Last Attempt Google-Workspace-Administrator Questions

Step by Step Comprehensive Detailed Explanation:To comply with the company's Information Security policy while granting provisional access to a new Marketplace app, follow these steps:

Add the Marketplace App: Start by adding the requested app to your Google Workspace Marketplace.

Review Authorized Scopes:

Go to the Admin console.

Navigate to Security > API controls > Manage third-party app access.

Add the app and review the scopes it requests. Ensure it doesn’t request permission to read or manage emails.

Compliance Steps:

Restrict Access: Configure the app to be accessible only to the specific individuals as per the request.

Immediate Notification: Inform the Infosec team immediately about the provisional access granted.

Security Risk Analysis Report: Prepare and submit a security risk analysis report within 14 days, detailing the app’s functionality and security implications.

Verification: Ensure that the Gmail setting "Let users delegate access to their mailbox" is disabled if the app’s authorized scopes are compliant with the policy.

References:

Manage third-party app access to Google Workspace data

Google Workspace Security: API Controls

Create a Google Group:

Go to the Google Groups interface.

Click on "Create Group."

Enter the group name, email address (e.g., sales@company.com), and description.

Configure Group Settings:

After creating the group, go to "Group settings."

Under "Permissions," set who can view topics, post, and join the group as per your requirement.

Set Up Collaborative Inbox:

In the Group settings, navigate to "Settings" > "Email options."

Check the box for "Enable Collaborative Inbox."

This option allows group members to assign topics, mark them as resolved, and categorize posts for better management.

Assign Roles and Permissions:

Define roles for members (e.g., Manager, Member).

Assign permissions to allow various levels of access, such as viewing and managing conversations.

Add Members:

Add the employees who need access to this group.

Go to "Manage members" and click "Add members."

References:

Google Groups Collaborative Inbox

Create and Configure Google Groups

Step by Step Comprehensive Detailed Explanation:

Access Google Vault: Sign in to Google Vault.

Retention Policies: Navigate to "Retention" from the side menu.

Create New Retention Rule: Click on "Create retention rule."

Set Duration: Set the retention period to 30 days.

Apply to OU: Apply this retention rule specifically to the organizational unit (OU) for the customer support department.

Exclude Default Rule: Ensure that this custom rule overrides the default 365-day retention policy for the customer support OU.

Save and Activate: Save the rule and ensure it is activated.

References:

Google Vault Help: Set retention rules

To configure access for users such that they can add, edit, and move documents into the shared drive but not remove or delete files, you should add the users as Content Managers of the drive. Content Managers have permissions to organize and manage content, including adding and editing files, but they cannot delete files, which aligns with the team's request.

References:

Google Workspace Admin Help - Shared drives access levels