Google has given Workspace administrators a new way to control who can access Gemini Enterprise, based on location and device security rather than just a login.

• What it is: Context-aware access (CAA) policies are now available for Gemini Enterprise in the Admin console, letting administrators restrict access by geographic location, device security status, and whether a device is company-managed.
• Who is affected: Businesses on Workspace plans with Gemini Enterprise, with the rollout running across both Rapid and Scheduled Release domains through to 15 September 2026.
• What the risk is: Without these controls, Gemini Enterprise could be accessed from any location or device once a user was logged in, which is a gap for businesses handling sensitive data.
• What action is needed: If your business uses Gemini Enterprise, existing Workspace access policies can be extended to cover it at the organisational unit or group level.

We recommend reviewing your Gemini Enterprise access settings once this reaches your domain, particularly if staff access company data from personal devices.

Source: Google Workspace Updates