GAT Flow is a User management tool (part of the GAT Suite of products). It allows Google Workspace Admins to Onboard, Offboard, and Modify users of the domain.
It also allows taking bulk action on multiple users at the same time.
Delete app-specific password is one of the actions that can be taken using Flow.
*Note: App Passwords can only be used with accounts that have 2-Step Verification turned on.
This action can be applied in Offboarding and Modifying workflows, including Event and Recurring workflows
Set up Flow #
Open GAT+ (1) and select Flow (2) from the the pop-up menu.
Create Workflow #
GAT Flow will be open on a new tab.
From the menu on left, click on Create workflow.
Define Workflow Type #
A Define Workflow Type section will be displayed.
- Name – enter a name for the workflow
- Description – a description of the workflow can be added (optional)
- Type – select the workflow type
- Modify – modify and update existing users of the domain
- Offboarding – remove or deactivate user (delete, archive or suspend)
- Run immediately after approval
- Next – click on the button to proceed
Search for User #
In Search for a User (1-2) pick any of the option
- Search for a User – select individual users
- Search for a Group – select a group of users
- Search for an Org. Unit – select Org. Unit of users
- Classroom
- Import users – import used via Google spreadsheet
Check the list of selected users under Current selected users section (3), and click Next (4) to move on to the next step.
Choose Actions #
Under the Choose Actions section (1), click on the + button (2) and Add action (3). A pop-up menu with all the available actions will be displayed.
If the process hasn’t been set before, please use Add action button and create the node.
From the menu that appears, search and select the Delete app-specific passwords action.
Once the action is selected, it will be added to the node section. Double click on the action node to open the action’s section.
Click the Send approval request button, and then Confirm to proceed.
Security Officer Approval #
The Security Officer will receive an email for approval unless pre-approval is deployed.
This will take them to the Approval page, when approved the job will be set to run.
Result #
When the request is approved, the App-specific passwords for the selected users will be deleted. The result can be seen in Flow > Workflow
The app-specific passwords can be found in Google Account settings
When the Flow job has run, the App passwords will be removed.
