--- title: Introducing new session management tools with native,... description: Google Cloud has completed rolling out a 16-hour default session length across all customers and turned session management into a granular feature of... canonical: https://daily.dev/posts/introducing-new-session-management-tools-with-native-granular-controls-fuxukozye twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Introducing new session management tools with native, granular controls | daily.dev og:description: Google Cloud has completed rolling out a 16-hour default session length across all customers and turned session management into a granular feature of... og:url: https://daily.dev/posts/introducing-new-session-management-tools-with-native-granular-controls-fuxukozye og:image: https://api.daily.dev/og/posts/FuxUKozye.png og:image:alt: Introducing new session management tools with native, granular controls og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Introducing new session management tools with native, granular controls **[Google Cloud](https://daily.dev/sources/gcp)** · 3 min read · 2 upvotes · 1 comments ## Summary Google Cloud has completed rolling out a 16-hour default session length across all customers and turned session management into a granular feature of Context-Aware Access. New generally-available capabilities include programmatic policy management via Terraform, gcloud CLI, and REST APIs, targeting policies by Google Groups instead of organizational units, and applying different session rules per application (Console, gcloud, specific OAuth apps). A preview feature also lets admins manage session policies directly in the Google Cloud Console alongside other Access Context Manager bindings, instead of only through the Workspace admin console. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How can I configure Google Cloud session controls using Terraform or the gcloud CLI? Session Controls policy configuration is now generally available for programmatic management through Terraform, gcloud CLI, and REST APIs, moving beyond manual UI-only configuration. Terraform integrates session controls directly into infrastructure manifests, gcloud CLI manages policies from the command line, and REST APIs support automated policy enforcement across multi-tenant environments. _daily.dev surfaces updates like this for teams automating identity and access policy management._ ### Can I set different Google Cloud session lengths for different groups of users, like admins versus regular developers? Yes, Session Controls policy now targets Google Groups instead of only organizational units, generally available. This lets administrators apply a shorter session, such as two hours, to elevated-privilege users like billing administrators and project owners, while keeping a standard 16-hour session for general developers, regardless of their place in the org hierarchy. _Security teams tracking granular access control changes can follow this shift on daily.dev._ ### What is the default session length for Google Cloud accounts now? Google Cloud has rolled out a 16-hour default session length to all customers who had not self-configured their own session settings, aimed at reducing credential theft and account takeover risk. This global rollout is now complete, and administrators can still override it with granular per-group or per-application policies through Context-Aware Access. _daily.dev helps security-focused developers keep up with default policy changes like this one._ ## Community discussion Top comments from developers on daily.dev. **@trevorsuna** · 0 upvotes > Per-application policies and Terraform support make session controls much easier to treat as code. A 16-hour default may still be generous for privileged consoles, so I’d shorten high-risk paths, keep lower-friction rules for routine apps, and test break-glass access before rolling the policy across groups. ## Similar posts on daily.dev - [Account Control, Every Layer: From Your Organization to Every Session](https://daily.dev/posts/account-control-every-layer-from-your-organization-to-every-session-vxgijuefc) · DigitalOcean · 0 upvotes · 0 comments - [How Google Cloud detects, contains, and protects against emerging threats](https://daily.dev/posts/how-google-cloud-detects-contains-and-protects-against-emerging-threats-znvhdqka4) · Google Cloud · 1 upvotes · 0 comments - [Pulumi Cloud Now Supports Google Sign-In](https://daily.dev/posts/pulumi-cloud-now-supports-google-sign-in-mulxbu3lw) · Pulumi · 0 upvotes · 0 comments - [A decade of governance: Cloud Custodian at 10 and its role in the agentic AI era](https://daily.dev/posts/a-decade-of-governance-cloud-custodian-at-10-and-its-role-in-the-agentic-ai-era-skqyrzxlz) · CNCF · 0 upvotes · 0 comments --- Tags: [#cloud](https://daily.dev/tags/cloud), [#authentication](https://daily.dev/tags/authentication), [#gcp](https://daily.dev/tags/gcp), [#terraform](https://daily.dev/tags/terraform) [View this post on daily.dev](https://daily.dev/posts/introducing-new-session-management-tools-with-native-granular-controls-fuxukozye) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Introducing new session management tools with native, granular controls","url":"https://daily.dev/posts/introducing-new-session-management-tools-with-native-granular-controls-fuxukozye","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/introducing-new-session-management-tools-with-native-granular-controls-fuxukozye"},"datePublished":"2026-09-15T17:30:20.803Z","dateModified":"2026-09-15T17:30:42.178Z","description":"Google Cloud has completed rolling out a 16-hour default session length across all customers and turned session management into a granular feature of...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b559a17bb032216a7853ac1742b2da5b?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b559a17bb032216a7853ac1742b2da5b?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Google Cloud","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Google Cloud","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/gcp","url":"https://daily.dev/sources/gcp"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/introducing-new-session-management-tools-with-native-granular-controls-fuxukozye","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"cloud,authentication,gcp,terraform","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Google Cloud","item":"https://daily.dev/sources/gcp"},{"@type":"ListItem","position":3,"name":"Introducing new session management tools with native, granular controls"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/introducing-new-session-management-tools-with-native-granular-controls-fuxukozye","comment":[{"@type":"Comment","text":"Per-application policies and Terraform support make session controls much easier to treat as code. A 16-hour default may still be generous for privileged consoles, so I’d shorten high-risk paths, keep lower-friction rules for routine apps, and test break-glass access before rolling the policy across groups.","datePublished":"2026-09-20T11:56:26.603Z","url":"https://daily.dev/posts/FuxUKozye#c-CIIXlAvls","author":{"@type":"Person","name":"Trevor Suna","url":"https://daily.dev/trevorsuna","image":"https://media.daily.dev/image/upload/s--dZ7gXxpp--/f_auto/v1784081551/avatars/avatar_EMoP47rpuw8DNjhp6R1b6?_a=BAMAMicg0"}}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/introducing-new-session-management-tools-with-native-granular-controls-fuxukozye#faq","mainEntity":[{"@type":"Question","name":"How can I configure Google Cloud session controls using Terraform or the gcloud CLI?","acceptedAnswer":{"@type":"Answer","text":"Session Controls policy configuration is now generally available for programmatic management through Terraform, gcloud CLI, and REST APIs, moving beyond manual UI-only configuration. Terraform integrates session controls directly into infrastructure manifests, gcloud CLI manages policies from the command line, and REST APIs support automated policy enforcement across multi-tenant environments. daily.dev surfaces updates like this for teams automating identity and access policy management."}},{"@type":"Question","name":"Can I set different Google Cloud session lengths for different groups of users, like admins versus regular developers?","acceptedAnswer":{"@type":"Answer","text":"Yes, Session Controls policy now targets Google Groups instead of only organizational units, generally available. This lets administrators apply a shorter session, such as two hours, to elevated-privilege users like billing administrators and project owners, while keeping a standard 16-hour session for general developers, regardless of their place in the org hierarchy. Security teams tracking granular access control changes can follow this shift on daily.dev."}},{"@type":"Question","name":"What is the default session length for Google Cloud accounts now?","acceptedAnswer":{"@type":"Answer","text":"Google Cloud has rolled out a 16-hour default session length to all customers who had not self-configured their own session settings, aimed at reducing credential theft and account takeover risk. This global rollout is now complete, and administrators can still override it with granular per-group or per-application policies through Context-Aware Access. daily.dev helps security-focused developers keep up with default policy changes like this one."}}]} ```