Google Cloud Identity: administration essentials

Skills you'll practise

• Explain what Cloud Identity provides, how it shares a platform and Admin console with Google Workspace, and how it creates the Google Cloud organization resource
• Predict the effective settings for a user from the organizational unit tree, including inherited settings and child-level overrides
• Apply Google's super administrator best practices and choose a prebuilt or custom admin role, scoped to an organizational unit where possible, for a delegated task
• Plan a 2-Step Verification rollout from optional enrollment to enforcement, including security keys and recovery with backup codes
• Distinguish Google as the SAML identity provider for apps from a third-party IdP signing users in to Google through SSO profiles, and identify a misconfigured value
• Use admin log events to find who changed what, and choose between suspending and deleting a departing user, including data transfer

Course outline

1. 1.Google Cloud Identity: administration essentialsVideo · 2 min
2. 2.Cloud Identity, the Admin console, domains and organizational unitsLesson · 18 min
3. 3.Admin accounts, roles and 2-Step VerificationLesson · 19 min
4. 4.Single sign-on, admin log events and offboardingLesson · 18 min
5. 5.Google Cloud Identity: administration essentials: knowledge checkKnowledge check · 16 questions
6. 6.Final exam10 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• Google docs: Cloud Identity overview
• Google docs: Cloud Identity editions (Free and Premium feature comparison)
• Google docs: Overview of Google identity management (Cloud Identity, Google Workspace, consumer accounts)
• Google docs: Creating and managing organization resources
• Google docs: Best practices for federating Google Cloud with an external identity provider
• Google docs: Single sign-on (with an external SAML IdP)
• Google docs: How the organizational structure works
• Google docs: Verify your domain
• Google docs: Security best practices for administrator accounts
• Google docs: Prebuilt administrator roles
• Google docs: Create, edit, and delete custom admin roles
• Google docs: Deploy 2-Step Verification
• Google docs: Recover an account protected by 2-Step Verification
• Google docs: Manage a user's security settings
• Google docs: Set up SSO with a third-party IdP (SSO profiles)

And 7 more.