As an Administrator, you can view and manage several security settings for a user. Click on each security setting to learn more:
In this exercise, you will practice configuring common security settings.
Please note that part 1 of this exercise requires you to have completed The Data Export tool exercise in the Google Workspace Data Governance course, where you turned on 2-Step Verification (2SV).
You start the day with a phone call from Lars. He tells you he just got to the office when he realized he forgot his security key! He needs you to generate a backup verification code so he can log in to his laptop.
Generate backup codes for Lars
Step 1
If you’re not already signed in, sign in to your domain as the Administrator at admin.google.com.
Step 2
From the main menu, navigate to Directory, and then select Users.
Step 3
In the Users list, click on Lars’s name to open their account page.
Step 4
Click on the Security tab.
Step 5
To view the user's backup verification codes, click 2-Step Verification, and then select Get backup verification codes.
Step 6
Select Generate new codes. The old set of backup codes automatically become inactive.
Step 7
At this point, you would send an email to Lars to follow the instructions stated in the Help Center article titled Sign in using backup codes.
Alex has sent a follow up email with a couple of further requests.
Part 1: Disable access to less secure apps for the Contractors OU
Step 1
From the main menu of the Admin console, navigate to Security, then select Overview.
Step 2
Click on the Less secure apps section.
Step 3
Select the Contractors organizational unit.
Step 4
Click the radio button next to Disable access to less secure apps (Recommended).
Step 5
Click SAVE.
-- --
Part 2: Make the Sales group a security group
Step 1
From the main menu, navigate to Directory. Then select Groups.
Step 2
From the list of groups, click on Sales. Then select Group Information, and click Group labels.
Step 3
Check the Security box.
Step 4
Click SAVE.
Creating new verification codes invalidates any existing code. For example, if you created a user's verification code using the Admin console and then generate a new verification code using the verification codes, the previous set of codes is invalidated and vice versa.
Non-Google accounts cannot be added to Security groups since the security practices of external service providers cannot be verified.
Explore more about configuring common security settings in the Google Workspace Admin Help Center.