The Google Apps Marketplace allows administrators to find and deploy cloud-based apps to their Google Apps domain. Marketplace apps can add tremendous value to your environment. Every Marketplace app that is added is one less on-premise app that needs to be provisioned and supported. Along with that, those Marketplace apps need to be governed.
Since Marketplace apps are installed by a domain admin, they have domain-wide API access to your domain’s data, allowing these apps (and by extension, their vendors) the ability to view and store users’ data. These apps can also have write access to your domain’s data, allowing them to change or delete data.
This differs from end-user apps in that end-user-installed apps only have access to the authenticated user’s data. CloudLock Apps Firewall now allows administrators to identify and classify Marketplace apps.
CloudLock Apps Firewall also identifies and displays App Access Scopes so that you can have a clearer understanding of exactly what data an app has access to, and therefore identify any risk involved in allowing the app to access data on your domain. Understanding the scope of an app’s access to your domain’s data allows you to make informed decisions when you’re classifying apps.
To view Marketplace apps that are installed on your domain within CloudLock Apps Firewall, click the Marketplace Apps tab at the top of the Apps Firewall interface:
This interface provides a dashboard so that you can view the number of banned, trusted, and unclassified Marketplace apps at a glance:
Below the dashboard, you can filter Marketplace apps based on their classifications within CloudLock Apps Firewall, as well as their App Access Scopes, so that you can easily view only unclassified Marketplace apps that have access to Google Contacts, for example:
Just as with end user apps, CloudLock Apps Firewall provides the ability to bulk classify apps, export the list of apps to CSV or a spreadsheet, or perform a lookup based on the app’s name.
We would love to hear any feedback from our customers. Please feel free to email me at firstname.lastname@example.org.