implementing-google-workspace-admin-security - Implement Google Workspace Admin Security
Hardens a Google Workspace tenant by configuring phishing-resistant MFA, DLP, SPF/DKIM/DMARC, OAuth app controls, and external sharing restrictions.
Tags
Updated: 2026-10-02Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Harden super admin accounts
- Enforce phishing-resistant MFA
- Configure email authentication
- Enable anti-phishing protections
- Implement DLP policies
- Restrict OAuth applications
- Restrict external sharing
- Create admin activity alerts
Inputs
- Google Workspace tenant
- Super Admin credentials
- DNS management access
- Organizational unit structure
- Admin notification destinations
- FIDO2 security keys
Outputs
- Hardened admin accounts
- Enforced MFA policies
- Configured email authentication
- Enabled phishing protections
- Configured DLP policies
- Restricted OAuth access
- Restricted external sharing
- Admin activity alerts
- Enrollment audit report
Requirements
- Google Workspace Business Plus or Enterprise license
- Super Admin access
- DNS management permissions
- Google Cloud Identity or Cloud Identity Premium
- FIDO2 security keys
- GAM CLI or Admin SDK access