About
Provisioning groups come into play if you have synced your organization with Google Workspace. Once a Workspace domain is synced, by default, all users in that domain become licensed users. If you have purchased Virtru for Drive licenses for only a subset of your users, then you need to implement a provisioning group to maintain licensing compliance.
A "Licensed" user is any user that has the ability to utilize Virtru for Drive for encryption and decryption. Non-licensed users will still have the ability to view content in the Secure Reader.
If your subscription includes an email solutions, please review our email provisioning instructions. We also have separate instructions if your team is using Virtru Secure Share.
Jump To:
Creating and Maintaining the Provisioning Group
Finding Provisioned Users
User Experience and Impact
Creating and Maintaining the Provisioning Group
The provisioning group is created and maintained within the Workspace environment. Virtru customers can create a Google Group on their Workspace and add only their desired Virtru for Drive users to that group. Follow the steps below to configure a provisioning group:
1. Create a Google Group on your domain with the group email addressed as "virtru-drive-provisioning-group@[yourdomain.com]"
Note for organizations with multiple domains
Set the provisioning group domain to match the domain of the administrator who configured the sync with Virtru
2. Add the users you want to license to this group. Those users will become the only users that can utilize the Virtru for Drive extension for encryption and decryption. Everyone else in your domain will still be able to view files in the Secure Reader, but they will be unable to use the extension
3. Sync with Virtru:
- If you have already synced with Virtru, you can perform a domain refresh
- If you have not synced with Virtru, you will want to install Virtru on the domain level in Google Workspace
Once complete, Virtru will automatically recognize the provisioning group and license users appropriately. Non-provisioned users will still appear in the Control Center and may appear as "Activated", but they will have read-only access.
Note
After creating the provisioning group, the list will need to be maintained into perpetuity. A "domain refresh" will need to be performed for any provisioning group changes to take effect in Virtru (or any other changes to groups and/or users).
Finding Provisioned Users
Inside of the Virtru Control Center, you have the ability to filter your users by members of your Virtru for Drive provisioning group. In order to see the users that you have assigned licenses to, you may perform the following steps below:
- Sign in to the Virtru Control Center
- Go to the Users & Groups tab > Select Users
- In the search bar select All Users in Groups and type in virtru-drive-provisioning-group@[yourdomain.com]
- Click the magnifying glass to submit the search
- This will list the users inside of your organization's Virtru for Drive provisioning group
User Experience and Impact
Members of the Virtru for Drive provisioning group will have full access to the Virtru for Drive plugin and the ability to create and maintain newly encrypted files.
However, non-provisioned users will see significant changes:
- Users will be able to read encrypted content in the Virtru Secure Reader
- Users will NOT be able to upload encrypted files, encrypt existing files, or decrypt files within Drive
- When uploading content to Drive, they will not be able to select Encrypt & upload
- Users will NOT be able to add content to a Secure Folder
- If the organization has implemented a mandatory encryption policy, users will NOT be able to add any content to Drive