Someone Deactivated an Employee's Account

194 views
Skip to first unread message

Dale Courtney

unread,
Feb 19, 2021, 6:36:11 PM2/19/21
to GAM for Google Workspace
I'm running GAMADV-XTD3 5.31.23 

We had some administrator deactivate an employee's account, and I'm trying to track down who did that. 

Does GAM have the ability to see the history of changes to a user's account? 

Thanks. 

Best,
Dale

Ross Scroggs

unread,
Feb 19, 2021, 7:02:41 PM2/19/21
to google-ap...@googlegroups.com
Dale,

Try this:

gam report admin event SUSPEND_USER


Ross


--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/eb35aa1f-bd9a-41b0-b6d8-3e99a764229dn%40googlegroups.com.


--

Ross Scroggs

unread,
Feb 19, 2021, 7:39:27 PM2/19/21
to google-ap...@googlegroups.com
Dale,

You can look for a specific user:

gam report admin event SUSPEND_USER filter "USER_EMAIL==us...@domain.com"


Ross

--

Ross Scroggs

unread,
Feb 19, 2021, 7:41:18 PM2/19/21
to google-ap...@googlegroups.com
Dale,

You can look to all events for the user:

gam report admin filter "USER_EMAIL==us...@domain.com"


Ross

--

Dale Courtney

unread,
Feb 19, 2021, 10:56:26 PM2/19/21
to GAM for G Suite
Ross, 

Thanks. The 3rd one worked like a charm. 

Turns out, our newly hired helpdesk person didn't know not to suspend a terminated employee in G-suite (we suspend them in Okta to keep them from accessing their Gmail). 

We didn't know he did that until the manager told us he couldn't access his emails. 🤦🏻‍♂️

best,
Dale


To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJkvRS9ruUKT%3DjDsQtfMryMyM7qy0%3DoSsWN%3DA6OdNM%3Dn6f1ZCQ%40mail.gmail.com.
Reply all
Reply to author
Forward
0 new messages