Google Workspace - Remove Users

Google Workspace - Remove Users removes each Google Workspace user for:

• Assets returned by the selected query or assets selected on the relevant asset page.

Required Fields

These fields must be configured to run the Enforcement Set.

• Use stored credentials from Google Workspace adapter - Select this option to use credentials from the adapter connection. By default, the first connection is selected.

  • When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.

📘

Note

To use this option, you must successfully configure a Google Workspace adapter connection.

• Action - Select the action to perform:
  • Delete - Delete the users from Google Workspace.
  • Suspend - Suspend the users. The account exists but is not usable.

• Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Working with Axonius Compute Nodes.

Additional Fields

These fields are optional.

• Gateway Name - Select the Gateway through which to connect to perform the action.

💡

Connection and Credentials

When Use stored credentials from the adapter is toggled off, some of the connection fields below are required to create the connection, while other fields are optional.

• Email of an admin account to impersonate - The email of your Google Workspace admin.
• JSON Key pair for the service account - Upload the JSON file you have created for your service account. For more details, refer to Google Workspace adapter.

APIs

Axonius uses the Google Workspace - Manage user accounts API.

Required Permissions

This action requires permission for removing a user.

Also this action requires that you enter the following scope in your Google account's Domain Wide Delegation for the Client ID used for this connection (inside the JSON file): 'https://www.googleapis.com/auth/admin.directory.user'