Manage access to steps and starters in Workspace Studio

Supported editions for this feature: Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus; Education Fundamentals, Education Standard and Education Plus. Compare your edition. Supported add-ons for this feature: Google AI Ultra for Business, Google AI Pro for Education. Compare add-ons

As an administrator, you can control which steps and starters people in your organization can use to create agents in Google Workspace Studio. Some steps, such as Send a webhook, certain Google Workspace add-on steps, and Google Workspace integrations steps, can share data with third-party apps and services.

You can control access for the following:

• Gemini for Google Workspace steps
• Send a webhook step
• Google Workspace add-on steps
• Google Workspace integrations steps
• Workspace service-specific steps

Allow or block Gemini for Google Workspace steps

Supported editions for this feature:Enterprise Standard and Enterprise Plus; Teaching and Learning Upgrade and Education Plus; Google AI Pro for Education, and Google AI Ultra for Business. Compare your edition

Users designated as under 18 can’t use AI features in Workspace Studio.

Note: AI features in Workspace Studiofollow the privacy principles in the Generative AI in Google Workspace Privacy Hub.

1. In the Google Admin console, go to Menu  Generative AIGemini for Workspace.

   Go to Gemini for Workspace

   You must be signed in as a super administrator for this task.

2. Click the Feature access panel.
3. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

4. Next to Workspace Studio, click Edit.
5. Click On or Off.
6. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit (or Unset for a group).

When Gemini for Google Workspace is turned off for Workspace Studio, people can’t do the following:

• Create agents from a prompt.
• Use AI steps. Any active agents that have AI steps in them stop working.

Allow or block Send a webhook

Only supported for customers enrolled in the Gemini Alpha program.

Webhooks allow agents to send or receive data with an external link or API. The webhook step lets people connect to internal and external resources that aren’t directly supported by Workspace Studio. However, people must be careful sharing your organization’s data externally.

1. In the Google Admin console, go to Menu  AppsGoogle WorkspaceWorkspace Studio.

   Go to Workspace Studio

   Requires having the Service Settings administrator privilege.

2. Click Webhooks settings.
3. (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how
4. Choose an option.
5. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit. 

Allow or block Google Workspace add-on steps

Google Workspace add-on steps are custom steps created by developers in your organization or third parties. Workspace Studio users can add variables to add-on steps that contain your organization’s Google Account data, such as the contents of a message in Gmail or Chat, a document in Drive, or event information from Calendar. The flow can then share that data with the third-party add-on owner. Learn more about custom steps

Add-on steps are installed through the Google Workspace Marketplace. You manage these steps just like any Google Workspace add-on that’s published in Marketplace. You can:

• Install add-on steps from Marketplace for your organization
• Set whether users can install Marketplace add-ons

Allow or block Workspace Integrations steps

Workspace Integrations are similar to Google Workspace add-on steps except that they are developed by third-party Google partners and Google. They allow Workspace Studio and Gemini to connect to apps like Jira, Asana, and Mailchimp and easily exchange data.

Workspace Integrations are managed like any Google Workspace add-on that’s published in Marketplace. You can:

• Install Integrations steps from Marketplace for your organization
• Set whether users can install Marketplace add-ons

Allow or block Workspace service-specific steps

People must have access to a Workspace service in order to use starters and steps for that service. For example, if Google Chat is turned off for your organization, people can’t use Chat steps in their agents.

To allow or block users from using agents that take action in specific Google Workspace services without turning off those services, you can use API controls. You might also need to update your Context Aware-Access levels assigned to these apps.

Note: AI features in Workspace Studiofollow the privacy principles in the Generative AI in Google Workspace Privacy Hub.

Allow Workspace app steps

1. Follow the instructions in Control which apps access Google Workspace data to set the following apps as Trusted. Also check the Exempt from having API access blocked by Context-Aware Access levels box if your organization assigns Context Aware-Access levels to apps.
   • Drive for Workspace Studio
   • Gemini for Workspace Studio
   • Gmail for Workspace Studio
   • Google Calendar for Workspace Studio
   • Google Chat for Workspace Studio
   • Google Forms to Workspace Studio
   • Sheets for Workspace Studio
2. If your organization assigns Context Aware-Access levels to apps, to allow access you might also need to exempt allowlisted apps.
   1. Follow the instructions in Assign Context-Aware Access levels to apps to find apps with assigned access levels.
   2. Click each app with an assigned access level.
   3. If the policy settings have the Block other apps from accessing the selected apps via APIs, if access levels aren't met box checked, also check the Exempt allowlisted apps so they can always access APIs for specific Google services, regardless of access levels box.

Block Workspace app steps

Follow the instructions in Control which apps access Google Workspace data to block any of the following apps:

Related topics

• Troubleshoot Workspace Studio for your users
• User help: Troubleshooting and FAQs