Google Target Audience Groups Support in CASB

Overview

Google Target Audience Groups offer a more secure and streamlined way for users to share content by allowing sharing with admin-approved audience groups. This feature is supported in for the CASB product to ensure accurate classification, visibility, and filtering of such sharing events.

Key Benefits

• Enhanced Security & Privacy: Reduces accidental oversharing by limiting access to pre-approved internal audiences.

• Simplified User Experience: Users can share content without manually selecting recipients or handling access requests.

CASB Integration Details

Accurate Share Classification

• Sharing with a Target Audience Group is now classified as "All Domain" instead of "Internal".

• CASB identifies Target Audience domains using the pattern:

  *.audience.googledomains.com

• If a file is shared with a Target Audience Group and its current share level is not already “External” or “Public”, the share level is updated to All Domain.

Inclusion in File Metadata

• Target Audience Group names are stored in the file’s permissions.access.attributes.

• Share level is reflected as All Domain in:

  • File metadata

  • Data Catalog view

  • Collaborators/Permissions section

Enhanced Data Catalog Filtering

• Admins can filter files by Target Audience Group name using:

  • Collaborators/Permissions.Access

Known Limitations

• Only one Target Audience Group can be used per file.

• No public API is available to fetch Target Audience Group membership, so if a Target Audience Group includes a group with external users, CASB cannot resolve individual members and may not detect external access.