Turn Gemini Enterprise on or off for users

As an administrator, you can control who uses Gemini Enterprise. You can turn on Gemini Enterprise on for everyone in your organization, specific organizational units, or specific groups. Users who have Gemini Enterprise turned on can use Gemini Enterprise agents in the side panel, Gemini Enterprise assistant, and Gemini CLI.

Control who uses Gemini Enterprise in your organization

Before you begin: To turn a service on or off for certain users, put their accounts in an organizational unit (to control access by department) or add them to an access group (to allow access for users across or within departments).

  1. In the Google Admin console, go to Menu and then Generative AI and then Gemini Enterprise. Requires having the Service Settings administrator privilege.
  2. Click Gemini Enterprise.
    1. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced).

      Group settings override organizational units. Learn more

  3. Click Service status.
  4. To turn a service on or off for everyone in your organization, click On for everyone or Off for everyone, and then click Save.
  5. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced).

    Group settings override organizational units. Learn more

Changes can take up to 24 hours but typically happen more quickly. Learn more

Allow Gemini Enterprise – Business edition users to share chats with trusted external domains

Gemini Enterprise – Business edition only.

You can turn chat sharing on and off with trusted domains based on the management allowlist.

  1. In the Google Admin console, go to Menu and then Generative AI and then Gemini Enterprise and then Business edition. Requires having the service administrator privilege.
  2. Click Sharing options.
  3. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced).
    Group settings override organizational units. Learn more
  4. Select:
    • Off—Chats can be shared with all domains associated with your Google Workspace organization, including primary and secondary domains configured under Account Settings. Chats can't be shared outside of the organization.
    • Share with allowlisted domains—Chats can be shared with accounts in the domains in the allowlist. For details, go to, Allow sharing with only trusted domains.
      • (Optional) Click Edit to modify the list of allowlisted domains.
    • On—Chats can be shared outside of your organization's domains.
  5. Click Save.
Changes can take up to 24 hours but typically happen more quickly. Learn more

Control Gemini Enterprise access to Workspace data

As an administrator, you can manage how Gemini Enterprise accesses your organization's data in Google Workspace.

Gemini Enterprise empowers teams to discover, create, share, and run AI agents all in one secure platform.

Gemini Enterprise - Business, Standard and Plus editions can separately connect to Workspace and read data in services like Gmail, Drive, and Google Calendar. You can choose to decide if Gemini Business and Enterprise can independently access this data.

Allow Gemini Enterprise - Business edition access to Workspace apps

Before you begin: To turn a service on or off for certain users, put their accounts in an organizational unit (to control access by department) or add them to an access group (to allow access for users across or within departments).
  1. In the Google Admin console, go to Menu and then Generative AI and then Gemini Enterprise. Requires having the service administrator privilege.
  2. Click Business Edition to enable Business Edition and its agents to access Workspace Data to take actions and generate responses. a. Check or uncheck Allow Gemini Enterprise to access Google Workspace data. b. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced).
    Group settings override organizational units. Learn more
  3. Click Save.
Changes can take up to 24 hours but typically happen more quickly. Learn more

Allow Gemini Enterprise - Standard and Plus edition access to Workspace apps

  1. In the Google Admin console, go to Menu and then Generative AI and then Gemini Enterprise. Requires having the service administrator privilege.
  2. Click Standard, Plus, Frontline to enable these editions and their agents to access Workspace Data to take actions and generate responses. a. Check or uncheck Allow Gemini Enterprise to access Google Workspace data. b. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced).
    Group settings override organizational units. Learn more
  3. Click Save.
Changes can take up to 24 hours but typically happen more quickly. Learn more

The GCP Terms of Service and Google Cloud privacy notice apply to Gemini Enterprise - Frontline, Standard and Plus editions.

The Google uToS, Google Privacy Policy and Business Edition Additional Terms of Service

Specific to Workspace customers, the usage of Gemini Enterprise Frontline, Gemini Enterprise Standard, Gemini Enterprise Plus, and Gemini Enterprise Business are consistent in that:

  • You own your data, not Google.
  • Your data—including prompts, outputs, and training—isn't used to train Google models or models for any other customer.
  • Google never sells customer data to third parties.

Next steps

To learn more, go to Gemini Enterprise.