You can use G Suite or a managed domain to enforce a web proxy that restricts access to the GCP console.