GOOGLE GEMINI ENTERPRISE — TRACK 2 / 5
Admin & Governance for Gemini Enterprise
COMING SOON
The operations track. Provision tenants, configure connectors for Microsoft 365 + ServiceNow + Google data, wire up Workforce Identity Federation, harden the security posture, and stand up adoption analytics — the playbook for 85% activation in 90 days.
The Workshop
Admin & Governance for Gemini Enterprise
Grounded in Google Cloud's first-party documentation (configure-identity-provider, connectors/*, security-overview) and Google Skills #1191. Built for the IT and platform team who has to roll out Gemini Enterprise across an enterprise and stand up the operational scaffolding for the long term.
- Provision a Gemini Enterprise tenant and assign licenses at scale
- Configure Workforce Identity Federation for Entra ID, Okta, AD FS via OIDC / SAML
- Stand up data connectors for SharePoint, OneDrive, Outlook, ServiceNow + Google data
- Curate the Agent Gallery and enable pre-built Google agents
- Harden network security — VPC-SC, Private Service Connect, Model Armor, CMEK
- Operate adoption analytics — license activation, agent count, token usage, budget alerts
- Run a helpdesk for Gemini Enterprise — common tickets, runbooks, escalation
What You Need Before Day 1
Required
- Laptop with internet access (macOS, Windows, or Linux)
- Foundations track (or equivalent Gemini Enterprise familiarity)
- Working admin experience with a SaaS or Cloud platform
Not Required
- Prior Google Cloud admin experience
- Programming experience
If you already administer a Microsoft 365 or Google Workspace tenant, you have the right baseline.
THE CURRICULUM
What You Will Configure
Seven hands-on modules tied to Google Cloud's first-party admin docs.
TENANT PROVISIONING & LICENSING
45 MINGoogle Cloud project setup; enabling Discovery Engine, Vertex AI, Cloud Storage, and IAM APIs. License assignment via Workforce Identity (lowercase email mapping). Group-based rollout — pilot → expand → GA. Single-email identifier requirement; alias handling. Quotas: 3,000 readers per document.
IDENTITY — WORKFORCE IDENTITY FEDERATION
60 MINIdentity provider choice: Google Identity vs 3rd-party (Entra ID, Okta, AD FS) via OIDC / SAML 2.0. Workforce Pool creation. Attribute mapping (google.subject = assertion.email.lowerAscii()). License assignment via google.subject. IAM roles. Caveats — one IdP per location; provider type changes require data-store recreation.
DATA SOURCE CONNECTORS
75 MINHands-on configuration for SharePoint, OneDrive, Outlook, ServiceNow (and 14 more — Jira Cloud, Confluence Cloud, Dropbox, Drive, Calendar, GCS, BigQuery, Looker, GitHub, Salesforce, HubSpot, SAP, Adobe AEM, EntraID). Indexed vs federated sync. Gemini Enterprise Assist for guided setup. Structured vs unstructured data — one type per source.
AGENT GALLERY & STANDARD AGENT CONFIGURATION
45 MINAgent Gallery vs Agent Garden vs Agent Finder. Enable pre-built Google agents (Deep Research, Idea Generation, NotebookLM Enterprise, Data Insights). Agent Garden templates (code modernisation, financial analysis, invoice processing). Org-default agents. Discovering 3rd-party partner agents.
NETWORK SECURITY & COMPLIANCE HARDENING
60 MINVPC Service Controls perimeters. Private Service Connect for hybrid / on-prem. Firewall egress controls. Model Armor for prompt + response screening. CMEK in Cloud KMS. Compliance posture (HIPAA, FedRAMP High, SOC 2). Agent Anomaly + Threat Detection (Security Command Center). Audit logging strategy.
ADOPTION ANALYTICS & OPERATIONAL OWNERSHIP
45 MINLicense activation tracking — target 85% within 3 months. Agent creation analytics. Token / API usage tracking (millions–billions scale). Per-team cost attribution + budget allocation. Alert thresholds (80% / 100%). Real-time dashboards. Discovery Workshops as an adoption driver (4–10 sessions per persona).
HELPDESK & SUPPORT OPERATIONS
30 MINCommon admin ticket patterns and runbooks. The IT Resolution Hub example — ServiceNow + Jira + technical docs as 3 data stores in one App. User permission troubleshooting (esp. for Microsoft data via Entra ID groups). Data-store sync failure diagnosis. Decommissioning behaviour.
Your Instructors
Himal Rajan
Full Stack & AI Developer
"From React frontends to Python AI backends, I've spent my career building full-stack systems that actually ship, RAG pipelines, autonomous agents, and production APIs that handle real traffic. At RocketOne, I teach you the exact engineering decisions that turn an AI prototype into a system your users can depend on."
Specialty
Prem Kumar
AI Architecture Expert
"Anyone can build an AI demo. I teach you how to build the architecture behind systems that scale, because the gap between prototype and production is where most teams get stuck."
Specialty
Clients: Broadcom, Oracle
Naveen Kumar
AI/ML Engineer
"I've built AI systems across Zoho, Virtusa, and now SquareShift, from machine learning pipelines to generative AI applications. At RocketOne, I teach you the practical skills to build AI-powered solutions that work in the real world, not just in notebooks."
Specialty