Skip to content
IOmergent
Talk to us
Home Fractional CISO Managed Cloud Security AI Security Solutions Industries Resources About Talk to a CISO

Gemini security settings

Gemini Security Settings: Top 10 for Admins

Gemini comes as a personal app, a part of your company's Google Workspace, developer platforms (Google AI Studio and Vertex AI) and a coding agent (Gemini CLI and Code Assist). Each has its own settings. These are the 10 settings that matter most, where to find each one and what good looks like.

In short: start with (1) Block consumer Google accounts on managed devices, (2) Unmanaged consumer accounts on your domain and (3) 2-Step Verification enforcement, then work down the list below.

By Jon Rose, Founder & Managing Partner, IOmergent. Vendor facts as of October 2026. Not sure which version you have? See which AI account is which.

The top 10 Gemini security settings

Most important first. Our free AI Hardening Check walks you through these and the other 39, with direct links, inside your own AI assistant.

  1. 1Block consumer Google accounts on managed devices

    Gemini in Google Workspace
    Where to find it
    Proxy header X-GoogApps-Allowed-Domains on *.google.com traffic; ChromeOS: Devices > Chrome > Settings > User experience > Sign-in to secondary accounts
    Good looks like
    Consumer Google accounts blocked on corporate networks and devices
    Why it matters
    Stops company data going into personal Gemini. The doc blocks consumer sign-in to Google services; the effect on gemini.google.com is inferred, so test it

    Open the setting Admin console

  2. 2Unmanaged consumer accounts on your domain

    Gemini in Google Workspace
    Where to find it
    Directory > Unmanaged users > Personal accounts (older docs: Directory > Users > More > Transfer tool for unmanaged users). Related: Account > Account settings > Conflicting accounts management
    Good looks like
    None listed, or each one transferred into Workspace or renamed off the company domain
    Why it matters
    A consumer Google account using a work address sits outside admin control, including its Gemini chats

    Open the setting Admin console

  3. 32-Step Verification enforcement

    Gemini in Google Workspace
    Where to find it
    Security > Authentication > 2-step verification > Enforcement; Allowed methods: Only security key
    Good looks like
    Enforced for all users; security keys only for admins
    Why it matters
    Gemini can read the user's mail and Drive, so account takeover exposes all of it

    Open the setting Admin console

  4. 4Gemini app access to Workspace and other Google apps

    Gemini in Google Workspace
    Where to find it
    Generative AI > Gemini app > Apps > Workspace apps / Classroom / Other Google apps
    Good looks like
    Workspace apps on only where Gemini reading Gmail and Drive is approved
    Why it matters
    Decides which company data the Gemini app can pull into a chat (on by default)

    Open the setting Admin console

  5. 5Third-party app access to Workspace data (API controls, all editions)

    Gemini in Google Workspace
    Where to find it
    Security > Access and data control > API controls > Manage App Access (Trusted, Limited, Specific Google data, Blocked; per OU); Manage Google Services (Restricted or Unrestricted, high-risk Gmail, Drive and Chat scopes); Settings > Unconfigured third-party apps
    Good looks like
    AI apps such as Claude and ChatGPT are Trusted or Specific Google data only for approved OUs; Gmail and Drive Restricted with high-risk scopes blocked; unconfigured apps not left on 'Allow any' (the default)
    Why it matters
    Decides which AI tools can read Gmail, Drive and Chat through OAuth

    Open the setting Admin console

  6. 6Apps already holding OAuth tokens (Accessed apps and OAuth log events)

    Gemini in Google Workspace
    Where to find it
    Security > Access and data control > API controls > Accessed apps > View list (users, requested services; CSV adds scopes). Grants: Reporting > Audit and investigation > OAuth log events. Security center > Investigation tool on Enterprise, Education, Frontline
    Good looks like
    List reviewed at least quarterly; every AI app with Gmail or Drive scopes is known and approved, others Blocked. New list entries can take 24 to 48 hours to appear
    Why it matters
    Finds AI apps users already connected before any policy existed

    Open the setting Admin console

  7. 7Drive sharing outside the organization and general access default (default: Business Standard and up)

    Gemini in Google Workspace
    Where to find it
    Apps > Google Workspace > Drive and Docs > Sharing settings > Sharing options (external sharing On, Off, Allowlisted Domains; Highlight external files) and General access default (per OU or group; group overrides OU)
    Good looks like
    New files default to Restricted or Private to the owner; external sharing Off or Allowlisted Domains where possible; Highlight external files on (the default). Business Starter: review what is shared externally
    Why it matters
    Anything a user can open, a connected AI tool acting for them can read and summarize

    Open the setting Admin console

  8. 8Gemini app conversation history and retention

    Gemini in Google Workspace
    Where to find it
    Generative AI > Gemini app > Gemini conversation history: auto-deletion period, or 'Let users choose'
    Good looks like
    A fixed auto-delete period that matches policy, not 'Let users choose'. With history off, chats are kept up to 72 h and Gemini can't use Workspace apps
    Why it matters
    Limits how long prompts and responses are kept

    Open the setting Admin console

  9. 9Gemini audit logs

    Gemini in Google Workspace
    Where to find it
    Reporting > Audit and investigation > Gemini for Workspace log events; Gemini Notebook log events (Sep 2026); Reporting API for export
    Good looks like
    Logs exported to a SIEM or retained to policy through the Reporting API, with alert rules; turned on alone doesn't meet this
    Why it matters
    Shows who used Gemini on which data; the log keeps 6 months

    Open the setting Admin console

  10. 10Gemini CLI sandbox, tools allowlist and YOLO mode

    Gemini CLI and Code Assist (coding agent)
    Where to find it
    System settings: tools.sandbox "docker"; tools.core allowlist; security.disableYoloMode true
    Good looks like
    Sandbox on, core tools restricted, YOLO mode disabled (sandbox is off and YOLO available by default)
    Why it matters
    Limits what the agent's shell commands can reach

    Open the setting

Gemini security settings: common questions

What are the most important Gemini security settings?
Start with (1) Block consumer Google accounts on managed devices, (2) Unmanaged consumer accounts on your domain and (3) 2-Step Verification enforcement. All 10 are listed on this page, most important first, with where to find each one and what good looks like.
Does Gemini in Google Workspace train on our data?
No. Google doesn't train on Workspace customer data without permission, and Gemini app chats in Workspace aren't reviewed by people.
How long does Gemini keep chats?
Admins choose 3, 18 or 36 months for Gemini app chats (18 by default). Gemini in Workspace apps can be kept from 90 days to indefinitely.
Does Gemini support SSO?
Yes, through Google Workspace: Security > Authentication > SSO with third party IdP, set per organizational unit or group.
How can I check all the Gemini settings quickly?
Add the free IOmergent AI Hardening Check to your AI assistant and ask: "Run the IOmergent AI Hardening Check for Gemini in our Google Workspace." It walks you through these and the other 39, with direct links, and nothing leaves your machine without your OK.

Want an expert review?

A self-check can't see which AI apps hold OAuth access to your email, files and code, or confirm the settings match what was reported. Our AI Security Assessment does both, with read-only connections and a live review.

See the AI Security Assessment