Update Workspace Guests organizational unit settings

You must be signed in as a super administrator for this task.

Guest account invitations are turned on by default for your organization. Most Guests organizational unit settings are inherited from your top-level organizational unit. The table lists the default settings for guests in the Admin console.

You may be able to manage additional guest account features depending on your Google Workspace edition. Check Additional guest settings for more information.

Setting	Default configuration	Result
Workspace resource type visibility Menu Directory settings Workspace resource type visibility	No visibility	Guests cannot see your organization's Google Groups or domain shared contacts
Visibility settings Menu Directory Directory settings Visibility settings	No users	Guests cannot see other users in your organization's directory
Profile editing Menu Directory Directory settings Profile editing	Name	Guests can only update their name
SSO with third-party IDPs Menu Security SSO with third-party IDPs	OFF	Guests always sign in with Google and cannot use 3P IDPs
Account Recovery Menu Security Account Recovery	ON	Guests can recover their accounts using their primary email
Passwordless Menu Security Passwordless	OFF	Guests must always sign in with their password
API Controls Unconfigured third-party apps Menu Access and Data control > API Controls Settings Unconfigured third-party apps	OFF	Guests cannot access unconfigured third-party apps
Gmail automatic forwarding Menu Apps Google Workspace Settings for Gmail End User Access Automatic forwarding	OFF	Guests cannot automatically forward incoming emails from their guest account

Additional guest settings

The table lists additional controls that admins can apply to the Workspace Guests organizational unit depending on their Google Workspace edition. Compare your edition

	Business Starter	Business Standard	Business Plus	Enterprise Starter	Enterprise Standard	Enterprise Plus
DLP
Context-Aware Access policies
Trust Rules
Vault

Some additional features are not supported for guests, including:

• Mobile Device Management