Cybersecurity and Infrastructure Security Agency Logo

Light mode

Google Classroom Baseline Report

Google Classroom is not available by default in GWS but as an additional Google Service.

Customer Name Customer Domain Customer ID Report Date Baseline Version Tool Version
Cool Example Org example.org ABCDEFG 07/20/2026 12:43:08 PDT 1 v1.0.0
Policy Indicators:

CLASSROOM-1 Class Membership

Control ID Requirement Result Criticality Details
GWS.CLASSROOM.1.1v1 "Who can join classes in your domain" SHOULD be set to "Users in your domain only."
Automated Check
Pass Should Requirement met.
GWS.CLASSROOM.1.2v1 "Which classes users in your domain can join" SHOULD be set to "Classes in your domain only."
Automated Check
Pass Should Requirement met.

CLASSROOM-2 Classroom API

Control ID Requirement Result Criticality Details
GWS.CLASSROOM.2.1v1 Users SHOULD NOT be able to authorize apps to access their Google Classroom data.
Automated Check
Pass Should Requirement met.

CLASSROOM-3 Roster Import

Control ID Requirement Result Criticality Details
GWS.CLASSROOM.3.1v1 "Roster Import" with Clever SHOULD be turned off.
Automated Check
Pass Should Requirement met.

CLASSROOM-4 Student Unenrollment

Control ID Requirement Result Criticality Details
GWS.CLASSROOM.4.1v1 Only teachers SHOULD be allowed to unenroll students from classes.
Automated Check
Warning Should The following OUs are non-compliant:
  • Cool Example Org: Who can unenroll students from classes is set to: Students and teachers

CLASSROOM-5 Class Creation

Control ID Requirement Result Criticality Details
GWS.CLASSROOM.5.1v1 Class creation SHOULD be restricted to verified teachers only.
Automated Check
Warning Should The following OUs are non-compliant:
  • Cool Example Org: Who can create classes is set to: anyone in this domain