Posts

‘Role’ Reporting in the Users Audit

GAT+ has added ‘Role’ reporting to the Users Audit. This will be particularly helpful to Admins of large domains, who have many delegated admin users performing different roles.

How to a Create a Report of End Users Documents They Own

In this usage case, GAT allows domain admins to prepare a report that is sent to each user, showing the files that they own as a spreadsheet attachment.

The report can be prepared around several different user sets, depending on the scope the admin wishes to give to the report.

Select the Drive feature

First, we select Drive Audit then we apply a custom filter and search for files owned by our domain.

Select the filter

We simply search for files where the owner is our domain.

Select apply

Once we find all files owned by our domain, we can click the Apply button and this will run the search.

Click on the Files Operations button and select Remove Permissions. Remove Permissions has a feature to notify the owners of the files in this search result and provide them with a spreadsheet of all the files they own.

Click on the Files Operations button and select Remove Permissions.

Select 'scan' in the multi permission change tab

In the Permission change option select “Report onlythis will ensure no actions are happening on the selected search.

Add a message of your choice.

Key terms to know about when creating a custom message:

{{RECIPIENT}} – recipients full name
{{RECIPIENT.FIRSTNAME}} – recipient first name,
{{RECIPIENT.LASTNAME}} – recipient surname,
{{RECIPIENT.EMAIL}} – recipient email.

{{FILES}} – Displays in the email the files in question with a URL link.


This is the message the end user will see. The email will show him all of the files he/she owns.

This is the message the end user will see. The email will show him all of the files he/she owns.

Clicking on the ‘View files’ button at the bottom will open a Google Spreadsheet for the user.

How to Remove a G Suite User’s Access Rights

Easily remove G Suite users who have access to files they shouldn’t. Using GAT+ you can remove users from being editors or readers of files.

click to remove permissions

You can remove users by clicking on the drop-down menu next to their email address. The menu that appears will allow you to remove the user from one file or multiple files within the current filter which you have applied.

Google User Folder Structure Displayed in GAT+

GAT+ displays the User folder structure for each user on your domain 

In the ‘Users’ audit section, as you hover over each user, a new icon will appear beside the folder count.

Clicking on the folder icon will display the folder tree beneath the user’s photo or email.

Each folder name has a file count and a quota usage count for the folder itself.

Selecting any folder name and clicking on it will show you the exact file type breakdown of that folder.

You can click the > marker before the folder to expand or contract the folder to the next level.

How to Replace ACLs of an Old Staff Member for a New Staff Member

How do you replace an old Staff member with a New staff member in all the files the Old staff member could view or edit.  This is a frequent task requirement for Admins as they deal with staff replacement or retirement. So much so, we decided to address it in a Tech Tip post.

In the working example we will walk through the case of a new teacher replacing a retiring teacher.

Are the students in a separate OU or Group?

If ‘yes’ then using the following steps search for all documents owned by the students and shared with the Old staff member. If it is a case that the users are not in any special OU or Group then you have to find them throughout the domain. This requires a different type of search, described at the end of the document.

Here is an example of searching for all the docs owned by the group ‘engineers’ shared with the user Mar.

GAT settings

Note, if the students are in an OU, the Local User/Group is blank and you select the OU from the drop down list of all organisations. Be sure to select ‘Owned Docs’. For the ‘General Search’, make the search type ‘Users’ this will return all the files where the Old staff member was a viewer or an editor or a commentator.

Once you press ‘Search Files’ you now have a list of all the files you want to remove the Old staff member from and add the New staff member to. To complete this step you must next select the ‘File Management’ tab in the GAT+ Drive Audit area. Once there you will be asked to select the files you want to change. In this case you want to change ‘All’ files so you select the checkbox at the top of the column of checkboxes and beside the column titles. When you check this box, the ‘Add Selected’ button will reflect the total count of all the documents that need to change. 

Press ‘Add selected (x)’ and then you will be presented with the button to perform the actions you require.

GAT's File Management tab

Press the ‘Actions’ button and complete the form with the changes you want to make.

In the screenshot above we are removing the oldStaff member from all three positions they can occupy and adding the newStaff member as an editor. If you want like for like replacement, editor for editor, viewer for viewer, etc. You have to search for each category individually, using the oldStaff member id. (i.e. instead of searching using ‘Users’, search once with ‘Editors’, complete the steps and then again search again with ‘Viewers’).

Pressing ‘Next’ will give you a review of the changes you are going to make so that you can confirm or cancel.

If you press ‘Confirm’ an email will go to the Security Officer seeking approval for the changes. If the Security Officer approves then the changes will take place automatically in the background. Thy may take some time depending on the number of files involved.

Are the users scattered throughout the domain?

If yes, then you need to isolate the documents owned by the Old staff member. You can do this in two ways, 1) by transferring the ownership of the documents owned by the Old staff member to the New staff member before changing the other ACLs. This is best done using the G Suite Admin console. If you choose 1) then you just need to complete steps B) and D) below.

Or 2) you can use GAT to find all the Documents owned by the Old staff member and exclude them from your search results. To do this you first search for all the documents owned by the Old staff member and press the ‘Negate filter’ button. See screenshot below.

Step A)

Step B)

You then search for all the documents used by the Old staff member, with the General Search ‘Users’, see screenshot below.

Be sure to exclude documents shared ‘In’ as these are owned by external domains and you can not change their ACLs. Click ‘X’ beside ‘In’ on the results table.

 

Step C)

Next go to ‘Recent Filters’ and combine the two searches.

Step D)

This now represents the file set you want to change. Once you have this file set, go to the ‘file Management tab and proceed as described above. 

GAT Now Displays ‘Forwarding’ Information

In the ‘Users’ audit GAT now displays ‘Forwarding’ information on user accounts based on two criteria:

1) They have an auto-forwarding address set in their Gmail Settings and/or they have filters created that forward specific emails.

2) Is a new audit feature. Removed from the list are addresses for which forwarding was approved, but no forwarding was set. This column now better reflects the true forwarding situation.

Replacing an Old Staff Member for a New Staff Member

How do you replace an old Staff member with a New staff member in all the files the Old staff member could view or edit.  This is a frequent task requirement for Admins as they deal with staff replacement or retirement. So much so, we decided to address it in a Tech Tip paper.

In the working example, we will walk through the case of a new teacher replacing a retiring teacher.

Are the students in a separate OU or Group?

If ‘yes’ then using the following steps search for all documents owned by the students and shared with the Old staff member. If it is a case that the users are not in any special OU or Group then you have to find them throughout the domain. This requires a different type of search, described at the end of the document.

Here is an example of searching for all the docs owned by the group ‘engineers’ shared with the user Mar.

Note, if the students are in an OU, the Local User/Group is blank and you select the OU from the drop down list of all organisations. Be sure to select ‘Owned Docs’. For the ‘General Search’, make the search type ‘Users’ this will return all the files where the Old staff member was a viewer or an editor or a commentator.

Once you press ‘Search Files’ you now have a list of all the files you want to remove the Old staff member from and add the New staff member to. To complete this step you must next select the ‘File Management’ tab in the GAT+ Drive Audit area. Once there you will be asked to select the files you want to change. In this case, you want to change ‘All’ files so you select the checkbox at the top of the column of checkboxes and beside the column titles. When you check this box, the ‘Add Selected’ button will reflect the total count of all the documents that need to change.

Press ‘Add selected (x)’ and then you will be presented with the button to perform the actions you require. 

Press the ‘Actions’ button and complete the form with the changes you want to make.

In the screenshot above we are removing the oldStaff member from all three positions they can occupy and adding the newStaff member as an editor. If you want like for like replacement, editor for editor, viewer for viewer, etc. You have to search for each category individually, using the oldStaff member id. (i.e. instead of searching using ‘Users’, search once with ‘Editors’, complete the steps and then again search again with ‘Viewers’).

Pressing ‘Next’ will give you a review of the changes you are going to make so that you can confirm or cancel.

If you press ‘Confirm’ an email will go to the Security Officer seeking approval for the changes. If the Security Officer approves then the changes will take place automatically in the background. Thy may take some time depending on the number of files involved.

Are the users scattered throughout the domain?

If yes, then you need to isolate the documents owned by the Old staff member. You can do this in two ways, 1) by transferring the ownership of the documents owned by the Old staff member to the New staff member before changing the other ACLs. This is best done using the G Suite Admin console. If you choose 1) then you just need to complete steps B) and D) below.

Or 2) you can use GAT to find all the Documents owned by the Old staff member and exclude them from your search results. To do this you first search for all the documents owned by the Old staff member and press the ‘Negate filter’ button. See screenshot below.

Step A)

Step B)

You then search for all the documents used by the Old staff member, with the General Search ‘Users’, see screenshot below.

Be sure to exclude documents shared ‘In’ as these are owned by external domains and you can not change their ACLs. Click ‘X’ beside ‘In’ on the results table.

Step C)

Next, go to ‘Recent Filters’ and combine the two searches.

Step D)

This now represents the file set you want to change. Once you have this file set, go to the ‘file Management tab and proceed as described above.