Google Workspace
Inventory Google Workspace users, groups, org units, admin roles, devices, OAuth tokens, email forwarding and delegation, license seats, and Gemini adoption.
Questions you can answer 377
Each one is a saved query that ships with ConfigView, reading your Google Workspace data on your own server. Ask it in plain English, SQL, Slack or the API.
- Who has admin rights in Google Workspace?
- List all Google super admins and delegated admins
- Are any of our Workspace admin accounts dormant or missing 2SV?
- Who has delegated access to someone else's Gmail inbox?
- List every Gmail delegation in the domain
- Which mailboxes have delegates on them in Google Workspace?
- What Google groups is [email protected] in?
- Which groups does [email protected] own or manage in Workspace?
- Show me the group memberships for [email protected]
- Which active Google users haven't turned on 2-step verification?
- Who in Workspace is not enrolled in 2SV?
- List users without 2FA on their Google account
- Are any blocked AI apps still connected somewhere else?
- Which AI apps did we block in Slack that people still use?
- What AI tools has [email protected] connected?
- Show the AI apps that can reach [email protected]'s mail and files
- List every AI connection by tool and system
- What AI apps show up in Google, Microsoft, Slack and Okta?
- Which AI apps can read our Gmail, Drive or Calendar?
- Which AI apps can send email or edit files for our people?
- Which AI desktop apps are installed on our laptops?
- List AI apps found on managed Macs
- How many laptops have Claude or ChatGPT installed?
- Count managed laptops with each AI desktop app
- Do any suspended users still have AI tools connected?
- Which leavers still have AI apps with access to company data?
- What is connected to our apps over MCP?
- Which MCP servers and connectors are in use?
- Who has connected an AI assistant to Linear over MCP?
- How many people gave each AI tool access to company data?
- Which AI tool has access to the most people's data?
- Who has given AI tools permission to change company data?
- List people whose AI apps can send mail or edit Drive files
- How much of the company has given AI tools access to data?
- Give me the AI connections numbers at a glance
- Which AI tools are people using that IT never approved?
- What shadow AI is in use?
- Which AI tools have no Okta app?
- Which AI tools are we using?
- Which AI tools are connected to our company data?
- Show every AI tool in use and whether IT set it up in Okta
- What third-party apps has [email protected] granted OAuth access to on her Google account?
- Which OAuth tokens does [email protected] have in Workspace?
- What apps are connected to [email protected]'s Google account?
- Which Calendly members have left the company?
- Who still has a Calendly seat but is deprovisioned in Okta?
- Which Calendly users are not in Google Workspace?
- Compare the Google profiles of [email protected] and [email protected]
- How is [email protected]'s Google profile different from [email protected]'s?
- Show [email protected] and [email protected] side by side in Google
- Compare two users, [email protected] and [email protected], across every system
- How do [email protected] and [email protected] differ in our systems?
- Show me two users side by side: [email protected] vs [email protected]
- Does [email protected] look the same in Google and Okta?
- Compare [email protected]'s Google profile with her Okta profile
- Is [email protected]'s status or MFA different between Google and Okta?
- Show me all the admins everywhere
- List every privileged account across Google, Okta and GCP
- Who has admin rights in any of our systems?
- Which Coda users don't have a Google account?
- Find Coda members whose email isn't in Google Workspace
- Are we paying for Coda seats for people outside our domain?
- Which laptops belong to people who've left?
- Find Kandji devices still assigned to suspended or deprovisioned users
- Which Macs need to be wiped and reassigned after offboarding?
- Which GCP IAM users aren't in Google Workspace?
- Find external collaborators with leftover GCP access
- Show user principals bound to GCP roles that aren't in our directory
- Who's in Google Workspace but not in Okta?
- List Google accounts that were never provisioned in Okta
- Which Google accounts were never provisioned in Okta?
- Which systems is each user in?
- Show every email with a flag for Google, Okta, Microsoft, Kandji and Coda
- Who's in which identity sources?
- Which Kandji users don't have a Google account?
- Find people in Kandji whose email isn't in Google Workspace
- Are there Kandji user records with no matching Google user?
- Which Linear members don't have a Google Workspace account?
- Find Linear users outside our Google directory
- Are we paying for Linear seats for contractors not in Google?
- Who has no MFA in either Google or Okta?
- Show 2FA status per user across Google and Okta
- Which users have 2-step verification in one system but not the other?
- Which Microsoft users have no matching Google account?
- Find M365 accounts with no matching Google Workspace user
- Who's in Microsoft but not in Google?
- Who's in Okta but not in Google?
- Find Okta accounts that don't exist in Google
- Which Okta accounts don't have a matching Google user?
- Which users exist in only one system?
- Find orphan accounts that appear in a single identity source
- Who shows up in just one of Google, Okta, Microsoft, Kandji or Coda?
- How big is every group in Google and Okta?
- Rank all groups by member count across Google and Okta
- Which groups have the most members?
- What apps does [email protected] have access to?
- List every application [email protected] can use across Okta, Google and Coda
- Show [email protected]'s full SaaS access footprint
- What has [email protected] been doing in the Google Admin console?
- Show every admin console action performed by [email protected]
- Which changes did [email protected] make in Workspace admin?
- What admin actions have been taken on [email protected]'s Google account?
- Who changed anything on [email protected]'s Workspace account and when?
- Show the admin audit history affecting [email protected]
- What kinds of admin events happen most in our Google admin log?
- Give me a count of Google admin audit events by type
- Summarize Workspace admin console activity by event name
- What are the most recent actions in the Google Admin console?
- Show the latest Workspace admin audit log entries
- Who did what in Google admin recently?
- Who was granted admin roles in Google Workspace and by whom?
- Show recent Google admin role assignments and removals
- Has anyone had their Workspace admin privileges escalated?
- Has anyone changed our Google Workspace security settings?
- Were 2SV enforcement, SSO or password policy settings changed in the Google admin console?
- Show security posture drift in Workspace admin settings
- Which Google accounts were created, deleted or suspended recently?
- Show Workspace user account lifecycle events from the admin log
- Who had their Google password reset by an admin?
- Are any Gmail delegates on an outside domain?
- Which inboxes are delegated to someone at a different domain?
- Do we have external email delegation in Google Workspace?
- Who is auto-forwarding their Gmail to an external address?
- Which users forward email off-domain in Google Workspace?
- Is anyone forwarding company mail to a personal Gmail account?
- What Gemini actions show up the most?
- Which Gemini actions make up most of the recorded events?
- What is Gemini actually doing all day in our tenant?
- What do people actually use Gemini for?
- Is Gemini mostly used for generating text, chat or summarising?
- Break down real Gemini usage by category
- Who are our real Gemini users?
- List Gemini users ranked by active days
- Which employees have invoked or accepted Gemini in the last 30 days?
- What is our Gemini adoption against seats we paid for?
- How many Workspace seats have Gemini and how many people actually use it?
- Give me the overall Gemini adoption picture in one number
- What is the Gemini take-up rate in each app?
- When Gemini shows up in Docs or Gmail, how often do people accept it?
- Which Google app has the best Gemini take-up percentage?
- Which apps do people actively use Gemini in?
- Where does real Gemini usage happen, app by app?
- Which Workspace apps should we focus Gemini training on based on active use?
- Which Workspace apps generate the most Gemini events?
- How many people does Gemini reach in each Google app?
- Show Gemini event volume and reach per app
- In which apps does Gemini appear but nobody uses it?
- Where are people ignoring Gemini suggestions?
- Which Google apps show Gemini with no active use?
- Is Gemini a separate SKU or included in our Workspace edition?
- Do we pay for a Gemini add-on or is it bundled?
- Is there a Gemini line item we could cancel?
- Are there missing days in the Gemini data collection?
- Did the Gemini collector deliver data for every day?
- Which dates have no Gemini rows collected?
- How much are unused Gemini seats costing us per month?
- What does each real Gemini user effectively cost us?
- What are we wasting on dormant Gemini AI seats at $10 a seat?
- How many people use Gemini each day?
- Show daily Gemini active users over time
- What is the Gemini daily events and DAU trend?
- How much does the average Gemini user actually use it?
- What does the distribution of Gemini events per user look like?
- Is Gemini usage a long tail with a few heavy users, bucketed by event count?
- Which Gemini surfaces show up most, like the side panel or proofreader?
- Where does Gemini appear in the UI and how often?
- Which Gemini feature should we disable to cut the noise?
- What hours of the day is Gemini used?
- Show Gemini usage by hour in UTC
- Is Gemini use a business-hours peak or flat like automation?
- When did the Gemini rollup last refresh?
- How big is the Gemini rollup table?
- Is the Gemini activity rollup up to date?
- Who gets the most Gemini events but never actually uses it?
- Which users have high passive Gemini volume and zero active use?
- Who are the best Gemini training candidates?
- Who has a Gemini seat but has never used it?
- Which Workspace users have zero Gemini use in the last 90 days?
- Give me the Gemini reclaim list of people who never used it
- Who uses Gemini regularly, on multiple days?
- Which users came back to Gemini on at least 5 separate days?
- How many habitual Gemini users do we have?
- Is Gemini usage concentrated in just one or two people?
- What share of Gemini use comes from the top user?
- Is our Gemini rollout just one enthusiast?
- Which Gemini users show up from an unusual number of IP addresses?
- Is anyone using Gemini from lots of different IPs, like a shared account or VPN?
- Flag users with a high distinct IP count in Gemini activity?
- Which users has Gemini never appeared for?
- Is Gemini switched off for some people in Workspace?
- Who has zero Gemini events of any kind?
- Who tried Gemini on one day and never came back?
- Which users used Gemini once and gave up?
- List one-time Gemini triers
- Do people use Gemini on weekends?
- How does Gemini usage compare between weekdays and weekends?
- Is there weekend Gemini activity that looks like automation?
- Has the group email history finished loading?
- Which days are missing from the group email data?
- Can I trust the stale-group list yet?
- Which Google groups have no members?
- Are there empty distribution lists in Workspace?
- List Google groups with zero direct members
- When was each Google group last emailed?
- Which groups get the most mail?
- How long since anyone sent to this group?
- Which Google groups has nobody emailed in the last 90 days?
- Which distribution lists are stale and could be deleted?
- Which groups only get spam?
- Which Google groups only have owners and no regular members?
- Find abandoned Workspace groups where everyone is an OWNER
- Are there groups with owners but no members in Google?
- Which Google groups can anyone on the internet email?
- Are any Workspace groups open to people outside the org?
- Which groups allow external members or public posting?
- When was the Google data last collected?
- How fresh is our Google Workspace data?
- When did each Google ingestion table last update?
- How many Google Workspace seats have we bought versus used?
- What is our Workspace license utilization and headroom?
- Are we close to our Google seat limit?
- How many Google licenses are assigned per SKU?
- Break down Workspace license assignments by SKU
- How many users hold Vault, Voice or AppSheet licences?
- Which suspended or archived Google users still hold a paid licence?
- Can we reclaim Workspace seats from suspended accounts?
- Are we paying for Google licenses on archived users?
- Which Google mobile devices haven't checked in for 30 days?
- Stale phones in Cloud Identity we should unenroll?
- Which enrolled mobile devices have not updated in over 60 days?
- Which Google org units have fewer than 3 active users?
- Are there orphan OUs in Workspace with almost nobody in them?
- Which OUs are nearly empty and could be cleaned up?
- Which third-party apps have full Gmail or Drive access through OAuth?
- What OAuth grants give outside apps access to our Google Drive?
- Which connected apps can read everyone's Gmail?
- Where is our biggest SaaS data-exposure risk from Google OAuth scopes?
- Can I browse all Google Workspace users filtered by org unit and 2SV status?
- Show me the Workspace user directory filtered to suspended accounts
- List Google users in one OU who haven't logged in for 90+ days
- Who can read [email protected]'s Gmail, and whose mailboxes can she read?
- What mailbox delegation does [email protected] have in both directions?
- Whose inboxes does [email protected] have delegate access to?
- Which Chromebooks are assigned to [email protected]?
- What ChromeOS devices does [email protected] have?
- Find a Google user whose email starts with jane
- Search the Workspace directory for a name fragment like jane
- How many Google users are in each status, org unit, 2SV and last-login bucket?
- What filter counts are available for the Google user directory?
- Is [email protected] actually using her Gemini seat?
- How often does [email protected] use Gemini compared to everyone else?
- Is the Gemini licence for [email protected] earning its AI premium?
- Which apps does [email protected] use Gemini in?
- Where does [email protected] meet Gemini, broken down by app and surface?
- Is [email protected] using Gemini in Gmail, Docs or Sheets?
- Which Google groups is [email protected] a member of, and with what role?
- Is [email protected] an owner or manager of any Google groups?
- What Google licences does [email protected] have?
- Which Workspace SKUs are assigned to [email protected]?
- What's the OU, title and department for [email protected] in Google?
- Is [email protected] active, suspended or archived in Workspace?
- Show me the Google identity card for [email protected]
- Which email belongs to Google user id 104857392018374650123?
- Resolve this Google user id to an email address: 104857392018374650123?
- Is [email protected] enrolled and enforced in Google 2-Step Verification?
- Does [email protected] have recovery options set in Workspace?
- What's the security posture of [email protected]'s Google account?
- What third-party apps has [email protected] authorized with her Google account?
- Has [email protected] granted any OAuth apps Gmail or Drive access?
- Which Google users are enrolled in 2SV?
- Who has two-step verification turned on in Workspace?
- Which active users have enrolled in Google MFA?
- Which Google admins don't have 2SV enrolled?
- Are any Workspace super admins or delegated admins missing two-factor?
- Do all our Google admin accounts have MFA?
- Which Google users have more than 3 email aliases?
- Who has an unusually high number of aliases in Workspace?
- Which accounts have so many aliases they look like shared mailboxes?
- Which Google users are archived?
- List every archived Workspace account
- How many Google accounts were created each month?
- When did we have onboarding spikes in Workspace account creation?
- Show Google user creation by month to spot batch provisioning
- How many active Google users are in each org unit?
- Which OUs are the largest in Workspace?
- What's the headcount per organizational unit in Google?
- How many Google Workspace users do we have?
- How many active, suspended and archived Google accounts are there?
- Give me a one-line summary of our Workspace user counts
- Which active Google users haven't logged in for 90 days?
- Dormant Workspace accounts we could reclaim licences from?
- Which active Google users have been inactive for more than 60 days?
- Which Google users have a primary email that isn't on example.com?
- Are there Workspace accounts on an unexpected domain, not example.com?
- Find Google users whose primary address is outside example.com
- Which Google users are IP whitelisted?
- Who has ip_whitelisted turned on in Workspace?
- Which Google users have a mailbox that was never set up?
- Which Workspace accounts are licensed but have no provisioned Gmail mailbox?
- Which Google users have never logged in?
- Which Workspace accounts have never been used at all?
- Who has a paid Google seat but has never signed in?
- Which Google users have no recovery email or phone?
- Who in Workspace would be locked out because they have no account recovery info?
- Which Google users are stuck on change password at next login?
- Who has a pending forced password reset in Workspace?
- Who are the most recently created Google users?
- Which Workspace accounts were created most recently?
- Show the last 20 new Google accounts
- Who logged into Google most recently?
- Which Workspace users have the latest sign-ins?
- Show me every suspended Google user
- List all suspended Workspace accounts
- Which Google accounts are currently in the suspended state?
- Which suspended Google users are not archived and still billing a seat?
- Are we still paying for suspended Workspace users who were never archived?
- Suspended but not archived Google accounts we could recover cost from?
- Which Google users have not agreed to the terms of service?
- Who hasn't accepted the Workspace terms yet?
- Which Google users have email aliases?
- List every Workspace user and their aliases
- Who gave Granola access to their Gmail?
- Who uses Granola on a personal account outside our workspace?
- Which Granola users can send email from Gmail?
- Which systems have an account for [email protected]?
- Look up [email protected] across Google, Okta, Microsoft, Kandji and Coda
- Where does the email [email protected] show up?
- Find anyone named Jane in any of our directories
- Search every system for users whose name contains jane
- Is there someone called Jordan in Okta, Google or Microsoft?
- Show the full Google Workspace profile for [email protected]
- When did [email protected] last log in to Google, and is she an admin?
- Who has left according to Lattice but still has an Okta or Google account?
- Which leavers did HR deactivate that IT has not offboarded?
- Are any deactivated Lattice employees still active in Okta?
- Do our new starters have Okta and Google accounts yet?
- Who starts soon according to Lattice, and are their accounts ready?
- Which recent hires in Lattice have no Okta account?
- Who's on the [email protected] Google group mailing list?
- List the members and owners of the [email protected] Google group
- Who belongs to the Google group [email protected]?
- Which people are connected to Claude?
- Who has connected Cursor or ChatGPT to their work account?
- List everyone connected to a given AI tool
- Who triggers the Gemini auto_proofread action?
- Which users have had the Gemini generate_text action?
- Who has used the Gemini conversation action in the last 30 days?
- Who uses Gemini in Gmail?
- Which users have Gemini activity in Sheets?
- Who would be affected if we turned off Gemini in Drive?
- Who has a Google Workspace Enterprise Plus licence?
- Which users are assigned the Business Standard SKU?
- Who holds a Google Workspace Business Starter seat?
- Who has authorized Zoom with their Google account?
- Which users granted OAuth access to Calendly?
- How many people would be affected if we revoke the Dropbox OAuth app in Google?
- Which Gmail delegates still have access to a suspended user's inbox?
- Do delegates still have access to mailboxes of offboarded Google users?
- Who can still read the inbox of an archived Workspace user?
- Which Google users have no login in 90 days or have never logged in?
- Which non-suspended Workspace accounts show no sign-in for the last 120 days?
- Do suspended Google users still have third-party OAuth tokens?
- Which archived Workspace users still have app grants that should be revoked?
- Which suspended Google users are still in groups?
- Are offboarded Workspace accounts still members of Google groups?
- Who has left the company but is still in Productboard?
- Which Productboard admins are deprovisioned in Okta?
- Are leavers still holding Productboard seats?
- Tell me everything about [email protected]
- Give me a full profile of [email protected] from every system
- What do we know about [email protected]?
- Which leavers in Rippling still have active accounts?
- Who was terminated in Rippling but is still active in Okta or Google?
- Did offboarding in Rippling miss any app accounts?
- Do any leavers still have access to Typeform workspaces?
- Which Typeform workspaces are owned by someone who has left?
- Are any forms still collecting data with no owner?
No Google Workspace questions match that yet. Try a shorter word.
What ConfigView collects from Google Workspace 25
-
Groups
Retrieve and manage Google Workspace Groups information.
-
Group Members
Retrieve and manage Google Workspace Group Members information.
-
Group Settings
Retrieve and manage Google Workspace Group Settings information.
-
Users
Retrieve and manage Google Workspace Users information.
-
Email Delegates
Retrieve and manage Google Workspace Email Delegates information.
-
Email Forwards
Retrieve and manage Google Workspace Email Forwards information.
-
Tokens
Retrieve and manage Google Workspace Tokens information.
-
Org Units
Retrieve and manage Google Workspace Org Units information.
-
Roles
Retrieve and manage Google Workspace Roles information.
-
Role Assignments
Retrieve and manage Google Workspace Role Assignments information.
-
Mobile Devices
Retrieve and manage Google Workspace Mobile Devices information.
-
ChromeOS Devices
Retrieve and manage ChromeOS Devices information.
-
Domains
Retrieve and manage Domains information.
-
Domain Aliases
Retrieve and manage Domain Aliases information.
-
Schemas
Retrieve and manage Schemas information.
-
Privileges
Retrieve and manage Privileges information.
-
Backup Code Status
Retrieve and manage Backup Code Status information.
-
Gemini License Assignments
Which users hold a Gemini license, and which SKU.
-
Gemini Activity (daily rollup)
A daily rollup of Gemini use per user, by app, feature and action, from the Workspace Gemini audit log.
-
Admin Audit Log
Retrieve Google Workspace Admin Console audit events: user, role, and security-setting changes from the admin activity log.
-
License Assignments
Which users hold which Google Workspace, Gemini, Vault, Voice and AppSheet SKUs.
-
License Totals
Purchased vs used seats per edition, for seat-utilization and headroom reporting.
-
Drive Sharing
Every Drive file shared by link - public on the web, anyone with the link, or company-wide - with its owner, last edit and a link to the file.
-
Group Email Activity (daily rollup)
Which Google groups receive mail, and when each was last emailed — a daily count of messages per group from the Workspace Gmail log, used to find stale groups nobody emails any more.
-
OAuth Grant Dates
When each person first and last authorized each OAuth app, from the Workspace token audit log (kept beyond Google's 6-month retention).