Google Cloud

GCP Professional Google Workspace Administrator (PGWA) Complete Guide: Cloud Identity, Vault, SAML SSO

2026-05-24
NicheeLab Editorial Team

Professional Google Workspace Administrator (PGWA) is the advanced Google Workspace admin exam. It tests you deeply on Cloud Identity as an identity foundation, SAML SSO for third-party integration, eDiscovery with Vault, security via DLP and Context-Aware Access, business automation with Apps Script, and large-scale tenant migrations. As the successor to AGWA, it sits at the top of a Workspace administrator's certification path.

Exam Basics (2026 edition)

ItemDetails
Official nameGoogle Cloud Certified - Professional Google Workspace Administrator
Exam fee200 USD (excl. tax)
Duration2 hours
Number of questions50-60 questions
Passing scoreNot published
LanguagesJapanese, English
Validity2 years
Recommended experience3+ years of industry experience plus 1+ year of Workspace administration

Exam Domains (7 areas)

SectionTheme
1Object management (users, groups, organizational units)
2Service management (Gmail / Drive / Meet / Calendar / Sites)
3Identity and authentication management (SAML SSO / OAuth / 2FA)
4Data management (DLP / Vault / backup)
5Endpoint and device management
6Third-party app integration (Marketplace / API)
7Auditing, reporting, and troubleshooting

Key Topics and Services

  • Identity management: Cloud Identity Free / Premium, SCIM provisioning, Directory Sync (Active Directory)
  • Authentication: SAML SSO, OIDC, 2-Step Verification, security keys (FIDO2), Context-Aware Access
  • Advanced Gmail settings: routing, gateways, S/MIME, compliance, host restrictions
  • Drive governance: sharing policies, shared drives, DLP rules, labels
  • Vault: legal hold, retention policies, search, export
  • Endpoints: basic/advanced management, Android Work Profile, iOS Profile, Chrome management
  • Migration: GWMME, Data Migration Service, third-party tools like Bittitan / CloudM
  • Automation: Apps Script, AppSheet, Workspace API, Cloud Functions integration
  • Auditing: audit logs, BigQuery export, Alert Center

Comparison with Other Cloud SaaS Admin Exams

ItemGCP PGWAMicrosoft MS-102Microsoft AZ-104
Exam fee200 USD165 USD165 USD
TargetGoogle WorkspaceMicrosoft 365Azure IaaS / PaaS
Identity foundationCloud IdentityEntra IDEntra ID
Core servicesGmail / Drive / MeetExchange / Teams / SharePointVM / Storage / VNet
Difficulty★★★★☆★★★☆☆★★★☆☆

Learning Roadmap (60-200 hours)

  1. Phase 1 (15 hours): Review the AGWA scope (basic administration)
  2. Phase 2 (40 hours): Complete the Skill Boost Workspace Admin Learning Path end to end
  3. Phase 3 (30 hours): Hands-on implementation of SAML SSO, Cloud Identity, and Directory Sync
  4. Phase 4 (20 hours): Configure Vault, DLP, Alert Center, and Context-Aware Access in a trial tenant
  5. Phase 5 (20 hours): Mock exams plus Admin Help Center until you consistently clear 80%

Standard Learning Resources

  • Official Skill Boost: Workspace Admin Learning Path
  • Coursera: Google Workspace Administration Specialization
  • Google Workspace Admin Help (support.google.com/a)
  • Hands-on practice in a trial tenant (admin.google.com)
  • Mock exams: official Practice Exam, Whizlabs

Next Steps

  • PCOA: Reinforce your ChromeOS device management to wield both Workspace and Chrome
  • PCSE: Combine with GCP security to propose unified identity and security solutions
  • MS-102: Add Microsoft 365 knowledge to become a multi-SaaS administrator

How does PGWA differ from Associate (AGWA)?

AGWA focuses on basic administration (adding users, groups, licenses), while PGWA goes deeper into SAML SSO, Cloud Identity, Vault, Apps Script, large-scale migrations, and DLP. AGWA → PGWA is the smoothest progression.

What is the exam fee and duration?

200 USD, 2 hours, 50-60 questions. Available in Japanese and English, valid for 2 years.

Is Google Vault on the exam?

Yes, very frequently. Legal hold, retention policies, eDiscovery search, and export are tested through legal compliance scenarios.

How does it compare with Microsoft 365 (MS-102)?

MS-102 centers on M365, Intune, and Entra ID, while PGWA centers on Workspace, Cloud Identity, Vault, and Chrome. Holding both makes you a strong multi-platform IT administrator.

How does it relate to Cloud Identity?

Cloud Identity is the identity foundation, and Workspace is the SaaS suite on top. Cloud Identity Free/Premium, Workspace integration, and SCIM/SAML configuration are key exam topics.

Are large-scale tenant migration questions on the exam?

Yes. Be ready to choose between GWMME (Google Workspace Migration for Microsoft Exchange), the Data Migration Service, and third-party tools like Bittitan based on the scenario.

How many study hours should I budget?

60-100 hours if you already hold AGWA, 150-200 hours if you are starting from scratch.

What study materials do you recommend?

The standard set: Skill Boost Workspace Admin Learning Path, Google Workspace Admin Help, the Coursera Google Workspace Administration Specialization, and hands-on practice in a trial tenant at admin.google.com.

Related Articles - Workspace

GCP Associate Google Workspace Administrator (AGWA) 完全ガイド|Workspace 管理入門

Google Cloud Associate Google Workspace Administrator (AGWA) の試験範囲、Gmail / Drive / Meet 管理、Cloud Identity 統合、Microsoft 365 (MS-102) 比較、PGWA / ACE / PCSE への発展ルートを日本語で詳解。

GCP Professional Cloud Developer (PCD) 完全ガイド|Cloud Run・GKE・CI/CD・APM

Google Cloud Professional Cloud Developer の試験範囲、Cloud Run / GKE / Cloud Build / Cloud Trace、AWS DVA / Azure AZ-204 比較、学習ロードマップを徹底解説。

GCP Professional Cloud Network Engineer (PCNE) 完全ガイド|VPC・Interconnect・Load Balancing

Google Cloud Professional Cloud Network Engineer の試験範囲、VPC / Cloud Interconnect / Cloud Load Balancing / Cloud Armor、AWS ANS・Azure AZ-700 比較を詳解。

GCP Professional Cloud DevOps Engineer (PCDOE) 完全ガイド|SRE・GKE・CI/CD・SLO

Google Cloud Professional Cloud DevOps Engineer の試験範囲、SRE / SLI / SLO / Error Budget、GKE / Cloud Build / Cloud Deploy、AWS DOP・Azure AZ-400 比較を徹底解説。

* Google, Google Workspace, Cloud Identity, and Google Vault are trademarks of Google LLC. This article is independent study material and is not affiliated with Google LLC. Exam specifications are subject to change, so always confirm the latest information on the official Google Cloud page.

Check what you learned with practice questions

Practice with certification-focused question sets

Go to GCP exam prep
Author

NicheeLab Editorial Team

NicheeLab editorial team focused on data engineering and cloud certification learning. Content is structured around practical study needs and official exam domains.


Related articles
Google Cloud

Google Cloud Certification Roadmap (2026)

Choose your GCP certification path — Foundational, Associate...

Google Cloud

CDL Cloud Digital Leader: Complete Exam Guide (2026)

Pass the Cloud Digital Leader exam — cloud business value, G...

Google Cloud

GAIL Generative AI Leader: Complete Exam Guide (2026)

Pass the Generative AI Leader exam — Gemini, Vertex AI, Work...

Google Cloud

Vertex AI Fundamentals for GCP Certs (2026)

Vertex AI basics every cert candidate needs — Workbench, Pip...

Google Cloud

Associate Cloud Engineer (ACE): Complete Guide (2026)

Pass the Associate Cloud Engineer exam — Console, gcloud, pr...

Browse all Google Cloud articles (103)
© 2026 NicheeLab All rights reserved.