Download Google Cloud Identity

This topic presents new features that are introduced or enhanced in CyberArkPrivilege Cloud as part of the January 2025 release or as part of v14.5. Privilege Cloud version 14.5 The following functionality is released as part of Privilege Cloud upgrade to v14.5. Azure GovCloud support We offer a new level of security and efficiency to government operations with our enhanced support for Government Cloud (GovCloud) within our Azure Central Policy Manager (CPM) and Privileged Session Management (PSM) offers. The Microsoft Azure Password Management, Microsoft Azure application Keys, and Azure Cloud Services Management have been updated to fully support GovCloud environments. Identity Service User Management Plugin CyberArk Identity Service User Management Plugin enhances the management of service users within CyberArk Identity. This plugin simplifies the management of service users and reduces manual intervention and minimizes errors. Google Cloud Platform Connection Component The Google Cloud Platform (GCP) Connection Component enhances user management for GCP IAM users. This new Connection Component allows customers already managing their GCP IAM users through Google Cloud Platform (GCP) Management to easily connect to the Google Cloud Platform. It uses GCPSamlCertificate Platform to securely store the SAML certificate in use during the connection. This enhancement empowers organizations to better manage their Google Cloud resources. The new Google Cloud Platform (GCP) Connection Component is available to download from the Marketplace. Conjur Cloud support The new CPM plugin for rotating API Keys used by Conjur Cloud hosts/workloads empowers organizations to securely manage their API keys, ensuring that their cloud-based applications

Organizational unit, users in child organizational units automatically receive a license, unless you set the child to override the parent. For details, go to Set automatic licensing for organizational units. Add licensesRemove or reduce licenses If a user no longer needs access to the Cloud Identity Premium features, you can remove the user’s license following the steps in Assign, remove, and reassign licenses. The way to reduce your Cloud Identity Premium license count depends on whether you signed up on the Annual or Flexible Plan. For details, go to Reduce user licenses.If you have multiple servicesThe licensing rules for Cloud Identity vary based on the combination of subscriptions.If you have Google Workspace for Education or Google Workspace for Nonprofits, you can't add Cloud Identity licenses.Expand section | Collapse all & go to topCloud Identity free edition & Premium If you have both the Premium and free editions of Cloud Identity, all new users automatically get free Cloud Identity licenses. If some users need to use features like application whitelisting and rules-based management, assign those users a paid Cloud Identity Premium license. If you have automatic licensing turned on for Cloud Identity Premium for your entire organization, all new users automatically get paid Premium licenses. To ensure that new users get only free Cloud Identity licenses, we recommend that you turn off automatic licensing for Cloud Identity Premium. You can set different automatic licensing options for specific organizational units for assigning paid Premium licenses to those users. You can also manually assign Premium licenses to individual users. If you remove a user’s Premium license, the user gets a free Cloud Identity license automatically. Example: Say you have 250 total users, and you assign Cloud Identity Premium licenses to 100 of them. You now have: 100 users with both free Cloud Identity and Cloud Identity Premium 150 users with free Cloud Identity only Related topics Turn off automatic Google Workspace licensing during setup About automatic licensing for organizational units Assign, remove, and reassign licenses Cloud Identity free edition & Google Workspace If you have both Google Workspace and the free edition of Cloud Identity, all new users automatically get free Cloud Identity licenses. If some users need access to features like Gmail and Google Calendar, assign those users a paid Google Workspace license. If you have automatic licensing turned on for Google Workspace for your entire organization, all new users automatically get paid Google Workspace licenses. To ensure that new users get only free Cloud Identity licenses, we recommend that you turn off automatic licensing for Google Workspace during Cloud Identity setup. After Cloud Identity setup, you can set different automatic licensing options for specific organizational units to automatically assign paid Google

Used as a way to manage access efficiently across projects. Ratherthan assigning individual users to IAM roles in eachproject, you define a set of groups that model common roles in yourorganization. You then assign those groups to a set of IAM roles.By modifying the membership of the groups, you can control users' access to anentire set of resources.Mapping groups between Microsoft Entra ID and Google Cloud is optional. Once you'veset up user provisioning, you can create and manage groups directly inCloud Identity or Google Workspace, which means that ActiveDirectory or Microsoft Entra ID remains the central system for identity management but notfor Google Cloud access management.To maintain Active Directory or Microsoft Entra ID as the central system for identitymanagement and access management, we recommend that you synchronize groups fromMicrosoft Entra ID instead of managing them in Cloud Identity orGoogle Workspace. With this approach, you can set up IAM sothat you can use group memberships in Active Directory or Microsoft Entra ID to controlwho has access to resources in Google Cloud.Groups in Cloud Identity and Google WorkspaceIn Cloud Identity and Google Workspace, there is only a singletype of group. Groups in Cloud Identity and Google Workspacearen't confined to the scope of the Cloud Identity orGoogle Workspace account where they were defined. Instead, they caninclude users from different Cloud Identity or Google Workspaceaccounts, support being referenced and nested in other accounts, and be usedacross any Google Cloud organization.As they do with users, Cloud Identity and Google Workspaceidentify groups by email address. The

Workspace licenses to those users. You can also manually assign Google Workspace licenses to individual users. If you remove a user’s Google Workspace license, they keep their free Cloud Identity license. Example: Say you have 250 total users, and you assign Google Workspace licenses to 100 of them. You now have: 100 users with both free Cloud Identity and Google Workspace 150 users with free Cloud Identity only Related topics Turn off automatic Google Workspace licensing during setup Set automatic licensing for organizational units Assign, remove, and reassign licenses Cloud Identity Premium & Google Workspace If you have both Google Workspace and Cloud Identity Premium, all new users automatically get paid licenses to whichever service you signed up for first. After you sign up for the second service, you can automatically or manually assign licenses to that service. You can assign a user both types of licenses. You can change your automatic licensing settings at any time from the Billing page. You can turn automatic licensing on or off for either or both services for your entire organization or an organizational unit. Related topics Assign, remove, and reassign licenses Set automatic licensing for organizational units Cloud Identity free edition & Premium & Google Workspace If you have both editions of Cloud Identity and Google Workspace, all users get a free Cloud Identity license automatically. You can assign a user licenses to one or both of the paid services. You can’t remove a user’s free Cloud Identity license. It stays in effect even if you assign licenses to one or both of the paid services. You can turn on automatic license assignment for one or both of the paid services for your top-level organization. This means all new users in your organization automatically get a license for that service. You can also set different automatic licensing options for specific organizational units. This way, users in an organizational unit get only the free or paid licenses they need. If you have automatic licensing turned on for Google Workspace at the top level and then sign up for the free edition of Cloud Identity, during signup, you’re prompted to turn off Google Workspace automatic licensing. This ensures that users who only need the free Cloud Identity features are assigned only that license. If you remove all of a user’s paid licenses, the user keeps their free Cloud Identity license. Related topics Automatically assign a license to every user in your organization Set automatic licensing for organizational units Turn off automatic Google Workspace licensing during setup Was this helpful?How can we improve it?