Google Workspace Admin 常用設定/管理的整理

Overview

本篇文章主要是在準備 Professional Google Workspace Administrator 考試時，使用官方教材所截錄出來的考試範圍(官方文件)，另外也是企業剛導入 Google Workspace 時常見的設定，包括如何搬遷 AD、新增/管理使用者、管理企業資源、Google Workspace的安全設定、Gmail的郵件管理和安全設定…等等。

Introduction to Google Workspace Administration

以下主要是介紹了帳戶設置、使用者管理和組織結構等基本概念。

Account setup 🔥

• Protect your domain 🔥
• Set up MX records for Google Workspace email 🔥
• About Sender Policy Framework(SPF) record

Adding users

• Add an account for a new user
• Add or update multiple users from a CSV file

Adding groups

• Groups 🔥
• Create a group
• Add or invite users to a group
• Get started managing groups for an organization 🔥

Calendar resources

• Use Google Calendar structured resources

Managing users

• Manage or delete Google Workspace users in Google Domains 🔥

Organizational structure

• Add an organizational unit 🔥
• Move, rename, or delete an organizational unit
• Move users to an organizational unit

Google Workspace Directory

• Turn Directory on or off 🔥
• Add information to a user’s Directory profile
• Let Directory users change their profile photo and information
• Add employee ID as a login challenge 🔥
• Customize a directory for a team or group

Administrator roles

• Make a user an admin 🔥
• Create, edit and delete custom admin role 🔥

Managing Google Workspace

「Managing Google Workspace」 主要是服務管理、裝置管理、資料備份和還原等。

Preparing your Google Workspace domain 🔥

• Protect your domain
• Set up MX records for Google Workspace email
• About SPF
• Add an organizational unit
• Add or update multiple users from a CSV file

Managing services 🔥

• Use groups to customize service access
• Choose when users get new features
• Turn on or off new services by default

Gmail

• Configure all Gmail settings for your users
• Add a standard footer to users' outbound messages
• Set up rules for basic email content filtering 🔥

Calendar

• Set Calendar visibility & sharing options
• Test scheduling resources

Drive and Docs

• Set Drive users' sharing permissions
• Share and work with others
• Restore a deleted user's Drive files 🔥
• Transfer Drive files to a new owner 🔥
• Find or recover a file 🔥
• Recover deleted files and folders for Drive users
• Work on Google Docs, Sheets, & Slides offline
• Compare Backup and Sync & Google Drive for desktop
• Use Google Drive for desktop at home, work, or school

Shared drives

• Manage shared drives 🔥
• Move content to a shared drive
• Restore deleted shared drives or their files

Device management

• Apply settings for Android mobile devices
• Approve, block, unblock, or delete a managed device
• Set up advanced mobile management
• Add company-owned devices to the inventory 🔥

Google Vault 🔥

• Set up Vault for your organization
• Get started with Vault search and export

Reporting

• Highlights report
• View Apps reports on your organization
• User reports: Accounts
• Check audit logs 🔥
• Manage rules to set up alerts and actions 🔥

Email log search

• Track message delivery with Email Log Search
• View Email Log Search result details
• Interpret Email Log Search results

Domains 🔥

• Limitations with multiple domains
• FAQ for multiple domains
• Allow external sharing with only trusted domains

Import and export

• Migrate your organization’s data to Google Workspace 🔥
• Export your organization’s data
• How to download your Google data

Google Workspace Mail Management

「Google Workspace Mail Management」 主要是電子郵件安全、垃圾郵件防護和郵件路由等主題。

Domain Name System (DNS)

• Set up MX records for Google Workspace email
• Avoid email bouncing from new MX records 🔥
• Troubleshoot MX records 🔥
• Google Admin Toolbox 🔥

Enhancing email security (SPF, DKIM, and DMARC)

• About SPF
• Set up DKIM to prevent email spoofing 🔥
• About DMARC 🔥

Email safety and end-user access

• Use the security dashboard
• Turn POP and IMAP on and off for users
• Set up an image URL proxy whitelist
• Use Gmail offline with Google Workspace

Prevent spam, phishing, and malware 🔥

• Add IP addresses to allowlists in Gmail
• Block messages from an email address or domain
• Customize spam filter settings in Google Workspace

Compliance rules 🔥

• Set up rules for advanced email content filtering
• Scan your email traffic using DLP rules
• Set up rules for objectionable content 🔥
• Set up and manage email quarantines 🔥

Mail routing

• Add mail routes for advanced Gmail delivery
• Email routing and delivery options for Google Workspace

Google Workspace Security

「Google Workspace Security」主要為帳戶安全、兩步驗證和SSO登入等。

Common security settings 🔥

• Set up password recovery for users
• Protect your business with 2-Step Verification
• Control access to less secure apps
• Enforce and monitor password requirements for users
• Create a strong password & a more secure account
• Allow super administrators to recover their password
• Manage a user’s security settings
• Security checklist for medium and large businesses (100+ users)

2-Step verification

• Deploy 2-Step Verification
• Protect your account with 2-Step Verification
• Signing in with 2-Step Verification

Single Sign-On (SSO) 🔥

• Pre-integrated SAML apps catalog
• Set up your own custom SAML application
• Set up single sign-on for managed Google Accounts using third-party Identity providers
• Secure LDAP: Connect LDAP-based apps and services

Application security

• Developer products and the Google Workspace Admin SDK 🔥
• Control which third-party & internal apps access Google Workspace data
• Using OAuth 2.0 to Access Google APIs

Google Workspace Marketplace

• Evaluate a Google Workspace Marketplace app
• Help your users open a Google Workspace Marketplace app

Security tools

• View and manage alerts in the alert center

Security center

• About the security center

結語

本文主要是準備 Professional Google Workspace Administrator 考試時對於較重要設定的筆記和學習資源整理，如果你喜歡這篇文章歡迎幫我按愛心鼓勵一下喔!~閱讀愉快!~