[MUSIC PLAYING]
DAN MONTGOMERY: Welcome to the Google Cloud Security Showcase,
a special web series where we'll focus on security use cases
that customers can solve with G Suite and Cloud Identity.
My name is Dan, and I'm a program manager
at Google Cloud.
Today we'll be walking through one of the top questions
we get from customers--
how can I control access to sensitive information
based on the attributes of users or devices?
Let's jump into the demo.
Here we have a G Suite user named Bob.
Bob is working in Gmail on his MacBook Pro.
We can see that he has a Chrome extension called
Endpoint Verification that was installed
by his administrator, Dan.
In the Admin panel, Dan can see a list
of all devices that are running Endpoint
Verification and certain characteristics about them.
Here we see Bob is running on a MacBook Pro, 10.14.5.
Dan finds out there's a security flaw in 10.14.5
and wants to protect his fleet by ensuring
they can't access corporate resources unless they upgrade
to 10.14.6.
G Suite has a feature called Context Aware Access,
where Dan can create access levels based
on different attributes.
For example, here's an access level
that requires minimum OS version to be 10.14.6.
Dan will then apply that access level to Gmail.
There are a variety of different attributes
that can be used in access levels.
For example, here's an access level
that was created using the IP subnet.
This is a great use case for when workers are outside
of the corporate environment.
Dan can block apps, such as Drive, Calendar,
and other G Suite apps.
Other attributes that are available from Endpoint
Verification includes device encryption and password status.
When Bob goes to use Gmail again,
because he is not using 10.14.6, he is denied access.
This is Context Aware Access for G Suite.
Thank you for tuning in.
Please visit cloud.google.com/security
for more content from Google Cloud experts.
[MUSIC PLAYING]