It depends on which Google Cloud product you mean. The Gemini Enterprise app searches configured business-data connectors under a user’s identity and source permissions. A custom agent deployed on Gemini Enterprise Agent Platform accesses resources through its own agent identity or service account. Those are different access models: grounding an answer in data does not itself grant permission to read that data.
Which Gemini product are you asking about?
“Gemini agent” can refer to the Gemini Enterprise app, where users ask questions across configured work sources, or to a custom agent deployed on Gemini Enterprise Agent Platform. The app’s connector and user-access model should not be assumed to describe a deployed agent.
As an Amazon Associate I earn from qualifying purchases.
| Access question | Gemini Enterprise app | Deployed Agent Platform agent |
|---|---|---|
| Whose identity is central? | The user’s identity and permissions in the connected source, alongside Gemini Enterprise access controls. | The agent’s identity or the service account used for deployment. |
| What determines reachable data? | Configured connectors, source permissions, and app, data-store, and project IAM. | The resources permitted to the agent identity or service account by administrator grants. |
| Can it automatically see all company data? | No. Access is bounded by the configured sources and applicable permissions. | Not automatically; its reach depends on the grants made to its identity. |
Google’s documentation describes these controls, but it cannot establish what a particular organization has connected or granted. To determine the access of a specific deployment, inspect its configuration and identities.
Recommended Free Tools
Can the Gemini Enterprise app see my Drive, Gmail, or Calendar?
It can use supported Google Workspace sources when an administrator configures them and the user is authorized to access the information in the source application. Google states: “A user interacting with Gemini Enterprise can only view and ground responses on information that they are already authorized to access directly in the source Google Workspace application.” See Google’s identity-provider documentation for that source-permission model.
#1 Best Overall
- Attention-grabbing design meets the latest evolution of the Google Pixel Camera on the new Google Pixel 11 Pro; Gemini Intelligence helps manage details so you can live in the moment[1]; and the phone is available in two sizes
- Unlocked Android phone gives you the flexibility to change carriers and choose your own data plan: Works with Google Fi, Verizon, T-Mobile, AT&T, and other major carriers[2]
- Stay informed without looking at your screen: When your phone is face down, Pixel HiLight gently alerts you with subtle glowing lights when your favorite contacts are calling or you’re talking with Gemini; exclusive to Google Pixel 11 Pro phones
- Magic Capture catches the moment as you live it: With just one tap, Pixel 11 Pro captures video and photos, and automatically edits, crops, and unblurs a curated collection, ready to share – and you get the memory of how it felt to be in the moment
- Two new cameras for more brilliant photos: A larger telephoto sensor captures 30% more light for clear, beautiful photos and videos, even in the dark[3]; Pixel’s longest zoom ever helps you capture details from impressive distances[4]
The Gemini Enterprise FAQ names Drive, Calendar, Gmail, and Groups, along with third-party sources such as Microsoft OneDrive, Outlook, SharePoint, Entra ID, ServiceNow, Jira, and Confluence. Connector availability varies by edition and configuration, so a named source is not proof that it is enabled in a particular workspace.
For the app, source permissions are only part of the boundary. The user must also be allowed to access the Gemini Enterprise app and its data store. Administrators can configure resource-level access controls, but broad project-level roles can override intended restrictions at the app or data-store level. Google documents these interactions in its guide to granular access controls for apps and data stores.
Rank #2
- Google Pixel 10a is a durable, everyday phone with more[1]; snap brilliant photography on a simple, powerful camera, get 30+ hours out of a full charge[2], and do more with helpful AI like Gemini[3]
- Unlocked Android phone gives you the flexibility to change carriers and choose your own data plan; it works with Google Fi, Verizon, T-Mobile, AT&T, and other major carriers
- Pixel 10a is sleek and durable, with a super smooth finish, scratch-resistant Corning Gorilla Glass 7i display, and IP68 water and dust protection[4]
- The Actua display with 3,000-nit peak brightness shows up clear as day, even in direct sunlight[5]
- Plan, create, and get more done with help from Gemini, your built-in AI assistant[3]; have it screen spam calls while you focus[6]; chat with Gemini to brainstorm your meal plan[7], or bring your ideas to life with Nano Banana[8]
How does it use connected work data?
An administrator configures the app’s connectors or data stores. When a user asks a question, Gemini Enterprise searches or grounds its response against the configured sources, subject to the relevant identity and permission checks. Grounding can connect a response to specified data and provide source support; it is not an authorization system. Access boundaries come from source permissions, connector setup, identities, and IAM.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWhen the source is Google Workspace
For Workspace grounding, the user’s existing source access governs what information can be used. Gemini Enterprise does not, by grounding alone, give a user permission to see someone else’s Drive files, email, or calendar information.
When the source is a Data Cloud connector
For documented Data Cloud connections such as BigQuery, Google says Gemini Enterprise authenticates requests with the user’s IAM permissions or OAuth 2.1 and queries the underlying source. The Data Cloud connector documentation warns that attaching a connector to an app does not necessarily restrict it to one table or dataset: the authenticated user may query source resources for which that user has permission. Administrators should check the effective source permissions and connector scope rather than assume the app attachment creates a narrower boundary.
What can a custom deployed agent access?
A deployed Agent Platform agent uses the permissions of its agent identity or service account. If the deployment uses a service account, the agent can reach resources that account is authorized to access. That account may have broader access than the employee asking it to perform a task if administrators grant it broader permissions. Google describes the options in Managing access for deployed agents.
Rank #4
- Google Pixel 10 Pro is the ultimate Pixel experience, featuring advanced AI with Gemini, unbelievable camera quality, impeccable design in two sizes, and the next-gen Google Tensor G5 chip[1]
- Unlocked Android phone gives you the flexibility to change carriers and choose your own data plan[2]; it works - Google Fi, Verizon, T-Mobile, AT&T, and other major carriers
- Get a head start on syncing your data before it even arrives: After you purchase your new Pixel, look for an email that explains how to transfer your photos, videos, passwords, and more in just a few quick steps[11]
- Pixel’s pro camera system makes everything look amazing, even in low light; capture more of the scene with advanced Google AI models, and bring out incredible details with 100x Pro Res Zoom, stunning 50 MP images, and super steady videos in 8K[10]
- Pixel 10 Pro is built with durable aluminum and Corning Gorilla Glass Victus 2 for scratch and drop resistance; the 6.3-inch Super Actua display with 3,300-nit peak brightness is easy on the eyes, even in direct sunlight[3,13,18]
Administrators should grant an agent only the permissions it needs and review those grants. Agent Platform also documents configurable governance capabilities, including gateway policy enforcement and Model Armor inspection of prompts and tool responses. These are controls to configure and verify, not guarantees that every deployment has them enabled; see Google’s agent governance guidance.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Is work data used to train Gemini, and is it retained?
Google’s Gemini Enterprise FAQ says customer prompts, outputs, and data for its Business, Standard, and Plus editions are not used to train Google models or models for other customers. It also says Google does not sell customer data or use it for advertising. These statements apply to the named Gemini Enterprise editions and should not be treated as a blanket description of every Gemini service.
Best Value
- Google Pixel 7 is powered by Google Tensor G2; it’s faster, more efficient, and more secure, with the best photo and video quality yet on Pixel[1].Other camera description:Front,Rear.Bluetooth Version 5.2 with dual antennas for enhanced quality and connection.
- Unlocked Android 5G phone gives you the flexibility to change carriers and choose your own data plan[2]; works with Google Fi, Verizon, T-Mobile, AT&T, and other major carriers
- Pixel’s Adaptive Battery can last over 24 hours; when Extreme Battery Saver is turned on, it can last up to 72 hours[3]
- The 6.3-inch Pixel 7 display is super sharp, with rich, vivid colors; it’s fast and responsive for smoother gaming, scrolling, and moving between apps[4]
- Google Pixel 7 has wide and ultrawide lenses with up to 8x Super Res Zoom[5]; and Cinematic Blur brings more drama to your videos
For Agent Platform, Google’s zero-data-retention documentation says: “Google won’t use your data to train or fine-tune any AI/ML models without your prior permission or instruction.” That commitment does not mean no data is ever processed or retained. The documentation describes limited, feature-specific retention scenarios; for Grounding with Google Search, Google says it may retain query or log information not associated with a customer or end user for up to three days to debug systems supporting that feature. This duration applies to that documented scenario, not to all Gemini data.
Gemini for Google Cloud has separate data-use documentation: Google says prompts and responses are not used to train its models, while some Trusted Tester features can optionally share data for product improvement, not model training. Those terms concern Gemini for Google Cloud; they should not be silently substituted for the terms governing Gemini Enterprise or Agent Platform.
What should an administrator check?
- Identify the product and edition. Establish whether users are working in the Gemini Enterprise app or with a deployed Agent Platform agent, and check edition-specific connector availability and service terms.
- Inventory connected sources. Confirm which connectors and data stores are enabled, what they reach, and which grounding features are in use.
- Inspect the relevant identities and permissions. For the app, verify users’ source ACLs and group membership as well as app, data-store, and project IAM. For a deployed agent, inspect its identity or service-account grants.
- Check connector scope against source access. In particular, verify whether a Data Cloud connector can query more tables or datasets than intended under the authenticated user’s permissions.
- Review data-use and governance settings. Confirm the service-specific terms and feature-specific retention that apply, and verify which audit, policy, and inspection controls are actually enabled.
Google documents VPC Service Controls as a way to control access to supported Google APIs and services within a configured perimeter. Whether that or another governance control fits depends on the services and boundaries in the deployment.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
