You can control whether Google Workspace users can use Gemini Enterprise agents and if the agents can access your Workspace data. If you allow access to a specific agent using the management list, that agent's settings override any settings you make for all agents. For example, you could turn off access to agents but allow access to only certain agents using the management list.
Turn access to Gemini Enterprise agents on or off
In the Google Admin console, go to Menu
Security
Agent access controls Settings.
Requires having the Security administrator
privilege On the Default access for Gemini Enterprise agents tab, select an option:
- (Default) Allow agent access—Workspace users can use Gemini Enterprise agents, and agents can request access to any Workspace data.
- Don't allow agent access—Workspace users cannot use Gemini Enterprise agents, and agents cannot access Workspace data.
Click Save.
How related Admin console settings work together
- Service status is off—Workspace users can't use Gemini Enterprise or its agents. The steps to turn access to agents on or off (above on this page) have no effect.
- Workspace data access for the Enterprise edition is on, but you don't
allow users to access Gemini Enterprise agents:
- Workspace users can use Gemini Enterprise features that are not agents.
- Gemini Enterprise features that are not agents can access Workspace data.
- Workspace users can't use Gemini Enterprise agents, and agents cannot access Workspace data.
- Workspace data access for Business and Enterprise editions is off, but
you allow users to access Gemini Enterprise agents:
- Workspace users can use Gemini Enterprise and its agents, except for agents on the management list with specific restrictions.
- Gemini Enterprise features, including agents, aren't able to access Workspace data.