GSP362

Overview

In a challenge lab you’re given a scenario and a set of tasks. Instead of following step-by-step instructions, you will use the skills learned from the labs in the quest to figure out how to complete the tasks on your own! An automated scoring system (shown on this page) will provide feedback on whether you have completed your tasks correctly.

When you take a challenge lab, you will not be taught new Google Cloud concepts. You are expected to extend your learned skills, like changing default values and reading and researching error messages to fix your own mistakes.

To score 100% you must successfully complete all tasks within the time period!

This lab is recommended for students enrolled in the Google Workspace for Education quest. Are you ready for the challenge?

Topics tested

• Setting up a role-oriented structure

• Create access groups

• Adding users and managing credentials

• Enable/disable services

• Configure user access to services

Setup and requirements

Before you click the Start Lab button

Read these instructions. Labs are timed and you cannot pause them. The timer, which starts when you click Start Lab, shows how long Google Cloud resources will be made available to you.

This hands-on lab lets you do the lab activities yourself in a real cloud environment, not in a simulation or demo environment. It does so by giving you new, temporary credentials that you use to sign in and access Google Cloud for the duration of the lab.

To complete this lab, you need:

• Access to a standard internet browser (Chrome browser recommended).

Note: Use an Incognito or private browser window to run this lab. This prevents any conflicts between your personal account and the Student account, which may cause extra charges incurred to your personal account.

• Time to complete the lab---remember, once you start, you cannot pause a lab.

Note: If you already have your own personal Google Cloud account or project, do not use it for this lab to avoid extra charges to your account.

Start your lab

When you are ready, click Start Lab in the upper left.

Sign in to the Google Workspace Admin Console

To access the Google Workspace Admin Console, you must find your credentials and then sign in.

Find your lab's User Email and Password

To access the resources and console for this lab, locate the User Email and Password in the Lab Details panel. This panel is on the left or at the top, depending on the width of the browser window. Use these credentials to log in to the Google Workspace Admin Console.

If your lab requires other resource identifiers or connection-related information, they will appear on this panel as well.

Sign in to the Admin Console

1. Click Open Google Workspace Admin Console.

Tip: Open the tabs in separate windows, side-by-side.

Note: If you see the Verify your account dialog:

• Click Next.
• Click the prefilled user.
• Click Use another account.

2. Enter the User Email and Password.

3. Accept all terms and conditions as prompted.

The Admin Console opens.

4. Click VERIFY DOMAIN in either the yellow box at the top or the red box in the Domains card.

5. Click Next.

6. In the Welcome, let's set up Google Workspace dialog, in section 1, click VERIFY. Google verifies your training domain.

Ignore step 2, Create new users and step 3, Activate Gmail sections.

7. Click Google Admin in the top left to open the Google Workspace Admin Console home page.

Challenge scenario

A school wants to use distance learning for:

• Students not able to attend classes in person
• Supervision of

The school, using Google Workspace for Education, will test this approach across one grade level. As the system administrator, you are responsible for:

• Setting up the structure

• Adding users

• Configuring access to apps and services using organizational units (OUs) and groups.

Task 1. Set up the structure

• Set up a role-oriented structure that will have two child OUs "Students" and "Teachers".

Click Check my progress to verify the objective.

Set up the structure

Task 2. Assign access to OUs

• To help teachers effectively present to the classes, assign access so that: Jamboard is disabled for all users.

Hint: The settings of parent OU are inherited by the child OUs by default.

Only teachers can use Jamboard.

Click Check my progress to verify the objective.

Assign access to OUs

Task 3. Create access groups

• To address the needs of different classes, create these access groups:
  1. - for the class
  2. - for the class
  3. - for the class
  4. - for work on

Click Check my progress to verify the objective.

Create access groups

Task 4. Password recovery

• To reduce admin support calls, set password recovery so that:
  1. Teachers can reset their own passwords.
  2. Students in the group can reset their own passwords.
  3. All other students must contact the admin to reset their passwords.

Click Check my progress to verify the objective.

Password recovery

Task 5. Set up services

• To provide the collaboration services required for remote learning, configure the following:
  1. Classroom - enabled for all
  2. Google Meet - enabled for all
  3. Calendar - enable for the teacher and students so they can see the schedule for museum trips
  4. Gmail - enable for teachers and only students working on Projects
  5. Drive - disable external files sharing for teachers and students

Click Check my progress to verify the objective.

Setup services

Task 6. Configure Google Meet

1. To ensure class sessions can be managed effectively and securely, configure Google Meet as follows:

• Dial-in access is not allowed.
• Only teachers and students can record.

Hint: Disable this option for everyone prior to configuring the above setting.

2. Only users from your domain (organization) can join.

3. Only teachers can replace background with an image.

Hint: Disable this option for everyone prior to configuring the above setting.

Click Check my progress to verify the objective.

Configure Google Meet

Task 7. Configure Classroom

• To prevent unauthorized changes to classrooms, configure Classroom so that only teachers can unenroll students from classes.

Click Check my progress to verify the objective.

Configure Classroom

Task 8. Add users

1. Add users to the Teachers OU and Students OU as follows:

--	Teachers	Students
Oliver Fry	X	-
Amelia Hill	X	-
Jade Miller	-	X
Simon Patel	-	X
Hannah Moon	-	X
Nathan Sims	-	X
Amelia Clark	-	X
Jonas Kane	-	X

2. Assign teachers and students to access groups as follows:

--
Oliver Fry	X	-	-	X
Amelia Hill	-	X	X	X
Jade Miller	X	X	X	X
Simon Patel	X	-	X	-
Hannah Moon	X	X	-	X
Nathan Sims	X	X	-	-
Amelia Clark	X	X	X	X
Jonas Kane	-	X	-	-

Click Check my progress to verify the objective.

Add users

Congratulations!

Your test group is ready to go! You used Workspace for Education for add users to the domain and then give the students and teachers the appropriate access to learning services.

Earn your next skill badge

This self-paced lab is part of the Workspace for Education skill badge quest. Completing this skill badge quest earns you the badge above, to recognize your achievement. Share your badge on your resume and social platforms, and announce your accomplishment using #GoogleCloudBadge.

This skill badge quest is part of Google’s Workspace Admin learning path. If you have already completed the other skill badge quests in this learning path, search the catalog for 20+ other skill badge quests in which you can enroll.

Google Cloud training and certification

...helps you make the most of Google Cloud technologies. Our classes include technical skills and best practices to help you get up to speed quickly and continue your learning journey. We offer fundamental to advanced level training, with on-demand, live, and virtual options to suit your busy schedule. Certifications help you validate and prove your skill and expertise in Google Cloud technologies.

Manual last updated: October 3, 2022

Lab last tested: November 16, 2022

Copyright 2023 Google LLC All rights reserved. Google and the Google logo are trademarks of Google LLC. All other company and product names may be trademarks of the respective companies with which they are associated.