April 29, 2024

Google Workspace Administrator

A Professional Google Workspace Administrator transforms business objectives into tangible configurations, policies, and security practices as they relate to users, content, and integrations. Through their understanding of their organization’s infrastructure, Google Workspace Administrator enable people to work together, communicate, and access data in a secure and efficient manner. Operating with an engineering and solutions mindset, they use tools, programming languages, and APIs to automate workflows. They look for opportunities to educate end users and increase operational efficiency while advocating for Google Workspace and the Google toolset.

The exam is 2 hours long and costs $200.

Exam Content & Outline – What Will You Be Tested On?

There are FIVE main crucial capabilities that the exam will test you on:

  1. Object management
  2. Service configuration
  3. Troubleshooting
  4. Data access and authentication
  5. Support business initiatives

Let’s look at each of these in more detail and find out what exactly to study in order to be certified as a Professional Google Workspace Administrator.

Object Management

  1. Manage user lifecycles with provisioning and deprovisioning processes
    • Adding users (individual, bulk, automated)
    • Removing users (suspending, deleting, recovering)
    • Editing user attributes (renaming, passwords, aliases)
    • Creating administrative roles (default roles, custom roles)
  2. Configure shared drives
  3. Manage calendar resources
  4. Configure and manage Google Groups for Business
    • Configuring Google Groups
    • Adding users to groups
    • Implications of current Google Workspace APIs to development efforts
    • Using Apps Script to automate tasks

Service Configuration

  1. Implement and manage Google Workspace configurations based on corporate policies
    • Managing company profile settings
    • Modifying OU policies
    • Managing rollout of new Google functionality to end users
    • Troubleshooting Google Workspace services (performance issues for services suite, apps for OUs)
    • Scanning email with Data Loss Prevention (DLP)
    • Managing content compliance rules
    • Configuring security and data region
    • Monitoring security health check
    • Configuring security settings
    • Creating security records
    • Designing security integration and addressing objections
  2. Demonstrate how to set up and configure Gmail
    • Enabling email delegation for an OU
    • Managing Gmail archives

Troubleshooting

  1. Troubleshoot user reports of mail delivery problems
  2. Collect log files or reports needed to engage with support
  3. Classify and mitigate basic email attacks
    • Configuring attachment compliance
    • Configuring blocked senders
    • Configuring email allowlist
    • Configuring objectionable content
    • Configuring phishing settings
    • Configuring spam settings
    • Managing admin quarantine
    • Configuring Secure Transport compliance
    • Configuring safety settings
  4. Troubleshoot workspace access and performance

Data Access and Authentication

  1. Configure policies for all devices (mobile, desktop, ChromeOS, Meet, Chrome Browser)
    • Company-owned vs. personal devices
    • Configuring personal device settings (password, Android, iOS, advanced, device approvals, app management, insights)
  2. Configure and implement data governance policies
  3. Describe how to manage third-party applications
    • Configuring third-party SSO for Google Workspace
    • Integrating with third-party for provisioning
    • Integrating third-party marketplace apps to specific OUs in Google Workspace
    • Granting API access to applications that need access
    • Revoking third-party author access
    • Removing connected applications and sites
  4. Configure user authentication
    • Basic user security controls (password length enforcement, 2-step verification)
    • Security aspects of identity, perimeter security, and data protection

Support Business Initiatives

  1. Use Vault to assist legal teams
    • Setting retention rules (placing legal holds, searching your domain’s data by user account/OU/date/keyword, exporting data for additional processing and review, auditing reports)
    • Holding and exporting data
    • Running Vault audit reports
  2. Interpret reports for the business
  3. Describe how to import and export data

Recommended Study Materials

  1. Books