GAT Unlock Overview

What is GAT Unlock? #

GAT Unlock is an enhancement functionality within the main GAT+ tool, and it allows Google Workspace Admins to take more actions using GAT+.

GAT Unlock operates on the principle that access to documents, or change of ownership of documents, without the owner’s knowledge or permission, can only be accomplished with the active input of at least two people in the organization.

The second person is the “Security officer” and is responsible for approving or denying requests submitted by the Super Admin.

The security officer can be any member of the domain.

GAT Unlock can be used to:

Prerequisite: When ‘GAT Unlock’ is enabled, Admins can generate access or change requests, but only Security Officers can approve them.

An individual can be a member of both lists, but cannot approve their own requests. The Security Officer list for all domains is maintained by the GAT Labs staff.


Unlock is part of all plans for Education domains:

For Enterprise, Unlock is part of:

GAT Unlock Features #

Drive Audit #

Within the GAT+ auditing areas, you’ll find GAT Unlock related features like:

  • Create a new access request – You can gain access to the contents of a file.
    With GAT+ only (without this feature), you can only view metadata related to the file. With GAT Unlock’s access request feature, you can gain access to the actual contents of files.

Shared Drive audit #

You’ll find the GAT Unlock functionality in the Shared Drive tab of the GAT+ Drive auditing area.

Email audit #

In the Email audit area, within the Emails tab and the Email Content Search tab, you’ll find the following GAT Unlock feature:

Create a new access request – With this feature, you can gain access to email content. Without this feature, you can only see metadata related to emails but not the actual contents.

While using this feature you can enable some additional requests:

Create Access Request Use Case Examples: #
Download Email Use Case Examples: #

Users – Email delegation #

In the User audit area (within the Email Info tab) you’ll be able to set Gmail mail delegation or an email auto-forwarding policy for any user. This is an actionable feature of GAT Unlock.

Set up Email Delegation use case example: #

Pre-Approve Access to Files or Emails and Flow: #

‘Pre-approval is the ability to set up a Workspace Super Admin to use the GAT Unlock functionality without needing approval from the Security Officer for each request.

Pre-approval policies can be created by the Security Officers only. It is a one-time setup.

Pre-Approval by Security Officer Use Case Examples #

GAT Flow  #

GAT Unlock is a prerequisite for Flow to work. For every request in GAT Flow, approval from a Security officer is required, unless pre-approval is set up.

5 most useful things with Unlock #

  1. How to Use Unlock
  2. Search for Specific File Types & Change Ownership in Google Workspace
  3. Set up Email delegation
  4. View content of any Google Drive file
  5. View or Download Email Contents