Restricting Workspace access to Chrome users logged into Chrome with their Workspace accounts only.

[robert45]

I've been looking for this basic security feature for a long time. It seems like it should only be a flag setting that is required. The advantages are that your workspace users will have the Chrome extensions you deploy force installed and managed. This will enable us to push our Cloud DLP solution to the edge of the cloud, enforcing DLP through the browser. Right now we rely on Microsoft GPOs to enforce this security in our Google Workspace environment, that seems wrong somehow!

Does anyone else feel this would be a major security win for very little development effort?

[darpans]

Have you looked into Chrome Policies yet?

Reference: https://support.google.com/a/answer/1668854?hl=en

[robert45]

Yes, I looked at that. Unfortunately it works as a solution if all your users are on Chromebooks (which is great in the school environment.). However if we want to deploy our GATLabs Shield to protect all users it is not a solution. Users on PCs can still use Edge, Firefox, Safari, etc. to come in to workspace using their domain account and not be subjected to enforced protection.