← Daily Brief for September 1, 2026
Workspace Studio’s no-code agents gain least privilege, approvals and audit context
Focus: Agents for Non-Technical People
Date: September 1, 2026
Topics: no-code agents, least privilege, human approval, DLP, auditability
Evidence: Unspecified
Availability: Unspecified
Summary: Google began the Scheduled Release rollout of new Workspace Studio controls today. Newly created flows can run with least-privileged agent identities and unique auditable identifiers. Administrators can revoke individual OAuth scopes, inspect flow context in audit events, disable step types or webhooks, require confirmation before externally sharing data, and use DLP conditions to block execution or force review.
Why it matters: This is the governance layer that no-code agent adoption has been missing: identity, authority, human approval, data rules and evidence are configured around the visual workflow. The current limitation is important—several protections initially apply only to newly created flows, with existing-flow support promised later—and DLP availability varies by Workspace edition.
Original commentary: Convert the control set into a reusable “bounded delegation” worksheet for non-technical builders: name the agent owner, minimize scopes, identify external-sharing steps, require approval at irreversible boundaries and specify which audit events prove the run behaved as intended.
Source: Google Workspace Updates — enterprise security controls for Workspace Studio