📨 Google Admin Weekly: If your AI Agents break stuff...don't blame Google! (Google’s TOS update)


Hello Reader,

Last week you should have received an email from Google with the subject line "Important updates to your Google Workspace Terms of Service regarding Agentic AI."

If reading through multi-page legal addendums and enterprise cloud clauses left your eyes crossed, you aren't alone. 😵‍💫

Here’s the "non-lawyer" version of the policy change: “If one of your users creates an AI agent that break something or does bad stuff, it’s not our fault.”

This policy change isn’t something you need to panic over, but you do need to pay attention to agents inside of your Workspace environment.

Sponsor

Automate School Chromebook Management with VIZOR

Managing a fleet of Chromebooks shouldn't be a 😱 nightmare. VIZOR is the BEST tool to AUTOMATE common tasks and implement SYSTEMS to make sure things run smoothly:

  • ⚡ Automatically assign Chromebooks with a barcode scanner
  • 🔂 Identify Chromebooks that students have swapped
  • ⬆️ Track devices updates to ensure compliance with state testing requirements
  • ❌ Automatically disable lost, stolen, or overdue Chromebooks
  • 💦 Trigger a powerwash after an event, such as after a repair

If you are sick of managing Chromebooks through out-of-date spreadsheets and disconnected systems, you need VIZOR! Get in touch for a free demo and pricing!

TOS updates: in plain English

Google updated its education terms of service and introduced new Agentic AI Responsible Use Guidelines. Here is a high-level summary:

  1. You own the liability for what your agents do: Google explicitly states that the customer (your school district) is solely responsible for any actions taken by an AI agent operating in your domain. If an agent deletes a folder, shares a confidential student document externally, or misrepresents staff, Google’s position is clear: That’s on you, not the model.
  2. "Bypassing Confirmation" is your responsibility: Many agentic tools include built-in safety prompts (e.g., "Are you sure you want to email these 50 parents?"). The new terms warn that if an administrator or user disables these confirmation steps to put tasks on "full auto-pilot," the district assumes all liability for the fallout.
  3. Strict bans on surveillance, profiling, and circumvention: The guidelines strictly prohibit deploying agents to bypass file permissions, compile personal profiling data without consent, conducting mass automated monitoring, or hindering emergency services. Nothing too controversial here...I'm sure you don't want your users doing any of these things with their school account!

What Does This Mean for K-12 Education?

Because AI agents operate 24/7, never get tired, and don’t go on vacation, they can be very helpful, or potentially disruptive. The risk is that well-meaning staff (or curious students) will create automated workflows that violate district policy and Google’s TOS.

For example:

  • 📨 A building secretary sets up a third-party agent that connects to Gmail and automatically forwards emails containing student registration forms to a personal Gmail account.
  • 👩‍💻 A high school computer science student connects a GitHub bot via OAuth that floods Google Drive with thousands of automated API requests.
  • 📊 A department head connects an AI tool to evaluate spreadsheets and disables the "confirm before sending" toggle, resulting in mass erroneous emails sent to parents.

👉 Google's updated terms make it clear: Google provides the tools, but you are the pilot.

Upcoming Events for Google Admins

Want to host a Google Admin workshop in your area? Get in touch!

Three Action Items for Admins This Week

You don't need to rewrite your entire board policy by Friday, but you should take 15 minutes to tighten your technical guardrails in the Admin Console.

1. Review Existing Agents

Google Workspace Studio allows users to build automated flows and custom skills without code. This service is enabled by default. Take a moment to view agents that have been created by your users:

  • Where to go: Agents > Agent Access Management
  • Action: This page will display agents that have been created by your users. You can view, audit, and pause agents from the admin console.
  • Best Practice: users should receive training on building agents before they are given access to Workspace Studio.

Tip: If you aren't prepared to manage agents, you can limit access to Workspace Studio to a small pilot group (like your tech department or instructional coaches) before rolling it out district-wide.

2. Establish Human-in-the-Loop Boundaries

Educate your team on one simple rule: Never automate high-stakes actions without a human check. Any automated workflow that touches Personally Identifiable Information (PII), student disciplinary notes, or external communications to parents must keep confirmation safeguards enabled.

  • Where to go: Apps > Google Workspace > Settings for Workspace Studio > Approvals
  • Action: If Workspace Studio is ON for users, consider requiring human approval for sensitive steps and third-party connectors.
  • Best Practice: establish a district definition for “sensitive data” and “sensitive action” so that you can implement your agent limitations appropriately.

3. Audit Third-Party API Connections

Gemini isn't the only way to create an agent. Your users can also create Agents with Claude, ChatGPT, Copilot, etc. These agents are more difficult to manage, because you can't "see" them. Agents require API access to take action. If your third-party app settings are wide open, staff can connect external autonomous agents without your knowledge.

  • Where to go: Security > Access and data control > API controls
  • Action: Click Manage App Access. Look closely at any apps requesting high-risk scopes (like full access to Gmail or Drive).
  • Best Practice: Keep unconfigured third-party apps Blocked for students under 18, and set your Staff OU to "Allow apps that only request basic info" so full-access agents require explicit IT approval.

Tip: Workspace Audit, a premium tool for Google Workspace Admins, provides detailed data on the third party applications that are connected to your domain. Click here for a free 30 day trial.

Summary

Google’s updated TOS is very reasonable…they don’t want to be liable for the actions of your agents.

By keeping tight API controls, restricting agent creation to trusted staff, and ensuring humans stay in the loop for sensitive decisions, you can let your teachers embrace automation while keeping your district safe, compliant, and fully in control.

Learn more about this topic:

Got a question about how your domain's AI policies are configured? Click reply and let me know—I read every email!

John R. Sowash

Did someone forward this email to you? You can subscribe here!


John Sowash is a former teacher and an "accidental" Google Administrator. For more than a decade John has been helping schools use technology in meaningful ways. John lives in Michigan with his wife and five kids.

​Google Admin Bootcamp | Chromebook Academy | Google Admin Audit​

3606 Woodridge Dr. , Howell, Michigan 48843
​
Unsubscribe · Preferences​

The Google EDU Update

Tired of missing out on the coolest Google updates and new features? Join thousands of other teachers who rely on my monthly newsletter to stay ahead of the curve. Get the top 10 updates, teaching inspiration, and time-saving links delivered straight to your inbox.

Read more from The Google EDU Update

✨ FREE LIVE Session: Earn a Gemini Badge with me TONIGHT at 7pm EST! ✨ Hi Reader! I've been speaking at several fall conferences the past few weeks. Its great to get out of the office and meet people "IRL"! I enjoyed attending MASS CUE in New England and the Great Lakes Unity conference in Grand Rapids, MI. During these events I had an opportunity to introduce teachers and administrators to the Google Educator Series, a really neat program from Google that allows you to earn official Gemini...

Hello Reader, I feel bad that I’ve spent a lot of time talking about negative and scary uses for AI, but not much time discussing the cool, positive ways that teachers can use tools like Gemini and Gemini Notebook in the classroom. I want to take a short break from heavy, technical topics to introduce you to a cool (and free) professional learning resource for teachers called the Google AI Educator Series. Introducing the Google AI Educator Series The Google AI Educator Series (GES) is a...

Hello Reader, Today I want to share five practical settings you can update to improve the classroom experience. These aren’t complicated, but they make a HUGE difference for teachers and students. These are just some of the things that I'll be covering during the Chromebook Academy for IT admins next month. If you're interested in manage Chromebooks more effectively, you're invited to join us! Oh, and if you happen to be at the MASS CUE conference this week, say hello! I'm doing a session on...