{"id":558,"date":"2021-01-03T17:22:57","date_gmt":"2021-01-03T17:22:57","guid":{"rendered":"https:\/\/gatlabs.com\/knowledge\/?p=558"},"modified":"2025-12-16T18:04:55","modified_gmt":"2025-12-16T18:04:55","password":"","slug":"gat-unlock-first-steps","status":"publish","type":"docs","link":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/","title":{"rendered":"GAT Unlock \u2013 First Steps"},"content":{"rendered":"\r\n<h1 class=\"wp-block-heading\">What is GAT Unlock?<\/h1>\r\n\r\n\r\n\r\n<p data-start=\"266\" data-end=\"419\">GAT Unlock is a <strong data-start=\"282\" data-end=\"313\">Multi-Party Approval system<\/strong> for Google Workspace that controls sensitive admin actions through enforced oversight and accountability.<\/p>\r\n<p data-start=\"421\" data-end=\"810\">It operates on the principle that accessing documents, viewing email content, or changing file ownership without the owner\u2019s knowledge can only occur with the active involvement of at least two authorised people within the organisation. One is the requesting Administrator, and the other is a designated Security Officer or Verification Officer, approved and verified by senior management.<\/p>\r\n<p data-start=\"812\" data-end=\"1070\">GAT Unlock is an additional service that works on top of the GAT product suite. For non-Education domains, it is available as a paid add-on. It is not enabled by default and cannot be self-configured; activation and role assignment must be formally approved.<\/p>\r\n\r\n\r\n\r\n<h1 class=\"wp-block-heading\">Policy<\/h1>\r\n\r\n\r\n\r\n<p>Due to security reasons, we do\u00a0<strong>not<\/strong>\u00a0enable GAT Unlock during the\u00a0<strong>trial version<\/strong>\u00a0of the app.<\/p>\r\n\r\n\r\n\r\n<p>From the introduction, the service will be visible to domains and each domain Admin can apply to have it enabled. To avail of this service please email\u00a0<a href=\"mailto:unlock@generalaudittool.com\">unlock@generalaudittool.com<\/a>\u00a0with your request. The requesting email must contain the following\u00a0<strong>4 items<\/strong>.<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li>The contact details of the Google Apps Administrator applying. \u00a0<\/li>\r\n<li>The name of the Security Officer(s), her\/his position(s), email and phone number.<\/li>\r\n<li>The contact details (email and phone number) for the person from whom the GAT team must seek confirmation before enabling this feature (See the list below for the minimum level of organization officer we expect to have to request approval from. Please send us their full contact details also and inform them they may receive contact from us.) This is required to verify the separate identities of both the Administrators and Security Officers.<\/li>\r\n<li>The PO details for the requested service, see the price list below. (Not required for education domains that have purchased GAT.)<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p>There can be many Security Officers, and the service will be available to all Super Admins once enabled.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-table\">\r\n<table>\r\n<tbody>\r\n<tr>\r\n<td>Number of users in the domain<\/td>\r\n<td>Verification Requirements or job position to approve the enablement of the product<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>1- 49<\/td>\r\n<td>Owner, CEO, CFO<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>50 \u2013 99<\/td>\r\n<td>CEO, CFO, Head of HR, CIO<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>100 \u2013 499<\/td>\r\n<td>CEO, CFO, Head of HR, CIO<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>500 \u2013 999<\/td>\r\n<td>CFO, Head of HR, CIO<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>1,000 \u2013 4,999<\/td>\r\n<td>Head of HR, CIO, CSO<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>5,000 \u2013 9,999<\/td>\r\n<td>Head of HR, CIO, CSO<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>10,000+<\/td>\r\n<td>Head of HR, CIO, CSO<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<\/figure>\r\n\r\n\r\n\r\n<p>You can add as many Security Officers as needed, all of them will receive the Super Admins&#8217; or delegated auditors&#8217; requests and any of the designated Security Officers will be able to<strong> approve or deny<\/strong> them.<\/p>\r\n<p>The Security Officer list for all domains is maintained by generalaudittool.com staff. Only Security Officers and Approvers can request changes to the list via unlock@generalaudittool.com<\/p>\r\n<p>When the \u2018GAT Unlock\u2019 service is enabled Administrators can generate access or change requests, but only Security Officers can approve them. An individual can be a member of both lists but cannot approve their own requests.\u00a0<\/p>\r\n<p>Only a Super Admin or delegated auditor can request permission to change files\/folders or access to contents. The Security Officer\u2019s sole purpose is to approve requests sent.<\/p>\r\n<p><strong>By design a Security Officer cannot self-approve their own requests, you would need a second Security Officer to perform changes.<\/strong><\/p>\r\n<p><strong>For easier management, it is recommended to have\u00a0at least two Security Officers\u00a0in the domain.<\/strong><\/p>\r\n\r\n\r\n\r\n<p>Administrators and Security Officers should remember the verification process is there to protect you, your domain data, and your user\u2019s privacy and rights, while also enabling you to act in the organization\u2019s best interests.<\/p>\r\n\r\n\r\n\r\n\r\n\r\n<p><strong>Why all this effort? <\/strong><\/p>\r\n<p>We respect your data security. We respect your company\u2019s right to be protected. This is the highest security model available within Google for the Work Environment.<\/p>\r\n\r\n\r\n\r\n<h1 class=\"wp-block-heading\">How to Use GAT Unlock<\/h1>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">File Management \u2013 Changing ownership or file access rights<\/h2>\r\n\r\n\r\n\r\n<p>GAT Unlock is tightly integrated with the powerful search and filter options available in GAT+. This means you only have to do things once.<\/p>\r\n\r\n\r\n\r\n<p>In<strong> this example,<\/strong> we are going to find all the spreadsheets owned by the group \u2018sales\u2019 that are shared externally, and then we will remove the external sharing and change the ownership (on all the selected files at once).<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\"><strong>TIP: Always narrow the file request with a search first \u2013 saves time and makes approval simpler.<\/strong><\/h3>\r\n\r\n\r\n\r\n<p><strong>Step 1:\u00a0<\/strong>Click on the \u2018<em>Apply custom filter<\/em>\u2019 button in<em>\u00a0Drive Audit<\/em>.<\/p>\r\n\r\n\r\n\r\n<p><strong>\u00a0<\/strong>Select the following option:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li>For the filter\u00a0<strong><em>Type<\/em><\/strong>\u00a0select\u00a0<strong><em>User\/Group\/OU<\/em>\u00a0search<\/strong>, we will enter the Group you want\u00a0in this field \u2018<strong><em>Local User\/Group<\/em><\/strong>\u2019, make sure to enter the full email address.<\/li>\r\n<li>Under the\u00a0<strong>Ownership<\/strong>\u00a0option select \u2018<strong><em>Owned<\/em><\/strong>\u2019, this will show all the files\u00a0<em>owned<\/em>\u00a0by the \u2018<em>Sales<\/em>\u2019 group. Otherwise, it would show all of the files associated with any Google <em>group<\/em>, where <em>the group<\/em>\u00a0shows up as\u00a0<em>Owner, Editor, or Reader<\/em>.<\/li>\r\n<li>In the filter Definition area, select the parameter\u00a0<strong><em>Type<\/em><\/strong>\u00a0equal to\u00a0<strong><em>Document,<\/em><\/strong>\u00a0and to add another search parameter click on the \u2018<em>Add rule<\/em>\u2019 button and select \u2018<em><strong>Sharing Flag<\/strong>\u2019\u00a0<\/em>containing<em>\u00a0\u2018<strong>Shared Out\u2019<\/strong><\/em>.\r\n<ul>\r\n<li>Selecting shared out will only focus on files leaving your domain. \u00a0<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-full wp-image-11888\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_26_07-GAT.png\" alt=\"\" width=\"1571\" height=\"869\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_26_07-GAT.png 1571w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_26_07-GAT-300x166.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_26_07-GAT-1024x566.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_26_07-GAT-768x425.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_26_07-GAT-1536x850.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_26_07-GAT-360x199.png 360w\" sizes=\"(max-width: 1571px) 100vw, 1571px\" \/><\/p>\r\n\r\n\r\n\r\n\r\n\r\n<p><strong>Step 2:\u00a0<\/strong>Next select the Files you want to act upon, clicking beside \u2018Title\u2019 will select all files from the search, or you can select individual files, by clicking beside the files.<\/p>\r\n<p>Click on the button\u00a0<strong>File operation<\/strong>\u00a0and then select the\u00a0<strong>File Management<\/strong>\u00a0option.<\/p>\r\n\r\n\r\n\r\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\r\n<p><strong>NOTE: The transfer will work on both Active and Suspended accounts.<\/strong><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-11889\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_29_54-GAT.png\" alt=\"\" width=\"1594\" height=\"497\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_29_54-GAT.png 1594w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_29_54-GAT-300x94.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_29_54-GAT-1024x319.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_29_54-GAT-768x239.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_29_54-GAT-1536x479.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_29_54-GAT-360x112.png 360w\" sizes=\"(max-width: 1594px) 100vw, 1594px\" \/><\/p>\r\n\r\n\r\n\r\n<p><strong>Step 3<\/strong>: In this example, we are making the account manager the\u00a0<strong>new owner<\/strong>\u00a0of the selected files.<\/p>\r\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-11890\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_45_59-GAT.png\" alt=\"\" width=\"1121\" height=\"610\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_45_59-GAT.png 1121w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_45_59-GAT-300x163.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_45_59-GAT-1024x557.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_45_59-GAT-768x418.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_45_59-GAT-360x196.png 360w\" sizes=\"(max-width: 1121px) 100vw, 1121px\" \/><\/p>\r\n<p>\u00a0We can also\u00a0<strong>remove external access<\/strong>\u00a0to the spreadsheets and add or replace the sharing permissions.<\/p>\r\n\r\n\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11891\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_57_13-GAT.png\" alt=\"\" width=\"1115\" height=\"795\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_57_13-GAT.png 1115w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_57_13-GAT-300x214.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_57_13-GAT-1024x730.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_57_13-GAT-768x548.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_57_13-GAT-360x257.png 360w\" sizes=\"(max-width: 1115px) 100vw, 1115px\" \/><\/p>\r\n<p>As a summary, you will see what actions will be taken on the selected files.<\/p>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11892\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_58_51-GAT.png\" alt=\"\" width=\"989\" height=\"890\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_58_51-GAT.png 989w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_58_51-GAT-300x270.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_58_51-GAT-768x691.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-14_58_51-GAT-360x324.png 360w\" sizes=\"(max-width: 989px) 100vw, 989px\" \/><\/p>\r\n\r\n\r\n\r\n\r\n\r\n<p>Then click on\u00a0<strong>Send request.\u00a0<\/strong><\/p>\r\n\r\n\r\n\r\n<p>An email is going to be sent to your security officer. Click\u00a0<strong>here\u00a0<\/strong>to see and approve the request.<\/p>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11904\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_.png\" alt=\"\" width=\"1467\" height=\"600\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_.png 1467w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_-300x123.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_-1024x419.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_-768x314.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_-360x147.png 360w\" sizes=\"(max-width: 1467px) 100vw, 1467px\" \/><\/p>\r\n\r\n\r\n\r\n\r\n\r\n<p>If the security officer approves your actions, they will be executed and you will be notified.<\/p>\r\n\r\n\r\n\r\n<p>If permission is not granted by the security officer, you will also be notified and no actions will be taken.<\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Access Permissions Granted \u2013 How to Silently Copy or View Files<\/h2>\r\n\r\n\r\n\r\n<p>We are going to use a powerful search feature inside of the GAT+ Drive audit to identify the contents of the documents we\u2019re going to investigate. This feature is called the \u2018Full content text search\u2019. It allows admins\/delegated auditors to use a word or sentence to search through all of the files across the domain and to return documents that contain them.<\/p>\r\n\r\n\r\n\r\n<p><strong>Step 1:<\/strong>\u00a0Click on the \u2018<em>Apply custom filter<\/em>\u2019 button.<\/p>\r\n\r\n\r\n\r\n<p><strong>Step 2:<\/strong>\u00a0Enter the word or sentence to return files that contain them. Select the user\u2019s account you want to search through you can leave this field blank to search your entire domain\u2019s Drive or enter a user, Google Group, or Org Unit to search through them only.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><img decoding=\"async\" class=\"wp-image-41728\" title=\"GAT Unlock - First Steps 7\" src=\"https:\/\/gatlabs.com\/wp-content\/uploads\/2020\/01\/FullContentsearch.png\" alt=\"GAT Unlock - First Steps 7\" \/><\/figure>\r\n\r\n\r\n\r\n<p>You can also use multiple rules in the\u00a0<strong>Definition<\/strong>\u00a0section of the (Query builder) Apply custom filter. I used the\u00a0<strong>Updated<\/strong>\u00a0search parameter. Once you click on the\u00a0<em>Apply<\/em>\u00a0button the search will begin.<\/p>\r\n\r\n\r\n\r\n<p>It might take some time depending on how many files you have across your domain.<\/p>\r\n\r\n\r\n\r\n<p><strong>Step 3:\u00a0<\/strong>Select the files you are interested in, remember that these files contain the sentence\u00a0<em><strong>\u201cprivate and confidential\u201d<\/strong><\/em>.<\/p>\r\n\r\n\r\n\r\n<p>Click on the \u2018Files operation\u2019 button and then select \u2018<strong>Create new access request<\/strong>\u2019.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11905\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_39_00-GAT.png\" alt=\"\" width=\"1570\" height=\"536\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_39_00-GAT.png 1570w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_39_00-GAT-300x102.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_39_00-GAT-1024x350.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_39_00-GAT-768x262.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_39_00-GAT-1536x524.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_39_00-GAT-360x123.png 360w\" sizes=\"(max-width: 1570px) 100vw, 1570px\" \/><\/p>\r\n\r\n\r\n\r\n<p><strong>Step 4:<\/strong>\u00a0Next we will select a date in the future, we will have access to these files until this date. You have an option to write to your security officer explaining why you need access to these files.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><img decoding=\"async\" class=\"wp-image-41731\" title=\"GAT Unlock - First Steps 9\" src=\"https:\/\/gatlabs.com\/wp-content\/uploads\/2020\/01\/FullContentsearch2_AR.png\" alt=\"GAT Unlock - First Steps 9\" \/><\/figure>\r\n\r\n\r\n\r\n<p>Send the request to the<em>\u00a0Security Officer(s)\u00a0<\/em>for approval.<\/p>\r\n\r\n\r\n\r\n<p>The following email will be sent to the Security Officer.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11904\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_.png\" alt=\"\" width=\"1467\" height=\"600\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_.png 1467w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_-300x123.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_-1024x419.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_-768x314.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-15_36_20-GAT-Approval-requested-for-a-global-change-in-Drive-files-ethan@dev.bp_.gatl_-360x147.png 360w\" sizes=\"(max-width: 1467px) 100vw, 1467px\" \/><\/p>\r\n\r\n\r\n\r\n<p>The Security Officer can click on the link in the email and will be taken to the approval area (<strong>Access Permissions<\/strong>) in GAT+.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><img decoding=\"async\" class=\"wp-image-41734\" title=\"GAT Unlock - First Steps 11\" src=\"https:\/\/gatlabs.com\/wp-content\/uploads\/2020\/01\/FullContentsearch4_AR.png\" alt=\"GAT Unlock - First Steps 11\" \/><\/figure>\r\n\r\n\r\n\r\n<p>When the Security Officer approves access an email will be sent to the requesting Administrator\/delegated auditor informing them. The Admin then opens the\u00a0<strong>\u2018Access Permissions list\u2019<\/strong>\u00a0menu again and can see the full list of their Access requests along with the time left for each request to remain valid.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11912\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_04_29-GAT.png\" alt=\"\" width=\"1586\" height=\"443\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_04_29-GAT.png 1586w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_04_29-GAT-300x84.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_04_29-GAT-1024x286.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_04_29-GAT-768x215.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_04_29-GAT-1536x429.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_04_29-GAT-360x101.png 360w\" sizes=\"(max-width: 1586px) 100vw, 1586px\" \/><\/p>\r\n<p>Filter in the list for your request.<\/p>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11913\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_06_11-GAT.png\" alt=\"\" width=\"979\" height=\"442\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_06_11-GAT.png 979w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_06_11-GAT-300x135.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_06_11-GAT-768x347.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_06_11-GAT-360x163.png 360w\" sizes=\"(max-width: 979px) 100vw, 979px\" \/><\/p>\r\n\r\n\r\n\r\n\r\n\r\n<p>Once the request is selected a new window will open with the results, on the right-hand side those files will have a new tab called \u2018<strong>Actions<\/strong>\u2018 under that the requestor can\u00a0<strong>Download<\/strong>\u00a0or\u00a0<strong>Show file<\/strong>\u00a0the contents silently without the owners\u2019 awareness.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><img decoding=\"async\" class=\"wp-image-41741\" title=\"GAT Unlock - First Steps 14\" src=\"https:\/\/gatlabs.com\/wp-content\/uploads\/2020\/01\/FullContentsearch_view-content.png\" alt=\"GAT Unlock - First Steps 14\" \/><\/figure>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Pre-approved Access for Admins to All Files for a Range of Users<\/h2>\r\n\r\n\r\n\r\n<p>If your Super admins wish not to get Security Officer approval every time they want to make file permission changes or to view file contents, a security officer can give them pre-approval.<\/p>\r\n\r\n\r\n\r\n<p>In the Security Officer section on the GAT+ sidebar menu, select \u2018Preapproved Access\u2019 and then click on the \u2018+\u2019 button to add a new Preapproved admin.<\/p>\r\n\r\n\r\n\r\n<p>Once clicked a new \u2018pop-up\u2019 screen will appear.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-image is-style-twentytwentyone-border\"><img decoding=\"async\" class=\"wp-image-41864\" title=\"GAT Unlock - First Steps 15\" src=\"https:\/\/gatlabs.com\/wp-content\/uploads\/2020\/01\/SO_preapproved-1.png\" alt=\"GAT Unlock - First Steps 15\" \/><\/p>\r\n\r\n\r\n\r\n<p>Here the security officer can add the email address of the Super Admin, the OU over which they will have access, they can select a full OU tree and set approval access until a certain future date. In the above screenshot, I gave Alex (super admin) access to the Support OU<\/p>\r\n\r\n\r\n\r\n<p>Multiple different approvals can be given by the security officer, including several to the same Super Admin, each covering different scopes.<\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\"><strong>Changing Ownership of an Entire Folder Tree<\/strong><\/h2>\r\n\r\n\r\n\r\n<p>Another feature of \u2018Unlock\u2019 is that it enables an often requested task of moving an entire folder tree, root folder and sub-folders, from one or many owners to a new owner.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11915\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_09_04-GAT.png\" alt=\"\" width=\"1571\" height=\"667\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_09_04-GAT.png 1571w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_09_04-GAT-300x127.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_09_04-GAT-1024x435.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_09_04-GAT-768x326.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_09_04-GAT-1536x652.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_09_04-GAT-360x153.png 360w\" sizes=\"(max-width: 1571px) 100vw, 1571px\" \/><\/p>\r\n\r\n\r\n\r\n<p>This task is completed with the File Management tab. Use the drop-down menu button next to the folder name to see the options. Click on\u00a0<strong>Apply permission change to this folder (recursive)<\/strong>. When the File Management option menu appears, enter the new owner\u2019s email address. And make sure to remove the previous owner as editor.<\/p>\r\n\r\n\r\n\r\n<p>Note: When changing ownership, the previous owner is added automatically as an editor. You can &#8220;deny access for the old owner&#8221; if you choose that option.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11917\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_12_28-GAT.png\" alt=\"\" width=\"1116\" height=\"752\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_12_28-GAT.png 1116w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_12_28-GAT-300x202.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_12_28-GAT-1024x690.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_12_28-GAT-768x518.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_12_28-GAT-360x243.png 360w\" sizes=\"(max-width: 1116px) 100vw, 1116px\" \/><\/p>\r\n\r\n\r\n\r\n<p>This is an ideal feature for consolidating a shared folder structure or handling leaving staff or students.<\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Delegating Access to an email account<\/h2>\r\n\r\n\r\n\r\n<p>GAT+ allows Admins to delegate access to a User account to another User for a certain period of hours. This may be for business purposes but it also facilitates the fast search and viewing of all the account emails via another user\u2019s browser.<\/p>\r\n\r\n\r\n\r\n<p><strong>BEFORE USING:\u00a0<\/strong>Please ensure email delegation is allowed for users in your domain. Go to the Google Workspace Admin Console and under\u00a0<strong><em>Apps<\/em>\u00a0&gt;\u00a0<em>Google Workspace Apps<\/em>\u00a0&gt;\u00a0<em>Settings for Gmail<\/em>\u00a0&gt;\u00a0<em>User settings<\/em>\u00a0<\/strong>check if the email delegation box is allowed for your domain.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11923\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_18_03-Window.png\" alt=\"\" width=\"1854\" height=\"890\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_18_03-Window.png 1854w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_18_03-Window-300x144.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_18_03-Window-1024x492.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_18_03-Window-768x369.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_18_03-Window-1536x737.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_18_03-Window-360x173.png 360w\" sizes=\"(max-width: 1854px) 100vw, 1854px\" \/><\/p>\r\n\r\n\r\n\r\n<p>Launch the GAT+ tool, enter the <strong>User Audit<\/strong> section then click on the<strong> Email Info<\/strong> Tab.<\/p>\r\n\r\n\r\n\r\n<p>In the Email Info Tab, select any user and click on the Actions button to add an email delegate to their account.<\/p>\r\n\r\n\r\n\r\n<p>You have the ability to remove existing mail delegation which is already in place as well.<\/p>\r\n\r\n\r\n\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11931\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_21_33-Window.png\" alt=\"\" width=\"1897\" height=\"571\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_21_33-Window.png 1897w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_21_33-Window-300x90.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_21_33-Window-1024x308.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_21_33-Window-768x231.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_21_33-Window-1536x462.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_21_33-Window-360x108.png 360w\" sizes=\"(max-width: 1897px) 100vw, 1897px\" \/><\/p>\r\n\r\n\r\n\r\n<p>Here the Admin can select the account they wish to gain access to, then select the account they want to give this access to and finally select the number of hours they would like delegated access to be approved for.<\/p>\r\n<p>Once the request is sent, the Security Officer will still have to approve it before the delegation is created.<\/p>\r\n\r\n\r\n\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11932\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_23_19-GAT.png\" alt=\"\" width=\"1113\" height=\"418\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_23_19-GAT.png 1113w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_23_19-GAT-300x113.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_23_19-GAT-1024x385.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_23_19-GAT-768x288.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_23_19-GAT-360x135.png 360w\" sizes=\"(max-width: 1113px) 100vw, 1113px\" \/><\/p>\r\n\r\n\r\n\r\n<p>Once approved the delegated account appears in the accounts drop-down list when the profile picture is selected in Gmail.<\/p>\r\n\r\n\r\n\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11933\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_25_58-Inbox-7-stanimir@dev.bp_.gatlabs.com-GAT-Labs-BP-tester-domain-Mail.png\" alt=\"\" width=\"495\" height=\"709\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_25_58-Inbox-7-stanimir@dev.bp_.gatlabs.com-GAT-Labs-BP-tester-domain-Mail.png 495w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_25_58-Inbox-7-stanimir@dev.bp_.gatlabs.com-GAT-Labs-BP-tester-domain-Mail-209x300.png 209w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_25_58-Inbox-7-stanimir@dev.bp_.gatlabs.com-GAT-Labs-BP-tester-domain-Mail-357x512.png 357w\" sizes=\"(max-width: 495px) 100vw, 495px\" \/><\/p>\r\n\r\n\r\n\r\n<p>The delegation will automatically be revoked after the requested period.<\/p>\r\n\r\n\r\n\r\n<p><strong>Note:<\/strong>\u00a0If during the period of delegation, the account under audit, logs into their Google account and goes to their email settings, then under \u2018Accounts\u2019 the account owner will see that the Admin has granted delegated access to the account.<\/p>\r\n\r\n\r\n\r\n<p>In addition, if the delegated user reads any unopened email in the audited account, this email will be marked as \u2018read\u2019.<\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Delete Spam, Inappropriate, or Accidental Emails<\/h2>\r\n\r\n\r\n\r\n<p>There are multiple reasons to have the ability to identify and remove emails that have been received by all or any of your domain users. Here are some unwanted scenarios:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li>An email is sent to the wrong user or group<\/li>\r\n<li>An email contains inappropriate content<\/li>\r\n<li>An email that contains sensitive information<\/li>\r\n<li>An email that has gone past spam filtering or is a phishing email.<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p>GAT+ allows Admins to delete these emails from all accounts at once.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-image\"><img decoding=\"async\" class=\"wp-image-41825\" title=\"GAT Unlock - First Steps 22\" src=\"https:\/\/gatlabs.com\/wp-content\/uploads\/2020\/01\/Emailcontentsearch-2.png\" alt=\"GAT Unlock - First Steps 21\" \/><\/p>\r\n\r\n\r\n\r\n<p>We recommend using \u2018Email Content Search\u2019 to track down these emails. It is a \u2018real-time\u2019 search that is highly configurable (see the \u2018<a href=\"https:\/\/support.google.com\/mail\/answer\/7190\" target=\"_blank\" rel=\"noreferrer noopener\">search tips<\/a>\u2019 link beside the search box). In the screenshot above we use the example search parameters<\/p>\r\n\r\n\r\n\r\n<blockquote>\r\n<p><em>\u201c<strong>SEO proposal\u201d in:anywhere newer_than:90d<\/strong><\/em><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n<p>This tells GAT+ to search in all emails, for all users and look for emails that contain the words \u201cSEO proposal\u201d which are also newer than 90 days.<\/p>\r\n<p>When the results come back select the emails you wish to view\/download\/delete then click the \u201cEmail operations\u201d button and select \u201cAccess permissions list\u201d.<\/p>\r\n\r\n\r\n\r\n<p>When you search if the result cannot be displayed promptly, the search can go into Background search. You can access those searches by selecting \u2018<strong><em>Previous searches<\/em><\/strong>\u2018.<\/p>\r\n\r\n\r\n\r\n<p>All older or background searches will be displayed there.<\/p>\r\n<p>Once completed, under the <em><strong>\u2018Actions\u2019<\/strong><\/em>\u00a0tab select the green checkmark to display the results.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11949\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_49_10-GAT.png\" alt=\"\" width=\"1490\" height=\"698\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_49_10-GAT.png 1490w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_49_10-GAT-300x141.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_49_10-GAT-1024x480.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_49_10-GAT-768x360.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-16_49_10-GAT-360x169.png 360w\" sizes=\"(max-width: 1490px) 100vw, 1490px\" \/><\/p>\r\n\r\n\r\n\r\n<p>Once the emails are selected, click on the \u2018<strong>Access permissions list<\/strong>\u2019 button and send a request to your SO (security officer). Your SO will have to approve your request.\u00a0<\/p>\r\n\r\n\r\n\r\n<p>Before sending the request if you intend to delete the emails rather than just view or download them then check the\u00a0<em>\u2018<strong>Allow removing emails<\/strong>\u2019<\/em>\u00a0box.<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11950\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_04_19-GAT.png\" alt=\"\" width=\"1598\" height=\"637\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_04_19-GAT.png 1598w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_04_19-GAT-300x120.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_04_19-GAT-1024x408.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_04_19-GAT-768x306.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_04_19-GAT-1536x612.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_04_19-GAT-360x144.png 360w\" sizes=\"(max-width: 1598px) 100vw, 1598px\" \/><\/p>\r\n\r\n\r\n\r\n<p>As an option, you can send a message to the Security officer giving a reason for the investigation.<\/p>\r\n<p>After performing those steps please select and click <em>\u2018send request\u2019<\/em>\u00a0and wait for approval to be returned from the Security Officer.\u00a0<\/p>\r\n<p>You can check all the requests to the SO in the \u201cSecurity Officer\u201d section in GAT+.<\/p>\r\n\r\n\r\n\r\n<p>Note: You can not self-approve your own request. An admin sends the request the Security officer approves.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-image is-style-twentytwentyone-border\"><img decoding=\"async\" class=\"wp-image-41839\" title=\"GAT Unlock - First Steps 25\" src=\"https:\/\/gatlabs.com\/wp-content\/uploads\/2020\/01\/Emailcontentsearch_SO.png\" alt=\"GAT Unlock - First Steps 24\" \/><\/p>\r\n\r\n\r\n\r\n<p>Once your request has been approved, you will receive an email notification stating that.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-image is-style-twentytwentyone-border\"><img decoding=\"async\" class=\"wp-image-28290\" title=\"GAT Unlock - First Steps 26\" src=\"https:\/\/generalaudittool.com\/wp-content\/uploads\/2019\/08\/screenshot-mail.google.com-2019.08.29-16_02_46-1030x361.png\" alt=\"GAT Unlock - First Steps 25\" \/><\/p>\r\n\r\n\r\n\r\n<p><strong>Note<\/strong>: While you wait for the approval, you might use the tool for other searches. When you come back to &#8220;<strong>Email Content search&#8221;<\/strong> click on the <strong>Previous searches\/Unlock <\/strong>button.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"792\" height=\"218\" class=\"wp-image-561\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/11\/2021-11-19-17_18_39-GAT.png\" alt=\"\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/11\/2021-11-19-17_18_39-GAT.png 792w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/11\/2021-11-19-17_18_39-GAT-300x83.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/11\/2021-11-19-17_18_39-GAT-768x211.png 768w\" sizes=\"(max-width: 792px) 100vw, 792px\" \/><\/p>\r\n\r\n\r\n\r\n<p>You can then delete one or all of the emails using the drop-down option in the Emails Operation button.\u00a0<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-image\"><img decoding=\"async\" class=\"wp-image-41840\" title=\"GAT Unlock - First Steps 27\" src=\"https:\/\/gatlabs.com\/wp-content\/uploads\/2020\/01\/Emailcontentsearch_deletemail.png\" alt=\"GAT Unlock - First Steps 26\" \/><\/p>\r\n\r\n\r\n\r\n<p>By default, you can send the emails to the user\u2019s\u00a0<strong>Trash folder<\/strong>\u00a0on their Gmail but if you wish to permanently delete these emails then select \u2018<strong>Delete permanently&#8221;<\/strong>.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-image is-style-twentytwentyone-border\"><img decoding=\"async\" class=\"wp-image-41862\" title=\"GAT Unlock - First Steps 28\" src=\"https:\/\/gatlabs.com\/wp-content\/uploads\/2020\/01\/Emailcontentsearch_deletemail1.png\" alt=\"GAT Unlock - First Steps 27\" \/><\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Pre-approved Access for Super Admins to all Emails<\/h2>\r\n\r\n\r\n\r\n<p>To enable <strong>preapproval<\/strong> for Super Admins navigate to the <strong>Configuration<\/strong> section of GAT+ and enter the<strong> Security officer<\/strong> area.<\/p>\r\n\r\n\r\n\r\n<p>Once there click on the Preapproved Access Tab and click on the &#8220;plus icon&#8221; and \u201c<strong>Add new pre-approved access<\/strong>\u201d.<\/p>\r\n\r\n\r\n\r\n<p>The Security Officer can select\u00a0<\/p>\r\n<ul>\r\n<li><strong>Authorized user<\/strong> &#8211; the user who will have access to emails and can take Unlock allowed actions without the need for approval<\/li>\r\n<li><strong>Type<\/strong> &#8211; select the access area for the preapproval\u00a0<\/li>\r\n<li><strong>Scope<\/strong> &#8211; select what users will be affected by the preapproval\u00a0<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11951\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_11_15-Window.png\" alt=\"\" width=\"1640\" height=\"908\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_11_15-Window.png 1640w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_11_15-Window-300x166.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_11_15-Window-1024x567.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_11_15-Window-768x425.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_11_15-Window-1536x850.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_11_15-Window-360x199.png 360w\" sizes=\"(max-width: 1640px) 100vw, 1640px\" \/><\/p>\r\n\r\n\r\n\r\n<p>This is ideal for situations where Admins do not need to get constant approval to view\/download or remove emails.<\/p>\r\n\r\n\r\n\r\n<p>An example would be in an education domain where the Super Admin would have full open access (view\/download or remove emails) for all Student OU\u2019s but would still have to get selective approval from the security officer to access an in the Staff or HR OU.<\/p>\r\n\r\n\r\n\r\n\r\n\r\n<p>The Security Officer can also enable the options to r<strong>emove email<\/strong> or <strong>add email delegation<\/strong> <strong>without approval\u00a0<\/strong><\/p>\r\n\r\n\r\n\r\n<h1 class=\"wp-block-heading\">Non-Super Admin Auditors<\/h1>\r\n\r\n\r\n\r\n<p>This feature is ideal when Super Admins want to delegate the audit function to local managers or regional security personnel.<\/p>\r\n\r\n\r\n\r\n<p>GAT+ allows the Admin to select the scope of users that will be covered by the Auditor.<\/p>\r\n\r\n\r\n\r\n<p>The admin can also select what audit areas to be included.<\/p>\r\n\r\n\r\n\r\n<p><em>Auditors will have access to Audit areas and for the scope, they are given only.<\/em><\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image is-style-twentytwentyone-border\"><\/figure>\r\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11955\" src=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_20_31-Window.png\" alt=\"\" width=\"1584\" height=\"890\" srcset=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_20_31-Window.png 1584w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_20_31-Window-300x169.png 300w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_20_31-Window-1024x575.png 1024w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_20_31-Window-768x432.png 768w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_20_31-Window-1536x863.png 1536w, https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/01\/2024-11-28-17_20_31-Window-360x202.png 360w\" sizes=\"(max-width: 1584px) 100vw, 1584px\" \/><\/p>\r\n","protected":false},"excerpt":{"rendered":"<p>What is GAT Unlock? GAT Unlock is a Multi-Party Approval system for Google Workspace that controls sensitive admin actions through enforced oversight and accountability. It operates on the principle that accessing documents, viewing email content, or changing file ownership without the owner\u2019s knowledge can only occur with the active involvement of at least two authorised [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":12724,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"doc_category":[17],"glossaries":[],"doc_tag":[25],"class_list":["post-558","docs","type-docs","status-publish","has-post-thumbnail","hentry","doc_category-getting-started","doc_tag-gat-unlock"],"year_month":"2026-04","word_count":2654,"total_views":"6106","reactions":{"happy":"1","normal":"2","sad":"0"},"author_info":{"name":"stan","author_nicename":"stan","author_url":"https:\/\/gatlabs.com\/knowledge\/author\/stan\/"},"doc_category_info":[{"term_name":"Getting Started","term_url":"https:\/\/gatlabs.com\/knowledge\/tech-tips-category\/getting-started\/"}],"doc_tag_info":[{"term_name":"GAT Unlock","term_url":"https:\/\/gatlabs.com\/knowledge\/tech-tips-tag\/gat-unlock\/"}],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.4 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>GAT Unlock \u2013 First Steps - GAT Knowledge Base<\/title>\n<meta name=\"description\" content=\"GAT Unlock\u00a0is the most sophisticated security management mechanism for Google Apps (Google Workspace) available today.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GAT Unlock \u2013 First Steps\" \/>\n<meta property=\"og:description\" content=\"GAT Unlock\u00a0is the most sophisticated security management mechanism for Google Apps (Google Workspace) available today.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/\" \/>\n<meta property=\"og:site_name\" content=\"GAT Knowledge Base\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-16T18:04:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2022\/01\/product-overview-gat-unlock-682b8c4eabaa5.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1055\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"18 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/gat-unlock-first-steps\\\/\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/gat-unlock-first-steps\\\/\",\"name\":\"GAT Unlock \u2013 First Steps - GAT Knowledge Base\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/gat-unlock-first-steps\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/gat-unlock-first-steps\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/product-overview-gat-unlock-682b8c4eabaa5.webp\",\"datePublished\":\"2021-01-03T17:22:57+00:00\",\"dateModified\":\"2025-12-16T18:04:55+00:00\",\"description\":\"GAT Unlock\u00a0is the most sophisticated security management mechanism for Google Apps (Google Workspace) available today.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/gat-unlock-first-steps\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/gat-unlock-first-steps\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/gat-unlock-first-steps\\\/#primaryimage\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/product-overview-gat-unlock-682b8c4eabaa5.webp\",\"contentUrl\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/product-overview-gat-unlock-682b8c4eabaa5.webp\",\"width\":1055,\"height\":600,\"caption\":\"GAT Unlock\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/gat-unlock-first-steps\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tech Tips\",\"item\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/tech-tips\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"GAT Unlock \u2013 First Steps\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#website\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/\",\"name\":\"GAT Knowledge Base\",\"description\":\"Your source of all things GAT\",\"publisher\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#organization\",\"name\":\"GAT Labs Knowledge Base\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/Group-1159.svg\",\"contentUrl\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/Group-1159.svg\",\"width\":361,\"height\":97,\"caption\":\"GAT Labs Knowledge Base\"},\"image\":{\"@id\":\"https:\\\/\\\/gatlabs.com\\\/knowledge\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"GAT Unlock \u2013 First Steps - GAT Knowledge Base","description":"GAT Unlock\u00a0is the most sophisticated security management mechanism for Google Apps (Google Workspace) available today.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/","og_locale":"en_GB","og_type":"article","og_title":"GAT Unlock \u2013 First Steps","og_description":"GAT Unlock\u00a0is the most sophisticated security management mechanism for Google Apps (Google Workspace) available today.","og_url":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/","og_site_name":"GAT Knowledge Base","article_modified_time":"2025-12-16T18:04:55+00:00","og_image":[{"width":1055,"height":600,"url":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2022\/01\/product-overview-gat-unlock-682b8c4eabaa5.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"18 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/","url":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/","name":"GAT Unlock \u2013 First Steps - GAT Knowledge Base","isPartOf":{"@id":"https:\/\/gatlabs.com\/knowledge\/#website"},"primaryImageOfPage":{"@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/#primaryimage"},"image":{"@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/#primaryimage"},"thumbnailUrl":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2022\/01\/product-overview-gat-unlock-682b8c4eabaa5.webp","datePublished":"2021-01-03T17:22:57+00:00","dateModified":"2025-12-16T18:04:55+00:00","description":"GAT Unlock\u00a0is the most sophisticated security management mechanism for Google Apps (Google Workspace) available today.","breadcrumb":{"@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/#primaryimage","url":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2022\/01\/product-overview-gat-unlock-682b8c4eabaa5.webp","contentUrl":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2022\/01\/product-overview-gat-unlock-682b8c4eabaa5.webp","width":1055,"height":600,"caption":"GAT Unlock"},{"@type":"BreadcrumbList","@id":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/gat-unlock-first-steps\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/gatlabs.com\/knowledge\/"},{"@type":"ListItem","position":2,"name":"Tech Tips","item":"https:\/\/gatlabs.com\/knowledge\/tech-tips\/"},{"@type":"ListItem","position":3,"name":"GAT Unlock \u2013 First Steps"}]},{"@type":"WebSite","@id":"https:\/\/gatlabs.com\/knowledge\/#website","url":"https:\/\/gatlabs.com\/knowledge\/","name":"GAT Knowledge Base","description":"Your source of all things GAT","publisher":{"@id":"https:\/\/gatlabs.com\/knowledge\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/gatlabs.com\/knowledge\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/gatlabs.com\/knowledge\/#organization","name":"GAT Labs Knowledge Base","url":"https:\/\/gatlabs.com\/knowledge\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/gatlabs.com\/knowledge\/#\/schema\/logo\/image\/","url":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/11\/Group-1159.svg","contentUrl":"https:\/\/gatlabs.com\/knowledge\/wp-content\/uploads\/2021\/11\/Group-1159.svg","width":361,"height":97,"caption":"GAT Labs Knowledge Base"},"image":{"@id":"https:\/\/gatlabs.com\/knowledge\/#\/schema\/logo\/image\/"}}]}},"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/docs\/558","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/comments?post=558"}],"version-history":[{"count":14,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/docs\/558\/revisions"}],"predecessor-version":[{"id":15569,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/docs\/558\/revisions\/15569"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/media\/12724"}],"wp:attachment":[{"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/media?parent=558"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/doc_category?post=558"},{"taxonomy":"glossaries","embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/glossaries?post=558"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/gatlabs.com\/knowledge\/wp-json\/wp\/v2\/doc_tag?post=558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}