All 6 domains
26 official objectives
54–74 hrs suggested study
-
Domain 01
~20%
This section covers the Directory side of the Admin console: creating, syncing, suspending and deleting users, designing the organizational unit tree, building groups, adding domains, and setting up buildings and bookable resources.
Inside this domain
- Managing the user life cycle
- Designing and creating organizational units (OUs)
- Managing groups
- Managing domains
- and 1 more objectives
Watch for Delete to save money
- Objectives
- 5
Read the domain guide →
-
Domain 02
~23%
The largest section covers configuring each core service in the Admin console: Gmail routing, security and authentication, Drive and Docs sharing, Calendar, Meet and Chat, Gemini controls, and enabling AppSheet and Apps Script.
Inside this domain
- Configuring Gmail
- Configuring Google Drive and Docs
- Configuring Google Calendar
- Configuring Google Meet
- and 3 more objectives
Watch for SPF for inbound mail
- Objectives
- 7
Read the domain guide →
-
Domain 03
~15%
This section covers keeping Workspace data under control: Vault retention, holds and exports, data loss prevention rules, Drive trust rules, Takeout and Data Export, data regions, and classification labels for Drive and Gmail.
Inside this domain
- Using Google Vault for eDiscovery and data retention
- Creating and managing data loss prevention (DLP) rules
- Creating and managing Drive trust rules
- Determining how to store and export your environment's data
- and 1 more objectives
Watch for Retention for litigation
- Objectives
- 5
Read the domain guide →
-
Domain 04
~20%
This section covers protecting sign-in and administration: password and 2-step verification policy, context-aware access, admin roles and session control, the security and investigation tools, and controls for Marketplace, OAuth and SAML apps.
Inside this domain
- Securing user access
- Reporting, auditing, and investigating security risks and events
- Enabling additional Google and third-party applications
Watch for Immediate 2SV enforcement
- Objectives
- 3
Read the domain guide →
-
Domain 05
~10%
The smallest section covers managing the devices people use to reach Workspace: choosing basic, advanced or third-party mobile management, handling company-owned and personal devices, and enrolling and configuring managed Chrome browsers and extensions.
Inside this domain
- Managing mobile devices
- Managing Chrome browsers
Watch for Device wipe for a leaver
- Objectives
- 2
Read the domain guide →
-
Domain 06
~13%
This section covers finding and fixing problems: reading audit logs, checking the Workspace Status Dashboard, tracing mail with Email Log Search and headers, recovering deleted data, using reports, and gathering logs before opening a support case.
Inside this domain
- Identifying and diagnosing Workspace issues
- Troubleshooting and resolving common issues
- Viewing, creating, and managing reports and audit logs
- Using support resources
Watch for Fix settings during an outage
- Objectives
- 4
Read the domain guide →
Domain names, weights and objectives come from Google Cloud's official outline (Associate Google Workspace Administrator exam guide (current; replaced the Professional exam retired 31 Dec 2024)). Question counts and study hours are editorial planning estimates, not official figures. Last reviewed October 2026.