User Management¶
Create, modify, and manage user accounts in {ORG_NAME} Google Workspace
Creating Users¶
Method 1: Google Admin Console (GUI)¶
- Go to admin.google.com
- Sign in with admin account
- Click "Users" in the sidebar
- Click "Create user"
- Fill in:
- First name
- Last name
- Primary email (will be: firstname@{DOMAIN})
- Password
- Click "Create"
- Send welcome email to new user
Method 2: GAM Command Line (Automated)¶
gam create user john.doe@{DOMAIN} firstname John lastname Doe password TempPassword123!
Advantages: Fast, scriptable, can create multiple users
Modifying Users¶
Update Name¶
gam update user john.doe@{DOMAIN} firstname Jonathan
Update Email¶
gam update user john.doe@{DOMAIN} email jonathan@{DOMAIN}
Change Password¶
gam update user john.doe@{DOMAIN} password NewPassword123!
Assign Group Membership¶
gam update group management@{DOMAIN} add member john.doe@{DOMAIN}
Deleting Users¶
Archive (Recommended)¶
gam update user john.doe@{DOMAIN} suspended on
This suspends the account but keeps data. Better than deletion.
Delete (Permanent)¶
gam delete user john.doe@{DOMAIN}
Warning: This is permanent. Consider archiving instead.
User Roles in {ORG_NAME}¶
| Role | Description | Email Pattern |
|---|---|---|
| Admin | Full Workspace administration | admin@{DOMAIN} |
| Manager | Department/team management | manager@{DOMAIN} |
| Member | Regular user access | member@{DOMAIN} |
| System | Service/automation accounts | system@{DOMAIN} |
Bulk Operations¶
Create Multiple Users from CSV¶
Create users.csv:
email,firstName,lastName,department
user1@{DOMAIN},User,One,Sales
user2@{DOMAIN},User,Two,Marketing
Then run:
Get-Content users.csv | ForEach-Object {
$parts = $_ -split ','
gam create user $parts[0] firstname $parts[1] lastname $parts[2]
}
List All Users¶
gam print users
List Users by Department¶
gam print users query 'orgUnitPath="/Sales"' fields email,lastName,firstName
Organizational Units¶
Organize users by department:
# Create organizational unit
gam create org "/Sales" name "Sales Department"
# Move user to org
gam update user john.doe@{DOMAIN} orgunitpath "/Sales"
Delegates & Delegation¶
Allow one user to manage another's email:
# Set john as delegate for manager
gam user manager@{DOMAIN} delegate add john.doe@{DOMAIN}
Group Membership Audit¶
Check user's groups:
gam print users email john.doe@{DOMAIN} fields emails,groups
Common Scenarios¶
New Employee¶
- Create user:
gam create user john@{DOMAIN} ... - Add to groups:
gam update group members@{DOMAIN} add member john@{DOMAIN} - Grant Shared Drive access: Add to group with access
- Send welcome email with Quick Start guide
Employee Transfer¶
- Update organizational unit:
gam update user john@{DOMAIN} orgunitpath "/NewDept" - Remove old groups:
gam update group oldteam@{DOMAIN} remove member john@{DOMAIN} - Add new groups:
gam update group newteam@{DOMAIN} add member john@{DOMAIN}
Employee Departure¶
- Archive account:
gam update user john@{DOMAIN} suspended on - Transfer Drive files: Reassign to manager
- Remove from groups:
gam update group ... remove member john@{DOMAIN} - Backup email: Export for compliance/audit
Resources¶
Need help? Contact {ADMIN_EMAIL}