Google Workspace Audit
Identity governance · License management
Upload GAM exports and UKG employee data to identify stale accounts, terminated users still active in GWS, orphaned groups, and generate remediation scripts.
Step 1 — Pull data from Google Workspace using GAM
GAM CLI
▼
GAM (Google Apps Manager) is a free command-line tool for managing Google Workspace.
Install it at github.com/GAM-team/GAM, authenticate once, then run these commands to export your data.
The CSVs get uploaded below — no data leaves your browser.
Required — All workspace users
gam print users fields primaryEmail,name,suspended,lastLoginTime,isAdmin,orgUnitPath > gam_users.csv
Required — All groups
gam print groups fields email,name,directMembersCount > gam_groups.csv
Optional — Group memberships (enables deeper group analysis)
gam print group-members fields group,email,name,type,role > gam_members.csv
⚠ This can take several minutes on large workspaces.
Optional — License assignments (enables license status in audit)
gam print licenses > gam_licenses.csv
File saves to your current Terminal directory — usually your home folder (~/).
UKG — Export terminated employees (or active employees) to CSV from UKG Reports
Include at minimum: First Name, Last Name, and Work Email if available. Termination Date is helpful for context.
Step 2 — Upload your CSVs
GAM Users
gam_users.csv
All workspace accounts
All workspace accounts
Required
GAM Groups
gam_groups.csv
All groups + counts
All groups + counts
Required
Optional
Group Members
gam_members.csv
Membership details
Membership details
Optional
Optional
Licenses
gam_licenses.csv
Who has licenses assigned
Who has licenses assigned
Optional
UKG Export
Terminated employees
First Name, Last Name, (Email)
First Name, Last Name, (Email)
Required
Optional
Active Employee Safelist
Upload a current active employees export from UKG. Anyone who appears on both the terminated list AND this list was promoted or rehired — they'll be automatically cleared from the flagged results.
In UKG: Reports → All Active Employees → Export CSV. Include First Name, Last Name, and Email.
In UKG: Reports → All Active Employees → Export CSV. Include First Name, Last Name, and Email.
✓
Active Employees
Drop CSV or click
$
/user/mo
days