Flow Overview #
Flow is a user management tool, it allows Google Admins to set up automated workflows for the onboarding, offboarding, and modification of the users in the domain.
Flow allows the Google Admins to:
- Onboard and create new users for the domain
- Modify existing users
- Offboard and delete users from the domain
Important #
- The Offboarding deletes the user and the action cannot be undone. Selected accounts will be deleted. All emails and files once removed can be restored within 20 days using the Google Workspace Admin Console otherwise they will be gone forever.
How to offboard a user #
The steps below will show steps to offboard a user to the domain.
Launch GAT+ and navigate to Flow
From the menu on the left select Create workflow (1)
Note: The action can be done also with Event and Recurring workflows.
Select workflow type #
In Workflow type – fill in the details
- Name – enter a name for the workflow
- Description – enter a description for the workflow to be taken
- Type – select Offboarding
- Note: This workflow will delete the account
- Conditional flow – you can set up the action alongside conditional workflow
- Run immediately after approval – select if you want to pick a specific time for when the workflow to occur
Click on the Next button.
Pick users #
Under Search for a user – select the users who will be deleted
- Select one or a few users
- Group of users
- Org. Unit of users
- Import users via Google spreadsheet
Click on Proceed to actions button
Set the action #
In “Choose actions” search and select the actions you want to take on the chosen users.
To “Add action (2)” or “Add action set (3)”, please select the plus + button shown in the screenshot below.
If the process hasn’t been set before (no action set created), please use Add action button and create the node.
Search for the action using the search field and select the action you want to take.
As example:
- Delete user from all groups
- Force sign out
- Migrate emails
- Delete 2-step verification backup codes
- Revoke app tokens
Once you are happy with the selected actions to be taken, click on Send approval request button.
A pop-up window will be displayed click Yes to proceed.
The request will be sent to the Security officer.
The workflow results page will be loaded. Click on the Eye icon to view details.
Security Officer #
The Security officer will receive an email notification with the request to be approved.
The Security officer will be navigated to the Approval page > Details page (eye icon)
Select Approve to approve the request.
Result #
The account will be deleted from your domain, alongside the below actions.
- Delete user from all groups
- Force sign out
- Migrate emails
- Delete 2-step verification backup codes
- Revoke app tokens
- Remove user – deletion of the user
IMPORTANT: This action cannot be undone. Selected accounts will be deleted. All emails and files once removed can be restored within 20 days using the Google Workspace Admin Console otherwise they will be gone forever. Are you sure you want to proceed?
The Admin can check the result in Flow > Workflow > Details (eye icon)
The detailed view will be present under the “eye icon” to show all the actions taken on the user.
Video how-to #
You can check the how-to video below
