By default, only Google Workspace Super Admins have access to the GAT+ tool.
With the delegated auditors functionality Super Admins can assign users to audit or analyze others within their domain without ever having access to the Google Workspace Admin Console.
How is this useful? Many organizations have multiple offices, departments, campuses, or locations with the delegated auditors feature you can assign the right person to perform the auditing of a group or organizational unit.
Here are a few examples of when delegated auditors could be used:
- A sales manager would like to create reports for his/her sales team covering data across all of the different Google apps like Gmail and Google Drive.
- A school IT Director would like to give another IT member access to GAT+ but not to his/her Google Workspace Admin Console.
- A Super Admin would like to delegate responsibility to his internal auditing team to give them scope over a specific Org unit.
Creating a Delegated Auditor
- Launch the GAT+ using a Google Workspace Admin account.
- Under the heading Configuration, click the Delegated Auditors area.
- Then select and click on the + button to add an auditor.
For the product select GAT+
Note: Shield delegated auditor can also be added from here
You can have a single auditor (User) or a group of auditors (Group) or an Organizational unit of auditors (Org. Unit).
Now you will need to give your auditor a scope of users to manage, for the Auditor Scope select User/Group/Org Unit or a Google Classroom (education domains).
The next step is to select the auditing areas the delegated auditor will see when they launch the GAT+ tool.
At the bottom of the page select the time scope for a delegated auditor, you can also make this indefinite if needed.
Click on Save to create the Delegated auditor.
Your delegated auditor can now launch and access the tool from their Google Apps button.
Accessing the tool as a delegated auditor
When the Auditor accesses the tool, they will have access only to the enabled areas.
In the Auditing Areas, they can utilize all of the features of GAT Unlock of course with Security Officer approval.
- They can modify and remove permissions download or view file content.
- They can download emails, view emails, and remove emails from users’ Gmail accounts.
- They can set up email delegation to give one user direct delegation into another user’s Gmail account.
If the Auditor is a Security officer – it will be visible under Configuration.
For any questions feel free to contact us at email@example.com