* Enable Context-Aware Access:
* In the Google Admin console, go to Security > Context-Aware Access.
* Enable the context-aware access feature.
* Create Access Levels:
* Define access levels based on geographic locations (Canada, Italy, and the United States).
* Use IP address ranges or other location indicators to specify these regions.
* Assign Access Levels:
* Assign the created access levels to the Google Workspace services, specifically corporate Gmail and Drive.
* Ensure that only users accessing from the specified regions can access these services.
* Apply and Monitor:
* Save and apply the settings.
* Monitor access logs to ensure compliance and security.
References:
* Google Workspace Admin Help: Set up context-aware access
* Google Workspace Admin Help: Manage context-aware access levels