Available in open beta: configure third-party apps by select API scopes
When your users sign in to third-party apps using the "Sign in with Google" option or use OAuth to share their data with those apps, you can control what access those apps have to your organization’s Google data using app access controls. Google is giving admins another layer of granular control for third-party apps. You can now configure apps to be limited by selecting OAuth 2.0 Scopes for Google APIs, such as Drive or Gmail scopes. This helps ensure that these apps do not gain additional access without admin consent based on new API scopes that they might request in the future.
Educators can now create new classes in Google Classroom using SIS data and import grading periods from the SIS
Teachers now have the ability to create new classes in Classroom by importing information such as student rosters, co-teachers, grading categories, and grading periods from their student information systems (SIS). Teachers can also pull this information into newly created classes in Classroom. Along with this, Google is launching the ability for teachers to import their grading periods from their SIS into Classroom.
Prevent downloading, printing, or copying files by combining Data Loss Prevention rules with Context-Aware Access conditions
Controlling access to sensitive content stored in Google Drive is a critical component for any company's security posture. Google is expanding protections by enabling admins to combine data loss prevention rules with Context-Aware Access conditions. When combined, admins can configure if Information Rights Management should be enforced based on context conditions, such as a user’s location or IP address.