Security Checklist for Workspace Admins
This comprehensive checklist, housed in Google Sheets and maintained by Dustin Christlieb, is tailored for Super Admins seeking a security review of Google Workspace and Cloud Identity environments. Drawing inspiration from the renowned GAM, this application harnesses the power of the Admin SDK to collect asset data seamlessly and integrate it into a Google Sheet. Currently, it focuses on read-only functionality, ensuring no modifications to API settings.
Delve into the appscript code on our GitHub repository for insights into its architecture and potential future developments as a Google Sheets Editor add-on. Access a view copy of the live checklist and appscript code for a comprehensive overview.
Key features
Comprehensive Security Settings
Access a detailed checklist of settings with direct links to Google's Admin Console for easy configuration.
User Audit
Track user activities including last sign-in date, status, 2SV enrollment, and admin privileges.
Domain & DNS Audit
Ensure your domain conforms to best practices by auditing MX, SPF, DKIM, and DMARC records.
Google Group Settings Audit
Review Google Group™ memberships for both internal and external accounts.
Google Groups Membership Audit
Review Google Group™ memberships for both internal and external accounts.
Mobile Device Audit
Monitor mobile devices connected to your Google Workspace for security compliance.
License Audit
Track licenses to optimize usage and reduce costs.
Shared Drive Settings Audit
Review settings for Shared Drives to ensure data security.
OAuth Token Audit
Review OAuth tokens for third-party app access to your Google Workspace.
App Passwords Audit
Review user configured app passwords for less secure apps.
Organizational Unit Audit
Review organizational units for effective organization management.
Get Help
Reach out for personalized assistance with the Security Checklist.
How to use the tool
Getting Started
Make a copy of the public document and associated App Script, or Install the Google Sheets Extension from the Marketplace.
Admin instructions
Read the introduction popup and Admin instructions.
Setup Sheet
Run the Setup or Refresh Sheet function to get the most up todate copy of the checklist.
API Inventory
Use the Run All Scripts function to inventory useful information from the Admin SDK.
Confrim external DNS query
Confrim your understanding that CloudFlare will be used to return DNS results.
Review API reports
Review helpful API information about your enviorment.
Security Checklist
Complete the Security Checklist by using the quick access links to check Admin Console configurations and take notes on the findings.
Get Support
Use the Get Support function to contact DoiT International for subject matter assistance.