Google Workspace Admin: Users, Groups and Sharing Handled
Workspace users, groups and sharing, without the admin console.
The Google Workspace Admin is an AI Google Workspace admin in the Ai1 platform by MyZone AI: ask in plain words about new hires, leavers, groups, security or sharing, and it reviews your setup read-only, previews who a change affects and leaves each change waiting for a person with the right admin role.
Org units, group overrides and slow-to-apply settings trip people up. One request handles what used to take a long session of troubleshooting.
Leavers handled safely
A departing person's files and email are transferred before the account is closed, so nothing is lost when the recovery window ends.
Security kept up as policy
Two-step verification, third-party app access and sharing controls are treated as ongoing policy, not one-off fixes.
Meet your agent
Get to know Dewi
Dewi is your team's Google Workspace expert: users, groups, security and sharing, handled for you. She is friendly, methodical and a big fan of cool mountain mornings.
AI agent. Fictional persona; not a real person.
Dewi, the persona of the Google Workspace Admin
Name
Dewi S.
Role
Google Workspace Admin
Experience
9 years
Work history
IT administrator at a design school Workspace specialist at a managed IT provider
Personality
Methodical, friendly
Based in
Bandung, Indonesia
Why Dewi has a personality
AI does better work as a specific expert, so the Google Workspace Admin works as Dewi (Google Workspace Admin, Bandung, Indonesia). You can rename Dewi or change the personality, experience and profile settings at any time.
Checked against the asker's role, and each waits for a person with the right admin role
Before anything big
A preview of who is affected, and a typed confirmation for deletions and org-wide changes
Leavers
Data transferred and the account suspended before anything is deleted
What it never does
Hold standing super admin rights or read anyone's inbox
Capabilities
What the Google Workspace Admin does for you
Manages the full user lifecycle
Google Workspace user management from first day to last: creates accounts, resets passwords and two-step verification, manages aliases, suspends leavers, transfers their data and then closes the account in the right order.
Organises units and groups
Creates and maintains organizational units and Google Groups, including membership, who can post and whether outsiders can join.
Tightens security and access
Reviews Workspace security settings and third-party app access, investigates suspicious sign-ins and tightens session settings, flagging anything that needs a person to decide.
Sets sharing and collaboration policy
Controls external Drive sharing, Gmail routing, shared mailbox access and Calendar and Meet settings, applied at the org unit or group level you intend.
Moves data when people leave
Transfers a departing person's Drive, email and calendar data and suspends or archives the account instead of deleting it, keeping data recoverable.
How the Google Workspace Admin differs from the admin console
The admin console holds every setting but leaves you to find the right screen, the right org unit and the group that overrides it. The Google Workspace Admin takes a plain request, checks the role of the person asking and previews who a change affects. Deletions and org-wide changes need a typed confirmation, leavers' data moves before any account closes, and it never holds standing super admin rights.
How this differs from the Google Cloud Admin: the Google Cloud Admin looks after your Google Cloud projects and access, while the Google Workspace Admin handles your team's accounts, groups, security and sharing in Google Workspace.
How it works
From your request to a finished result
It runs inside your Ai1 system and works in the tools you already use. You ask, it works, it reports, and it stops for your OK where it matters.
Tap the diagram to enlarge it
Step 1: Ask
Tell it what you need in plain language.
You approve
Step 2: Check permissions
It confirms the person asking is allowed to make that change. Looking things up is open to everyone.
You approve
Step 3: Preview
Bulk changes and departures show who will be affected before anything happens.
You approve
Step 4: Confirm
Deletions, data transfers, org-wide policy changes and device wipes need an explicit typed confirmation, with the recovery window stated.
Step 5: Apply and report
The change goes in, appears in the Workspace audit log and it tells you what was done and whether it can be reversed.
When to use it
Hand these situations to the Google Workspace Admin
Illustrative photo. Ask in plain words for a new starter's account to be ready.
If this is you…
…here's what it does
A new hire starts on Monday
It creates the account, assigns a licence and adds them to the right groups, so they can sign in on day one.
Someone left and their files need a new home
It transfers their Drive to their manager, suspends the account and frees the licence, in that order.
Staff can share documents with anyone outside
It explains your current Google Drive sharing settings and where they are set, shows your options and changes nothing until you confirm.
A sign-in alert looks suspicious
It pulls the sign-in history and audit trail read-only and sets out clear next steps.
Someone is locked out
A password, alias or two-step verification reset is done in one request, with a record of what changed.
What you get
New accounts with licence and group membership in place
Completed departures: data transferred, account suspended, licence freed
Group and org unit changes with membership and posting rules set
Plain explanations of current sharing and security settings, with options
Read-only sign-in and audit reports for security questions
A report of each change and whether it can be reversed
✕Change your Workspace plan or licence countHandled by: Whoever handles purchasing for you
✕Run the whole new-hire process beyond WorkspaceHandled by: The Onboarding Agent
Example Workspace review
Example: Workspace access and seat review
Example with a fictional company. Names, people and figures are invented to show the agent's output. Any resemblance to a real company or person is unintended. Industry facts are real and cited with their sources.
What it was asked: Before our Workspace renewal, check who can sign in with a password alone, which paid seats nobody uses, and which groups are open to outsiders, and tell us what to change.
Example report
Review summarySign-in safetySeats and groupsProposed changes
What it found: 3 findings, with the numbers
11 of 41 active accounts, including one of the three super admins, have not turned on two-step verification, so a stolen password alone would open their email and files.
9 of 46 paid seats are not used by a current employee: 5 suspended accounts still billed at the full rate and 4 accounts with no sign-in for over 90 days.
3 of 19 groups accept outside members, and the tender inbox group lets anyone on the internet post to it, a common route for phishing emails.
A read-only review using read-only access to the user and group directory, group settings, licence assignments and the usage, sign-in and admin reports for the last 90 days. Drive sharing settings per team, devices and email content were not checked. Nothing was changed: each proposed change waits for a person with the right admin role, requiring two-step verification is set by a super admin in the admin console, and deletions need a typed confirmation. Run date: .
Google, Google Workspace, Gmail, Google Drive, Google Groups and Zoom are trademarks of their owners. MyZone is not affiliated with or endorsed by them.
Want a Workspace review like this for your own Google Workspace? Book a Workspace admin walkthrough.
Runs the full new-hire process and hands the Workspace part to the Google Workspace Admin.
Common questions
Frequently asked questions about the Google Workspace Admin
What does Google Workspace user management cover?
Everything from a person's first day to their last: the account, licence and groups, password and two-step resets, aliases, then on departure transferring their data and suspending the account in the right order. The Google Workspace Admin in Ai1 by MyZone AI takes each request in plain words and previews who a change affects.
Google allows 20 days to recover a deleted user. After that the person's email, Drive and calendar are gone for good, so it offers to suspend or archive first and transfers data before any deletion.
Which Workspace security settings should a small business review?
Two-step verification, third-party app access, suspicious sign-ins and session settings. The Google Workspace Admin reviews them read-only and treats them as ongoing policy.
It does not hold super admin access; it uses the minimum access each task needs. Actions that truly need super admin, such as requiring two-step verification across the organisation, are handed to a verified person to make.
How do I stop staff sharing Google Drive files outside the company?
First see where external sharing is set, because a group can override its org unit. The Google Workspace Admin explains your current Google Drive sharing settings and where they are set, shows your options and changes nothing until you confirm.
Workspace changes can take up to 24 hours to spread, and old and new settings can both apply for a while. It tells you when that is likely.
Who can ask the Google Workspace Admin for changes, and can it read staff email?
Anyone can look up users, groups or settings. Changing someone else's account or an org-wide setting needs the right admin role, and it checks before acting.
It cannot read your staff email. It manages accounts, settings and data transfers, and does not read or reply to anyone's inbox.
About Ai1
Do I get just the Google Workspace Admin, or the whole platform?
The whole platform. The Google Workspace Admin is not sold on its own: every Ai1 agent, including this one, is included on Developer Pro and every Fully Managed option, with no per-agent charge. Developer Core includes the development agents. Compare plans →
Two paths, one platform. Build it yourself on a developer plan, or let our team run your AI operations for you. Every plan runs on its own private server, and every price is shown in full. See Ai1 pricing →
Operations
Operations
Operations
Operations
Operations