Context-aware access controls are available for Gemini Enterprise

Context-aware access controls are available for Gemini Enterprise in the Admin console

To help organizations elevate their security posture, we are introducing context-aware access (CAA) policies in the Admin console for Gemini Enterprise. Google Workspace administrators can select granular security attributes for Gemini Enterprise access, including device security and location settings that can be applied to personal and managed devices.

For example, an administrator can create a CAA policy that restricts access to Gemini Enterprise from specific geographic regions. Organizations can also reuse their existing policies that apply to Workspace apps by also applying them to Gemini Enterprise.

Context-Aware Access settings for Gemini Enterprise in Admin console

Getting started

Admins: Context-Aware Access for Gemini Enterprise can be configured at the organizational unit (OU) or group level. Visit the Help Center to learn more about Context-Aware Access, creating Context-Aware Access levels, and assigning Context-Aware Access levels to apps.
End users: If enabled by your admin, you can access Gemini Enterprise when authenticating using your Google sign-in. If your organization’s Context-Aware Access settings are not set to allow access, you may see a message letting you know that you cannot use Google sign-in to authenticate with Gemini Enterprise, or you may see remediation messages which will provide some options on how to unblock Gemini Enterprise.

Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on September 8, 2026, with expected completion by September 15, 2026

Availability

Enterprise: Enterprise Standard, and Plus
Education: Education Standard, and Plus
Other: Frontline Standard and Plus; Enterprise Essentials Plus; Cloud Identity Premium

Note: You will need to have purchased Gemini Enterprise to apply Context-Aware Access policies for your users.

Resources

Google Workspace Admin Help: Assign Context-Aware Access levels to apps
Google Workspace Admin Help: Protect your business with Context-Aware Access

Yes, Google Workspace administrators can now use context-aware access (CAA) controls for Gemini Enterprise directly within the Admin console. This capability allows organizations to enforce granular security policies for accessing Gemini Enterprise based on user and device parameters. [1, 2]

Key Capabilities

Granular Security Attributes: Administrators can control access based on specific conditions, including device security status, geographical location, IP address, and user identity.
Location-Based Restrictions: You can restrict access to Gemini Enterprise from specific geographic regions or IP subnets.
Policy Reuse: Organizations can reuse their existing Google Workspace app policies and apply them seamlessly to Gemini Enterprise.
Flexible Target Controls: CAA policies for Gemini Enterprise can be configured at the organizational unit (OU) or group level. [1, 2, 3]

How Admins Get Started

Access the Controls: Sign in to the Google Workspace Admin Console.
Navigate to Settings: Go to Apps > Google Workspace > Generative AI to find the Gemini Enterprise configuration.
Assign Access Levels: Go to Security > Access and data control > Context-Aware Access to build or assign your specific security attributes. [4, 5]

Note: This feature began a gradual rollout on September 8, 2026, for both Rapid Release and Scheduled Release domains, with full visibility expected by September 15, 2026. [6]