Google Workspace Changes

Upcoming Changes to Microsoft Exchange Migrations

Beginning May 31, 2025, the legacy Data Migration Service will no longer support migrating email, calendar, and contact data from Microsoft Exchange on-premises servers.

Legacy Data Migration Service will no longer support migrating data from Microsoft Exchange on-premises servers after May 31, 2025. Use Google Workspace Migration for Microsoft Exchange (GWMME) instead.

Beginning May 31, 2025, the legacy Data Migration Service will no longer support migrating email, calendar, and contact data from Microsoft Exchange on-premises servers (e.g., Exchange 2010, 2013, or 2016). Admins will not be able to start new migrations after May 31, 2025 – migrations that are in progress will continue until completion. Instead, admins can use the Google Workspace Migration for Microsoft Exchange (GWMME) data migration tool to perform these migrations. We highly recommend all admins to start leveraging Google Workspace Migration for Microsoft Exchange as soon as possible.

Starting in March 2025, admins who have Additional Services enabled for users under the age of 18 to re-review them on an annual basis.

Admins are in control of which services their users have access to, and to do so in alignment with both our terms of service and local laws and regulations that determine what services are appropriate for users under 18. Since admins manage which services their students have access to, only they can enable or disable access for their under 18 users.

Starting in March 2025, admins who have Additional Services enabled for users under the age of 18 to re-review them on an annual basis.

Admins are in control of which services their users have access to, and to do so in alignment with both our terms of service and local laws and regulations that determine what services are appropriate for users under 18. Since admins manage which services their students have access to, only they can enable or disable access for their under 18 users.

Consent re-confirmation for under 18 users accessing Additional Services will soon be required

Admins are always in control of which services their users have access to, and this gives admins an opportunity to ensure the right users have access to the right services.

The Policy API is now generally available, enabling super admins to audit security settings for Calendar, Gmail, and MFA.

The Policy API has transitioned from open beta to general availability, allowing super admins to programmatically access and audit Google Workspace environment service level settings and rules. This update expands auditing capabilities to include Calendar, Gmail, and Multi-factor authentication (2-Step Verification) settings. The API streamlines security management and integrates with CISA's SCuBA project to help organizations align with secure configuration baselines using tools like ScubaGoggles.

The Policy API is now generally available with support for auditing more security features

Admins can now use the API to audit more settings, specifically: Calendar, Gmail, Multi-factor authentication settings (2-Step Verification)

Developers can now add client-side form field validation to Google Workspace add-ons and Google Chat app cards.

Google Workspace add-ons and Chat app developers can now implement client-side input validation to improve data accuracy and user experience. The card UI now supports required form field validation for date-time pickers, multi-select menus, drop-down menus, and text input widgets via the Action API. Additionally, the Validation API now allows for input type, format, and length limit validation for text inputs, supporting types such as text, integers, decimals, email, and emoji.

help admins better understand how security policies affect their users' access to OAuth apps

This includes settings and policies such as API controls, endpoint management configurations, domain wide delegation and more.

Admins can now use tokens in the app configurations for managed iOS apps

Tokens act as placeholders for information specific to a user or device that uses the app, such as a user's email address or their device serial number.

Gemini AI features are now included in Workspace Business and Enterprise plans.

Google is integrating its generative AI capabilities, Gemini, directly into Workspace Business and Enterprise plans, removing the need for a separate add-on. This expansion includes AI-powered writing, summarizing, and content creation tools across Gmail, Docs, Meet, Drive, Sheets, Slides, and Chat, as well as access to Gemini Advanced and NotebookLM Plus. The rollout begins for Business editions on January 15, 2025, and for Enterprise editions on January 29, 2025.

limit third-party app access to specific OAuth 2.0 scopes for Google APIs

This prevents apps from gaining additional access without admin consent, even if they request new API scopes in the future. This helps ensure data access is restricted to only what admins deem necessary.

allow educators to request access to unconfigured third-party apps on behalf of their students

etting for admins to now allow educators and users who are over 18 years of age to request access to apps for themselves or on behalf of others (proxy requests).

Introducing a new workflow that allows educators to request access to unconfigured third-party apps on behalf of their students.

Administrators can now allow a group of trusted users to vet and request third party app access on behalf of other users. This allows admins to better control who requests access and create a more streamlined process for app approvals.

Educators can now request access to third-party apps on behalf of their students.

Google Workspace for Education is introducing a new workflow that allows educators and users over 18 to request access to unconfigured third-party apps on behalf of students (proxy requests). Admins can designate trusted users to vet these apps and manage the requests within the Admin console under Security > API Controls > App Access Control, where proxy requests are clearly labeled. This process streamlines app approvals and provides administrators with better control over who can request access for others.