Google Workspace Launches Guest Accounts

Collaborating with vendors, partners, and clients who aren't on Google Workspace has always been a point of friction for IT admins. Google officially announced the general availability of Guest Accounts, a new feature that allows organizations to securely bring non-Workspace users into their ecosystem while maintaining full control over security and data.

This update effectively turns Google Chat into a secure bridge, allowing external collaborators to work in Docs, Sheets, and Slides without compromising the host organization's security posture.

1. How Guest Accounts Work

When your team invites an external, non-Workspace user to a Google Chat DM or Space, the system now automatically provisions a Guest Account for them.

• Teal Label: Guests are marked with a distinct teal external label (similar to the yellow label used for external Workspace users), so your team always knows who is in the room.
• Workspace Guests OU: Every guest is automatically placed in a dedicated "Workspace Guests" Organizational Unit (OU) in the Admin console.
• Seamless @Mentions: You can @mention guests across Docs, Slides, and Sheets just like a regular colleague.

2. Admin Controls: Safety First

Admins have granular control over the guest experience to ensure zero-trust security:

• Default Policies: The Workspace Guests OU starts with a baseline security posture that is not inherited from your root OU, preventing guests from accidentally getting internal-only permissions.
• Policy Enforcement: Admins can apply specific requirements like 2-Step Verification or Context-Aware Access specifically to guests.
• Ownership Preservation: Your organization retains 100% ownership of any data created or shared. Guests cannot create or own new files in your Drive; they can only collaborate on what you give them access to.

3. Key Technical Notes

• Non-Workspace Focus: This feature is only for users who do not have a Google Workspace or personal Google account. Existing collaboration flows for Google users remain the same.
• Directory Integration: Guests are modeled as a type of user. The Directory API's user.list will now include them by default, with a new is_guest_user field for easy filtering.
• Beta API: An API for bulk-creating guest accounts will enter open beta in May 2026.

4. Rollout & Availability

• Admin Controls: Rollout began March 26, 2026, and will be completed by April 10, 2026.
• End User Access: Full rollout will take place between April 13 and April 16, 2026.
• Eligible Tiers: Available to Business Starter/Standard/Plus and Enterprise Starter/Standard/Plus customers.

Collaboration doesn't stop at your domain's edge. With the launch of Guest Accounts, Google is giving organizations a secure, policy-driven way to invite the outside world in.