--- title: Set and Remove Admin User Roles With GAT Flow description: "GAT Flow allows Google Workspace Super Admins to **manage admin roles for all users.** It also can be used to onboard, offboard, and modify existing users. There are many manual or automated actions that can be taken. **The Admins can…" url: "https://gatlabs.com/knowledge/tech-tips/set-and-remove-admin-user-roles-with-gat-flow/" updated: "2026-05-28" category: "Users Audit & Management / On-boarding, Off-boarding & Modifying" tags: - GAT Flow --- # Set and Remove Admin User Roles With GAT Flow GAT Flow allows Google Workspace Super Admins to **manage admin roles for all users.** It also can be used to onboard, offboard, and modify existing users. There are many manual or automated actions that can be taken. **The Admins can manage and set or remove the [pre-built roles](https://support.google.com/a/answer/2405986?hl=en) or the [custom roles](https://support.google.com/a/answer/2406043?hl=en) with specific privileges created in the Google Admin console.** 1. **Set user role** - A custom or google defined role can be assigned to any user of the domain 2. **Remove user role** - The custom or google defined role can be removed from any user of the domain Any user of the domain can have different Admin or Custom roles assigned to them. Flow allows the Admins to freely add or remove those roles. ## Creating workflow Navigate to **GAT+ > Flow > Create workflow** **Note:** Those actions can be also used in [Event](https://gatlabs.com/knowledge/tech-tips/workflow-triggered-by-an-event-on-users/) or [Recurring](https://gatlabs.com/knowledge/tech-tips/recurring-workflows/) workflows Workflow type - fill in the details for the workflow you want to create. - **Workflow Name** - enter a name for the workflow - **Description**(Optional) - enter a description for the workflow - **Type** - select **Modify** - select any or both options - For Onboarding - Set up user role - For Offboarding - Remove user role - [Conditional flow](https://gatlabs.com/knowledge/tech-tips/conditional-workflows/) - set up a workflow based on conditions - [Run immediately after approval](https://gatlabs.com/knowledge/tech-tips/scheduled-time-based-workflows/) - set up a specific time for when the workflow to run ![](https://gatlabs.com/knowledge/wp-content/uploads/2022/10/2026-05-28-13_57_37-Settings.png) - **Next** - click to proceed further. **Search for a user** - select any user you want to take the action for. The users can be added individually, by groups, or by org. unit and can also be imported via Google spreadsheet. ![](https://gatlabs.com/knowledge/wp-content/uploads/2022/10/2026-05-28-13_59_47-Settings.png) When the users are selected click on the **Next** button. A new window will be displayed. Click on the '**+ plus**' button to - **Add an action** - **Add action sets** - **Add condition** ![Click on the '+ plus' button to Add an action Add action sets Add condition](https://gatlabs.com/knowledge/wp-content/uploads/2022/10/2026-05-28-14_08_24-Settings.png) A pop-up window will be shown. Search for the actions and select them - User > **Set user role** - Users > **Remove user role** ![Search for the actions and select them User > Set user role Users > Remove user role](https://gatlabs.com/knowledge/wp-content/uploads/2022/10/2026-05-28-14_43_55-Settings.png) When the actions are selected fill in the details required. ### 1) Set user role Double click on the action and fill in the required details - **Role** - select any of the custom or pre-build roles - **Scope** (3) - select the scope of the role - All organizational units - Specific org. units only ![](https://gatlabs.com/knowledge/wp-content/uploads/2022/10/2026-05-28-14_46_45-Settings.png) ### 2) Remove user role The Admins can also remove already assigned roles. Select the "remove user role" action, double click on it and fill in the required data The users will lose the selected roles ![The Admins can also remove already assigned roles. Select the "remove user role" action, double click on it and fill in the required data The users will lose the selected roles](https://gatlabs.com/knowledge/wp-content/uploads/2022/10/2026-05-28-14_50_50-Settings.png) When actions are filled in click on **Send approval request** ![](https://gatlabs.com/knowledge/wp-content/uploads/2022/10/2026-05-28-14_51_50-Settings.png) ### Approval on request The Security Officer will receive an **email notification** for the approval of the workflow. **Note:** If [pre-approval is enabled](https://gatlabs.com/knowledge/tech-tips/how-to-set-up-preapproval-acces-for-flow/) no email will be sent for approval. From the email they click on "approve request", this will open Flow for the secuirity officer where they can approve the request In **Flow > Workflow** - the Admin can see the details for the requested workflow. ### Result When the workflow is approved the actions will take an effect. The result can be seen on the **Workflow** or **Approval** details (eye icon) page. If an error occurred click on the value in the Failed field. This will show you the reason for the failed workflow ## Related Posts - [GAT Flow Product Overview](https://gatlabs.com/knowledge/tech-tips/flow-overview/) - [Workspace ‘Role’ Reporting in the Users Audit](https://gatlabs.com/knowledge/tech-tips/workspace-role-reporting-in-the-users-audit/) - [User Roles and Privileges within Google Workspace Admin Console](https://gatlabs.com/knowledge/tech-tips/user-roles-and-privileges-within-google-workspace-admin-console/)