What data is covered by Access Management and Access Approvals?

To use Access Management and Access Approvals, you need the Google Workspace Assured Controls add-on. For details, speak to your sales representative.

As a Google Workspace administrator, you can set up Access Management to limit the Google staff who can take support actions related to your organization's data based on predefined attributes.

Access Approvals requires Google staff who can take support actions related to your organization's data to request approval before viewing data necessary for support.

Access Management and Access Approvals currently cover only the services listed below.

For more details, see the following help articles:

Note: Actions allowed through Access Management and Access Approvals are logged by Access Transparency.

Services and data covered by Access Management and Access Approvals

Primary data

Access Management and Access Approvals cover the primary data-at-rest, including backups:

Google Workspace core service Covered data
Gmail Subjects, bodies, attachments
Calendar Event titles, descriptions, locations
Chat Names, chat room titles, spaces
Message and topic bodies in both direct messages and chat rooms
User information (including name, email address, and chat room membership)

Note: For Chat to cover group messages, you must configure Access Management and Access Approvals at the top organizational unit (your whole organization). If Access Management and Access Approvals aren't needed for child organizational units, you can explicitly turn them off for those organizational units.
Drive Original file content uploaded to Drive
Google Docs, Forms, Sheets, Sites, Slides Contents of documents, including file body text, embedded images, embedded drawings, comments, and form responses

Note: Legacy Sites is not covered.
Gemini Prompts and responses

Note: Access Management and Access Approvals don't cover data for any editions, products, or services not explicitly stated above.

Backups

Google Workspace maintains backups of primary data for disaster recovery and business continuity. In rare cases, Google Workspace uses backups to restore data and maintain high reliability.

These backups aren’t available to restore data upon customer request. Backups expire (are overwritten) on defined timelines.

Related topics

Was this helpful?

How can we improve it?