Information and Access Management (IAM)

to set up {{iam}} in google workspace, you first need to turn on google workspace {{cse}} for all users who need to do either of the following activities create or upload encrypted files to google drive host encrypted meetings with google meet (beta) you don't need to turn on cse for users who only need to view or edit encrypted files or attend meetings however, external users need to use an identity provider (idp) allowlisted by your domain for details, see external user requirements in the about client side encryption section at support google com/a/answer/10741897#requirements to turn on cse for users, you must turn on cse for the organizational units or configuration groups the users belong to at any time, you can disable cse for users by turning cse off for the organizational units or configuration groups they belong to if you disable cse for users, any existing client side encrypted content remains encrypted and accessible refer to this google workspace knowledge base article ( support google com/a/answer/10745596 ) for instructions on how to perform the following steps for setting up iam for cse in google workspace set the default key service for your organization turn cse on or off for users