skills.rest
Acczdy
AcczdyCOMMUNITY
Explore all skills by this author →
GitHub

implementing-google-workspace-admin-security

Harden Google Workspace admin configurations and enforce tenant security policies.

2|Updated Apr 14, 2026
Search Tags:#mfa#google-workspace#dlp#dmarc#admin-security#oauth-app-control
One-click install
npx skills add https://github.com/Acczdy/MoZiSec --skill implementing-google-workspace-admin-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: implementing-google-workspace-admin-security
Source: https://github.com/Acczdy/MoZiSec/tree/main/iam/.claude/skills/implementing-google-workspace-admin-security
Command: npx skills add https://github.com/Acczdy/MoZiSec --skill implementing-google-workspace-admin-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires google-api-python-client, google-auth, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a structured, repeatable approach to hardening Google Workspace tenant administration and reducing the risk of account compromise, phishing, data exfiltration, and unauthorized third-party access.

Core Features & Use Cases

  • Admin account hardening: Enforce Advanced Protection for super admins, create break-glass accounts, and audit admin roles.
  • Phishing-resistant MFA: Enforce 2-Step Verification with security keys and context-aware access policies.
  • Email authentication & anti-phishing: Guide SPF, DKIM, DMARC rollout and enable advanced email protections.
  • Data protection & sharing controls: Deploy DLP rules, restrict external Drive sharing, and configure Groups and Shared Drive policies.
  • OAuth and API controls: Audit and allowlist third-party apps, revoke unapproved tokens, and restrict API scopes.
  • Use Case: Rapidly secure a newly acquired tenant by enforcing MFA, deploying email authentication, tightening sharing settings, and auditing OAuth access with an automated agent.

Quick Start

Run the workspace audit agent with service account credentials and an admin-delegated email to generate a security assessment report.

Frequently Asked Questions about implementing-google-workspace-admin-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden Google Workspace admin security for a newly acquired tenant?▼

Enforce Google Workspace phishing-resistant MFA by enabling 2-Step Verification with physical security keys. You can further restrict access by applying context-aware access policies that evaluate device security posture and IP ranges before granting session access.

What is the best way to audit and restrict third-party OAuth apps in Google Workspace?▼

Audit third-party OAuth apps in Google Workspace by reviewing API scopes and revoking unapproved tokens. You can restrict access by allowlisting approved applications and configuring API controls to block unauthorized data exfiltration through the Admin SDK.

How do I deploy DLP policies and restrict external sharing in Google Drive?▼

Deploy DLP policies in Google Drive by configuring rules that scan for sensitive data patterns and block external sharing. The Skill guides the setup of Shared Drive policies and Groups to prevent unauthorized data exfiltration.

Do I need service account credentials to automate a Google Workspace security assessment?▼

You need service account credentials with admin-delegated authority to run the automated Google Workspace security assessment. The Skill uses google-auth and google-api-python-client libraries to authenticate and generate a security configuration report.

When should I create break-glass accounts for Google Workspace super admins?▼

Create break-glass accounts for Google Workspace super admins during post-acquisition hardening or compliance remediation. This ensures emergency administrative access remains available while enforcing Advanced Protection on primary admin accounts.

Related Skills

Explore More Software Engineering Skills→
brendadeeznuts1111brendadeeznuts1111

google-workspace

Integrate Google Workspace APIs with OAuth 2.0 and service accounts.

Community
Advanced
googleworkspacegoogleworkspace
30.3k

gws-admin-reports

Retrieves Google Workspace Admin SDK audit logs and usage reports for account monitoring.

Official
Intermediate
m13vm13v
312

recipe-share-doc-and-notify

Share a Google Docs document with edit access and email the link.

Community
Intermediate
run6270run6270
1

gws-alertcenter

Manage Google Workspace security alerts and Alert Center settings via the gws CLI.

Community
Intermediate