  2. In the Admin console, go to Menu and then Securityand thenSecurity centerand thenInvestigation tool.
  3. Click Settings .
  4. Turn on the Enable action justification setting.
  5. Click Apply.

Change the time zone in the investigation tool

You can change the global time zone in the security investigation tool. The time zone applies to search conditions and results. The time zone currently does not persist between sessions. For the steps, go to Change the time zone in the security investigation tool

 

Was this helpful?

How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
16061939279693066496
true
Search Help Center
true
true
true
true
true
73010
false
false