The Use Cases we experience (with a large user base):
1. Stronger governance on security. Allows for auditing users' access within GWS and GCP across ALL AppSheet instances that are created. Users can now be monitored within GWS Security Investigation Tool and Alert Center.
2. Onboarding and offboarding of employees. Automated additions and removals ( removals when changing roles and departments)
3. Dynamic group assignments. Dynamic groups can have users added based on properties and conditions of the user.
4. General groups allow management without explicitly having to go into AppSheet to manage. It does not require an active administrator for each AppSheet. It allows my team to manage account access as we do with other SaaS solutions just by adding or deducting from GWS Groups. (This is significant.)
5. Closely integrates with Google Chat functionality to ensure consistency in user access and auditing controls.
I highly recommend using Group functionality if plausible. It provides the optimum level of compliance, especially when we have to be GDPR compliant across a large number of users.
The unique design of AppSheet to use pass-through authentication to Google Sheets makes for some challenging oversight when PII is part of the sheet. However, the compromise is that auditors can gain insight by having Groups managing access. External access is blocked via groups, where explicit external access within AppSheet can bypass these standard controls.
LinkedIn
Twitter
