Click here for the official Google Workspace website
What is the Admin console?
The Admin console (admin.google.com) is a dashboard that centralizes the management of all Google Workspace users and settings. IT administrators use it to apply security policies, manage licenses, check audit logs, and more. From 2025, AI-powered security features have been enhanced.
Adding and Deleting Users
Adding Users
- Admin console → "Users" → "Add a new user"
- Set the name, email address, and temporary password
- Select an Organizational Unit (OU) and click "Add"
- A license will be automatically assigned
Deleting Users (Offboarding)
- Select the target user from "Users"
- Click "Delete user"
- Specify the user to transfer data to (inherit email and Drive data)
⚠️ Data can be restored for 20 days after deletion. Do not delete offboarded accounts immediately; incorporate a workflow to delete them after data verification.
Utilizing Organizational Units (OUs)
By using Organizational Units, you can apply policies per department. For example, settings like "Allow external Drive sharing only for Sales Department," "Require MFA security key for executives," and "Allow Google Cloud access for Development Department" are possible.
Key Security Settings
Enforcing 2-Step Verification (MFA)
- "Security" → "2-Step Verification"
- Select "Enforce 2-Step Verification"
- Select the Organizational Unit to apply to and save
Recommendation: Require security keys (e.g., YubiKey) for administrator accounts
Password Policy
- Minimum character length setting (Recommended: 12 characters or more)
- Prohibit password reuse
- Set expiration date (90-180 days)
Added October 2025: AI-powered Ransomware Detection
An AI-powered ransomware detection feature has been added to Google Drive. When ransomware spread patterns are detected, it sends alerts to administrators and assists in restoring files to their pre-infection state.
Security Center
From "Security" → "Security Center" in the Admin console, you can check your organization's overall security status on a dashboard. Improvement advice is displayed for high-risk settings.
Important Change in January 2026: POP3 Support End
As of January 2026, support for receiving emails from other accounts via POP3 in the Gmail web client has ended. If you were consolidating emails from other mail services into Gmail, a complete migration to Gmail or a switch to IMAP is required. Organizations that have not yet migrated should check the affected users in the Admin console and take action.
Suspicious Login Alerts
You can check users for whom login anomalies have been detected under "Reports" → "Security." When suspicious access from abroad or logins at unusual times are detected, promptly investigate.
License Management
You can check and change the number of licenses under "Billing" → "Subscriptions." After deleting offboarded accounts, reduce unnecessary licenses to optimize costs. Since Business Starter is ¥800/user/month on an annual contract, having 10 unused licenses can save approximately ¥96,000 per year.
Endpoint Management (Mobile Device Management)
From "Devices" → "Mobile device management," you can manage Google Workspace access from smartphones.
- Remote wipe (data erasure) in case of loss or theft
- Selective wipe to erase only company data
- Enforce password and encryption on devices
Summary
The top priority setting in the Admin console is "Enforcing 2-Step Verification for all users." Next, enable "AI ransomware detection," perform "regular checks of the Security Center," and confirm your readiness for the POP3 deprecation in January 2026.
▶ Check details and free trials on the official Google Workspace website