Control whether your users can add account recovery information with two new admin settings

[mdueltgen]

💡 Summary

Google is launching two new settings that will allow admins to control whether their users can add recovery email information and phone information to their Google Workspace account.

So we want to have a policy to reflect this change.

Motivation and context

Updating baseline to be in line with google admin console options

Implementation notes

Roughly,
Policy: Shall be off
Rationale: Orgs should not allow users to recovery their owns accounts, allowing personal accounts opens up security

Acceptance criteria

How do we know when this work is done?

• Policy has been added.