Sign in to the Google Admin console.

From the Admin console Home page, go to "Security" and then "Login challenges."

Enable the "Employee ID login challenge" setting.

Configure the challenge by defining the employee IDs that users need to provide during the login

process.

Enabling Employee ID login challenges adds an additional layer of security without requiring 2-Step

verification. This helps prevent unauthorized access by ensuring that users provide an additional

piece of information known only to them.

Reference:

Google Workspace Admin Help - Configure login challenges

“?>>?b GF\]\rom the Admin console Home page, go to "Security."

Under "Security," select "API controls."

In the "API controls" section, click on "Manage Third-Party App Access."

Find the Google Drive API in the list.

Choose "Disable All Access" for Google Drive to ensure that no third-party apps have OAuth

permissions to Google Drive.

This configuration adheres to the policy set by the Chief Information Security Officer by preventing

third-party apps from accessing Google Drive via OAuth.

Reference:

Google Workspace Admin Help - Manage API client access