Google Workspace rolls out multi-admin approval feature for risky changes

Google is rolling out a multi-party approvals feature in Workspace that requires multiple administrators to approve high-risk setting changes (e.g., 2-step verification, account recovery, advanced protection, session control, login challenges, passwordless), reducing the risk of unauthorized or accidental security downgrades. Approval requests are sent to super admins, expire in 72 hours, and, once approved, execute automatically; the feature is off by default, rolling out over two weeks, and available to domains with at least two super admin accounts.