August 14, 2025
Approval workflow for enterprise users to request access to unconfigured apps
What’s changing
We’re introducing a new approval workflow option for enterprise users to request access to third-party apps that have not been explicitly configured via App Access Control (AAC) by an admin. This only applies to apps which have not been configured. If a user is able to access an app today based on the policies configured by their admin, then there will be no change and they will continue to be able to access the app.
When end users attempt to access unconfigured third-party apps and get blocked, they will see an error screen with an option to raise a review request to admins. After the user submits a request, admins will be able to review the end user requests in app access control and make a decision.
This feature gives enterprise users a clear process for requesting access to apps they need, reducing the likelihood of them being completely blocked and improving their productivity. For admins, it provides a centralized and efficient way to manage and configure access for new applications within their organization, while maintaining control over data security.
An example of the dialog that the end user will see when access is blocked, with an opportunity to request access
The dialog an end user will see if they choose to request access
The interface in the Admin console where admins can see and process access requests from users
The interface admins can use to configure access by OU
Who’s impacted
Admins and end users
Getting started
- Admins:
- This feature will be ON by default and can be enabled at the organizational unit (OU) level. You can enable the setting for users to request access to unconfigured apps in the Admin console under API Controls Settings. Visit the Help Center to learn more about user requests for unconfigured apps.
- End users:
- There is no end user setting for this feature. When the approval workflow is enforced, users will see a new screen that allows them to request access to the app from their admin.
Rollout pace
- Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on August 14, 2025.
Availability
- Available to all Google Workspace customers
Resources
- Google Workspace Admin Help: Manage access to unconfigured third-party apps for users
- Google Workspace Admin Help: Control which apps access Google Workspace data