Authentic Google Certification Exam Google-Workspace-Administrator Questions Answers

When configuring Google Cloud Directory Sync (GCDS) to manage Google Group memberships from an internal LDAP server, it’s crucial to ensure that manually managed groups are not inadvertently deleted during the sync process. The correct setting to prevent this is found within the GCDS configuration manager.

Access GCDS Configuration Manager:

Open the GCDS configuration manager on your server.

Navigate to Group Settings:

Go to the section where group settings are configured.

Update Group Deletion Policy:

Find the group deletion policy setting.

Change the policy to “don't delete Google groups not found in LDAP.”

Save Configuration:

Save the updated configuration to ensure that the settings are applied during the next synchronization.

By updating this setting, GCDS will no longer delete Google Groups that are not found in LDAP, thereby preserving manually managed groups.

References:

Google Cloud Directory Sync Admin Help

GCDS Configuration Guide

Access Admin Console: Log in to the Google Admin console.

Navigate to Admin Roles: Go to Admin roles under Account settings.

Create Custom Role: Click on 'Create new role' and name it appropriately.

Assign Vault Privileges: Select the privileges related to Google Vault, including managing matters, holds, searches, and exports.

Assign Role to User: Assign this custom role to the designated administrator who will handle the security investigations.

Verify Access: Ensure that the new administrator has the necessary access to Google Vault to monitor and manage ongoing security investigations.

References:

Google Workspace Admin Help - Create Custom Admin Roles

Google Workspace Admin Help - Google Vault Privileges

To efficiently manage licensing in an organization with a high turnover rate and multiple license types, the best approach is to create a license assignment rule in the Google Admin console based on directory attributes. This method automates the process of assigning licenses according to the user's role and other directory attributes, ensuring that each user gets the appropriate license type without manual intervention. This approach is scalable and minimizes the administrative overhead associated with frequent changes in user roles and turnover.

References:

Google Workspace Admin Help - Assign, change, or remove a user's license

Google Workspace Admin Help - Set up automated user provisioning to third-party applications