implementing-google-workspace-admin-security - Harden Google Workspace administration and identity security
Hardens Google Workspace with phishing-resistant MFA, email authentication, DLP, OAuth controls, and external sharing restrictions.
Tags
Updated: 2026-10-03Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Harden super admin accounts
- Enforce phishing-resistant MFA
- Configure SPF DKIM DMARC
- Protect against email spoofing
- Implement Gmail and Drive DLP
- Restrict OAuth app access
- Limit external sharing
Inputs
- Google Workspace tenant
- Admin Console access
- DNS management access
- Super admin accounts
- FIDO2 security keys
- DLP policy definitions
- OAuth application requirements
Outputs
- Hardened admin account policies
- MFA enforcement policies
- SPF DKIM DMARC records
- Anti-phishing email settings
- Gmail and Drive DLP rules
- OAuth access restrictions
- External sharing restrictions
- Admin activity alerts
Requirements
- Google Workspace Business Plus or Enterprise license
- Super Admin access
- DNS management permissions
- Google Cloud Identity or Cloud Identity Premium
- FIDO2 security keys