Skip to main content
Use Cloud > Posture to read the six checks behind a Google Workspace posture score. The score is an MSPortal calculation worth 100 points. It is separate from Microsoft Secure Score. This page is for MSP staff and company users.

​
Before you start

  • You need Cloud read access (the Cloud resource with Read access in the role editor).
  • Google Workspace must be connected for the company, with Daily security posture turned on under Sync settings on the connection.
  • The checks come from the last daily sync. They are not a full security assessment.

​
Open the checks

1

Open Cloud > Posture

Click Cloud in the sidebar. The Posture tab opens first.
2

Open the Google Workspace checks

With one company selected in the top bar, the Google Workspace card appears on the page. With several companies selected, click the Google Workspace row in the table to open the checks in a dialog.
3

Confirm the source

Check that the badges read Google Workspace and MSPortal. Read the Snapshot date, the score percentage, and the points total.
Google Workspace posture identifies MSPortal as its score source and shows the snapshot date.

The provider, the MSPortal score source, and the snapshot date appear above the checks.

4

Read each check

Read Check, Status, Coverage, and Points for each row. On a narrow screen the Coverage column is hidden, and the description holds the same counts.
5

Note the check and date

Write down the check title and the snapshot date if you need help. The rows do not list the affected users and do not change settings.

​
The six checks

Active users exclude suspended and archived accounts. Administrator checks include administrators and delegated administrators. Enrollment means a user set up 2-Step Verification. Enforcement means the administrator requires it. A user who only enrolled can still turn it off.

​
Read statuses and points

Points are the share of passing items times the maximum points, rounded to two decimals. For example, 18 of 20 enrolled users earns 22.5 of 25 points. The overall percentage is rounded to a whole number, so use the points to see small changes.
  • Items with no data stay in the total. A partly missing dataset can lower coverage and show Needs attention instead of Unknown.
  • Administrator 2-step verification and Verified domains only Pass at 100%. They still earn partial points, so Needs attention does not always mean zero.
  • Unknown checks keep the maximum at 100 points.

​
How fresh the snapshot is

  • Google usage reports run about three days behind. The sync asks for the report from three days before the run, and may use an older report if that one is missing.
  • Directory, domain, and license data are read at sync time.
  • The Snapshot date is the date MSPortal stored the snapshot. It does not mean every input is from that day.
  • If usage reports are not available, the sync can skip a new snapshot while other data still updates. The earlier snapshot stays on screen.
  • The Google Workspace sync runs once a day.
MSP staff can check Sync settings on the Google Workspace connection in Settings > Integrations when a snapshot is missing or old. See Connect Google Workspace.

​
Ask for follow-up

1

Company users: open a ticket

Open a ticket with the company, the snapshot date, the check title, its status, and its coverage.
2

MSP staff: check the accounts and domains

Use Cloud Users and Cloud Domains to look at the accounts and domains. Their rows can be newer than the snapshot. Confirm in Google Workspace before you change anything.
3

Wait for the next daily sync

Changes show up after the next sync and a new posture calculation.

​
Troubleshooting

​
Frequently asked questions

No. It is an MSPortal calculation. Microsoft uses Microsoft Secure Score.
Yes. Delegated administrators are included.
No. They are left out of every user check. That does not confirm offboarding is complete.
No. A known state of zero licenses counts as visible. The check does not measure purchasing.
Yes. With no sign-in date, the account creation date is used against the 90-day limit.
No. Checks earn points in proportion to coverage.
No. A check shows counts, status, and points only.