Security News > 2024 > April > New Google Workspace feature prevents sensitive security changes if two admins don’t approve them

Google is rolling out multi-party approvals for Google Workspace customers with multiple super admin accounts, the company has announced.

The multi-party approvals feature is one of many that were announced by the Google Workspace team in August 2023.

If the feature is enabled, certain sensitive admin actions can be taken only if approved by an admin who did not initiate them and thus, in theory, preventing accidental or unauthorized changes made by either malicious insiders or outsiders that have managed to compromise an admin account.

Admins can view details about each approval request before allowing or denying it.

"Multi-party approvals makes super admins aware of what changes are being attempted and gives them the opportunity to accept or reject these sensitive actions. Additionally, this is more convenient for admins because the action is executed automatically after approval and the requester doesn't need to take additional action."

The sensitive admin actions that can require additional approval include changes to 2-step verification and account recovery policies, Advanced Protection and Google session control settings, account login challenges, and the login-via-passkey option.

News URL

https://www.helpnetsecurity.com/2024/04/09/google-workspace-multi-party-approvals/