Google Workspace Administrator Course

Lesson 1 • Google Workspace Editions and Licensing

Covers available editions, feature tiers, and licensing models. Establishes the commercial and functional baseline every admin must understand before configuring anything.

Lesson 2 • Core Services and Application Suite

Maps every core app—Gmail, Drive, Meet, Calendar, and more—to its admin-facing controls. Connects service awareness to later configuration tasks.

Lesson 3 • Organisational Roles and Responsibilities

Defines super admin, delegated admin, and end-user roles with their permission boundaries. Sets expectations for role-based access used throughout the course.

Lesson 1 • Managing Multiple Domains

Teaches adding alias and secondary domains, setting the primary domain, and managing cross-domain user access. Builds on single-domain setup for multi-brand organisations.

Lesson 2 • Domain Verification Methods

Walks through TXT record, HTML file, and CNAME verification options. Admins select the right method based on registrar access and site control.

Lesson 3 • Domain Registration and Ownership

Explains domain registrars, WHOIS records, and ownership transfer. Provides the registrar-side context needed before making DNS changes for Google Workspace.

Lesson 1 • Google Groups Administration

Teaches creating, configuring, and governing Google Groups for email distribution, access control, and collaboration. Groups extend OU-based policy to dynamic membership scenarios.

Lesson 2 • Creating and Managing User Accounts

Covers manual user creation, bulk CSV import, and profile attribute management. These skills form the foundation of all identity and access work in later chapters.

Lesson 3 • Organisational Units Structure

Explains how Organisational Units (OUs) segment users for policy application. OU design directly controls which settings apply to which users throughout the tenant.

Lesson 4 • Password and Recovery Policies

Configures password strength, expiration, and account recovery options at the OU level. Directly supports the security posture built upon in the security chapter.

Lesson 1 • Single Sign-On and Identity Federation

Explains SAML-based SSO configuration, IdP integration, and attribute mapping. Enables centralised authentication for organisations with existing identity providers.

Lesson 2 • Security Dashboard and Alerts

Navigates the Security Dashboard, alert center, and investigation tool to detect threats. Provides the monitoring foundation for incident response covered in later chapters.

Lesson 3 • OAuth App Management and Allowlisting

Controls which third-party OAuth apps can access Workspace data through allowlisting and blocking. Reduces the attack surface created by unvetted third-party integrations.

Lesson 4 • Two-Step Verification Enforcement

Covers enabling, enforcing, and monitoring 2SV across OUs and groups. Builds directly on user and OU management skills to apply authentication policy at scale.

Lesson 1 • Compliance and Content Rules

Creates content compliance rules, objectionable content filters, and email append policies. Enables organisations to enforce communication standards and data handling requirements.

Lesson 2 • Gmail Service Settings and Delegation

Manages Gmail features such as confidential mode, email delegation, and POP/IMAP access. Balances user productivity with organisational control over email client access.

Lesson 3 • Email Authentication Protocols

Implements DKIM signing, DMARC policies, and SPF alignment to authenticate outbound mail. Builds on DNS knowledge from Chapter 2 to protect domain reputation.

Lesson 4 • Spam, Phishing, and Malware Controls

Configures spam thresholds, phishing protection, and attachment scanning policies. Reduces exposure to email-borne threats across all users in the organisation.

Lesson 1 • Storage Quotas and Pooled Storage

Manages organisation-wide pooled storage, sets user quotas, and monitors consumption. Prevents storage exhaustion that would disrupt Drive, Gmail, and Photos services.

Lesson 2 • Data Loss Prevention Policies

Builds DLP rules using predefined and custom detectors to prevent sensitive data exfiltration via Drive and Gmail. Requires understanding of sharing settings established earlier.

Lesson 3 • Drive Audit Logs and Reporting

Uses Drive audit logs to track file access, sharing events, and ownership changes. Audit data supports compliance verification and incident investigation.

Lesson 4 • Shared Drive Administration

Creates and manages shared drives, membership roles, and migration from My Drive. Shared drives provide persistent, team-owned storage independent of individual accounts.

Lesson 1 • Device Inventory and Compliance Reporting

Reviews the device list, compliance status, and generates endpoint reports. Provides visibility needed to enforce context-aware access policies from Chapter 4.

Lesson 2 • Endpoint Management Modes

Compares fundamental, advanced, and Chrome device management modes and their enrolment requirements. Mode selection determines the depth of control available for each device type.

Lesson 3 • Chrome Browser and OS Management

Manages Chrome Browser Cloud Management and ChromeOS device policies from the Admin Console. Extends endpoint governance to browser-level controls for all managed devices.

Lesson 1 • Admin Audit Log Analysis

Queries admin audit logs to track configuration changes, login events, and delegated admin actions. Supports accountability and change management across the tenant.

Lesson 2 • Google Vault for E-Discovery

Creates Vault matters, holds, and exports to preserve and produce data for legal requests. Vault operates on top of the data governance controls established in Chapter 6.

Lesson 3 • Retention Rules and Policies

Configures default and custom retention rules for Gmail, Drive, Chat, and Meet recordings. Retention rules determine what data Vault can preserve and for how long.

Lesson 4 • Admin Console Reports Overview

Navigates usage, security, and audit reports built into the Admin Console. Establishes the reporting baseline before exploring advanced log export and Vault capabilities.