📖 3 mins read

What is GAT Unlock?

GAT Unlock is an enhancement functionality within the main GAT+ tool, and it allows Google Workspace Admins to take more actions using GAT+.

GAT Unlock operates on the principle that access to documents, or change of ownership of documents, without the owner’s knowledge or permission, can only be accomplished with the active input of at least two people in the organization. 

The second person is the “Security officer” and is responsible for approving or denying requests submitted by the Super Admin.

The security officer can be any member of the domain.

GAT Unlock can be used to:

  • Allow setting up Email delegation within GAT+
  • Allow setting Email auto-forwarding within GAT+
  • Allow change of ownership of Drive files within  GAT+
  • Allow altering Drive files by adding and replacing existing permissions
  • Allow copying Drive files 
  • Allow viewing File content
  • Allow download of the File content
  • Allow viewing Email content
  • Allow download of Email content 
  • Allow Admins to onboard offboard and modify users within Flow

**Prerequisite: When ‘GAT Unlock’ is enabled, Admins can generate access or change requests, but only Security Officers can approve them.

An individual can be a member of both lists, but cannot approve their own requests. The Security Officer list for all domains is maintained by the GAT Labs staff.


Unlock is part of all plans for Education domains:

  • Essential plan
  • Manage plan
  • Vigilant plan

For Enterprise Unlock is part of:

  • Admin plan
  • Secure plan

GAT Unlock Features

Drive Audit

Within the GAT+ auditing areas, you’ll find GAT Unlock related features like:



  • Create a new access request – You can gain access to the contents of a file.
    With GAT+ only (without this feature), you can only view metadata related to the file. With GAT Unlock’s access request feature, you can gain access to the actual contents of files.
    Use Case Examples:

Shared Drive 

In the Shared Drive tab of the GAT+ Drive auditing area, you’ll find the GAT Unlock functionality. With it you can alter the membership settings of a Shared Drive:

    • Adding – Shared drive permissions
    • Removing – Shared drive permissions
    • Replacing – Shared drive permissions

Case Examples:

Emil audit

In the Email audit area, within the Emails tab and the Email Content Search tab, you’ll find the following GAT Unlock feature:

Create a new access request – With this feature you can gain access to email content. Without this feature, you can only see metadata related to emails but not the actual contents. 

While using this feature you can enable some additional requests:

  • Download emails (EML, PDF)
  • Remove emails (permanent, trash only)

Create Access Request Use Case Examples:

Download Email Use Case Examples:

Users – Email delegation

In the User audit area (within the Email Info tab) you’ll be able to set Gmail mail delegation or an email auto-forwarding policy for any user. This is an actionable feature of GAT Unlock. 

Email Delegation Use Case Examples:

Pre-Approve Access to Files or Emails and Flow:

‘Pre-approval’ is the ability to set up a Workspace Super Admin to use the GAT Unlock functionality without needing approval from the Security Officer for each request.

Pre-approval policies can be created by the Security Officers only. It is a one-time setup.

Pre-Approval by Security Officer Use Case Examples

GAT Flow 

GAT Unlock is a prerequisite for Flow to work . For every request in GAT Flow an approval from a Security officer is required, unless pre-approval is set up.

Get Started with GAT Unlock: 5 Cool Things to Try First

  1. How to Use GAT Unlock for File Management
  2. Search for Specific File Types & Change Ownership in Google workspace
  3. Delegate a User to Access Another User’s Gmail Account
  4. Request View of Content of a File in Google Drive
  5. View or Download Email Contents

5 Most Useful Things you can Achieve with GAT Flow

  1. ‘Copy this Folder’ Feature
  2. Delete Spam, Inappropriate or Accidental Emails
  3. Copy Files and Folders from Internal and External Users in Bulk
  4. Google Shared Drives Management
  5. How to Set Up Pre-approval for Any User
Thanks for sharing and spreading the word!