I'm working with a very small school that is associated with a church. (very common around here) They have a Google Workspace tenant that is the non-profit edition. They also have Chromebooks but they are not managed.

I was working on getting the Chromebooks managed but during the licensing process I discovered that they aren't on the EDU version of Google Workspace.

It is possible to just order a different version of the license that works for non-profit version of GW. But, I'm wondering if it makes sense to go through the work of getting setup with the EDU version first.

I know there are requirements from Google to be setup as an EDU. The school is accredited but I believe it shares a website with the church which Google might not like.

Has anyone gone through something similar? Is it worth trying to navigate the switch to EDU before purchasing the licenses and continuing further down the non-profit path?

Hello,

I have a workspace account email that I started using an existing Gmail email address(#1). Now I have a client who is using an old email address(#2) that I do not actively monitor. Is there a way to add this second Gmail address(#2) and have the emails pop up in my Workspace account email, how email(#1) is currently working? thanks!

We’re an MSP, so we regularly take over tenants other people built. Every time, the same day-one questions: what’s public on the web, whose mail forwards off-domain, which super admin left in 2019 and still holds the keys. Clicking through the Admin console for that takes a day and still misses things, because the console shows you one screen at a time and never volunteers what you forgot to look at.

So we wrote it down. One Python file, standard library only, driving GAM7. It collects the tenant data in one pass, runs about 40 checks over it, and writes a self-contained HTML report with severity tiles, plain-English “what this means / what to do” copy per finding, and evidence tables. Plus a CSV per module so every finding traces back to raw data.

Everything it runs is a read (print, report, info, oauth info). The one exception is opt-in: --grant-temp-access temporarily makes the auditing admin an organizer on Shared Drives they’re not a member of, scans, then removes the grant. Without that, filelist silently returns zero rows and the drive looks clean, which is worse than useless, so by default those drives are reported UNSCANNED instead.

Runs are resumable via manifest.json, so you can --skip-tier 3 on a big tenant and fill in the Drive scans overnight. And anything it couldn’t check is listed in the report. Absence of a finding never means “checked and clean”.

We’d been running this internally for six months on multiple clients and schools.

Apache 2.0, 104 tests, works on Windows, macOS and Linux. Happy to answer questions or take issues.

https://github.com/PaulOgier/GAMScripts/tree/main/Tenant%20Scoping%20Audit

Trying to determine an appropriate course of action for HIPAA compliance with Google Workspace that does not require using a third party outbound email gateway (paubox, luxsci, etc). We have a very small health-related private practice. I've read a lot of people discussing how because Google's Confidential Mode is not E2EE, it is not HIPAA compliant, but I wanted to explore this further with some support from this community.

I'm wondering if Confidential Mode does solve our problem of requiring HIPAA compliant email when sending ePHI. HIPAA rules do not require E2EE, just ePHI encrypted in transit and at rest.

PROBLEM: Google can downgrade email sent with TLS to 1.0 and 1.1, and there is no way in the admin to force blocking sending of these emails. If it was possible in Google Workspace settings to force sending emails only via TLS 1.2 and 1.3 and stop send of emails unencrypted or through TLS 1.0 and 1.1 (to meet NIST standards), we would accept this as a free alternative to, say, a Paubox setup, which is considered compliant. Consider that we are fine with not sending emails to certain recipients (ie. those without modern TLS) if they do not have the technology necessary to receive the emails, as we never send emails to clients for communication.

However, this doesn't exists.

POTENTIAL SOLUTION: So this begs the question of if Confidential Mode allows for this...

If our Google Workspace has a BAA, and Confidential Mode strips the possibility of ePHI being sent via unencrypted transit to non-Google services (due to the email, even if sent unencrypted, maintaining no ePHI and being replaced with a link to view) does that not solve the HIPAA concerns related to ePHI being sent through deprecated encryption channels? I am wondering if this no different than a link to a secure portal, which is used by nearly all EHRs.This is assuming that Google is storing and transmitting the content of the confidential mode message encrypted.

All thoughts are appreciated.

Hello everyone!

Sorry in advance, I'm a super google newbie.

We have a team account and everybody has a personal account.

My questions:

How can we set up, that we schedule a meeting and a predefined group gets an invite in their calendar.

Is it possible to create email-groups or email lists?

Thank you in advance

Is there another Redit area dealing specifically with problems setting up google groups and adding 200 people with different email types? These are for old people, who aren't very techie and don't like change/ Someone said to, "just get them to change from yahoo, outlook, etc, etc etc". This is like asking them to do backflips.

I posted this in another redit area and it got bounced for not being allowed. Let's start over and see what happens:

Google groups roadblock...HELP

Myself and co-admin / owner created test google group of 12 members in July. Member emails ranged from gmail, yahoo, outlook, charter, hotmail, ATT, Charter and more. With except of one yahoo user, all were added or invited/accepted. For some reason when adding the Yahoo user, Groups wont add the ID. It, sends am invite and puts in "pending". There is no notice to the yahoo person of invite rejection, nor anything in spam. Repeated clearing pendings, doing adds, invites and it's the same thing. Inability to add this ID.

My email is gmail but ironically, I also have a throwaway yahoo account. My co-admin was able to add me. It was in my spam, but a simple (no spam) fixed it. Over several weeks many tests were done and all worked. Yesterday, I did another test with the test group and linked it to a 20 question google form survey about a community issue.

The survey test worked great and dumped responses into a spreadsheet. The survey to test group wasn't hypothetical it was real. The survey distribution is a beta test ahead of distribution to 200 community residents. WE wanted it to be bullet proof as the community ranges from 55 yrs to 92.

Most are at least able to use regular email text on phones (and play Woordie or other games) but still a lot of grey hair. I'm also in the grey hair category but I've been banging on a keyboard, My first was in 1968 connected to a computer with vacuum tube in a big air conditioned room. From there to PCs, network engineer, then kicked into management.

So we created another google group actual communication with everyone. I'm in the painful process off adding IDs and not happy with google making me add 5 or less as members, Then further getting in my way having to jump through captcha or pick out pictures of cars, busses, bicycles etc in between.

This takes us back to the original yahoo member who still can't be added to the test group and now, the almost ready for prime time group, Even more daunting, as I add IDs to what will be the live system, there are more people with email that through up roadblocks preventing google from adding them.

Anyone know a solution to this?

What are they?

Hello! I am very new to Google Sheets & trying to build out a way to capture data for the nonprofit org I work for. I created a way to track my work in a "tracker" and have been using drop-down menus (because I found typing each one out very tedious) for almost all of the data. I am learning how to make pivot tables and I'm having a really hard time getting it to work, and I'm unsure if it is because it doesn't like pulling data out of the drop-down menu.

If the above description doesn't make sense, I'll more clearly outline what I'm trying to do for those who want more info:

My sheet has columns for client initial, program they are accessing, interaction type, service category, new or returnign client, notes, etc. Most of these are drop-down and have 5-6 different choices. I would ideally like to use pivot tables to get data on things like number of transactions in a month, number of people accessing ___ service, number of new clients, etc.

Any insight/tips/suggestions?

Thanks in advance!

Is anyone using Neat meeting room equipment for Google meet? Do they have a Google native meeting room solution like Logitech or Lenovo?

We have a mix of Asus and Logitech with a bit of Lenovo currently, but curious if Neat is worth talking to...

I'm trying to understand how people managing multiple Workspace tenants (MSPs, resellers, or anyone supporting several client domains) actually handle this in practice.

My understanding of the usual workflow is roughly:

• Log into each customer's admin console separately
• Repeat the same config changes tenant by tenant
• Handle onboarding/offboarding manually per domain
• Keep track of settings/policies in a spreadsheet or your own notes
• Write Apps Script or GAM scripts for anything repetitive

But I'm interested in what people actually do, not the documented ideal.

A few questions:

1. How many tenants do you manage, and how do you switch between them?
2. Do you use GAM, Apps Script, or the Admin SDK directly? For what specifically?
3. Have you built any internal tooling/scripts for this? What does it do?
4. Are you paying for anything (GAT+, Patronum, JumpCloud, something else)? What made you buy it, and what does it still not do?
5. What's the most repetitive thing you still do manually in each tenant one at a time?
6. How do you handle onboarding a new client tenant — how long does it take and what's the annoying part?
7. Do you have any way to see config drift across tenants, or check that a setting is consistent everywhere?
8. Is this actually painful, or is it fine once you've got your scripts sorted?

I'm particularly interested in real examples of what you do today, even if the answer is "I just log into each one, it's fine."

Not looking for product recommendations — trying to understand the actual workflow.

We are evaluating reseller options ahead of an upcoming renewal for ~350 Google Workspace Enterprise licenses and are facing a fairly substantial price increase.

Does anyone have recommendations for US-based Google Workspace resellers that are easy to work with and offer competitive pricing, particularly for a 3-year commitment?

Would especially appreciate hearing from anyone who has recently negotiated a similar-sized Enterprise renewal and can share their experience.

genuine question for the admins here. leadership asks the classic one, "who outside the company can open our files right now?" and my honest answer has always been "give me a week and it still won't be complete."

the part that gets me: the native admin console won't surface "anyone with the link" files at all as far as i can tell. you can see external sharing to named domains, but the public-link stuff seems invisible from up top. so the actual hunt turns into going file by file, which nobody has time for, and it always misses the folder some contractor shared six months ago before they left.

for those of you managing shared drives for a 20-100 person org, what's your real workflow here?

• do you have a way to pull a full list of externally shared + public-link files without checking each one manually?
• how do you catch permission drift after offboarding, when the account is suspended but the shares that person left are still live?
• anyone doing this with app script / the drive api directly, and is it actually maintainable?

i'm building something in this space (a read-only drive exposure audit), which is exactly why i'm curious what people already do instead. not looking to pitch, genuinely want to know if there's a native path i'm missing before i assume there isn't.

I'm transferring from a personal Gmail account to Google Workspace (because of Google's imminent withdrawal of Send As functionality for custom domains not hosted in Workspace).

I have several secondary calendars on my Gmail account, and want to transfer ownership of those calendars to my new Google Workspace account, so that invites and meeting links remain intact.

I've shared the calendars from Gmail to Workspace, and accepted the shares in the Workspace account. Now, when I go into the Gmail account and request to transfer ownership, I see a message:

`"Ownership cannot be transferred. This calendar can only be owned by an eligible individual user account."`

Is there a Workspace setting that's preventing this working? I don't want to do an ical export and import because that breaks links to meeting invitees.

Hi

Recently I received an email regarding a Workspace account that I have not touched and i have completely closed for about two years

Any advice ?

Here is the original mail

Customer – Company name - NAME SURNAME

File – 123456789



This notice is sent to inform you of a past-due balance that requires immediate resolution.



Your Google Workspace account has been placed with the American Bureau of Collections, an authorized collection agency, for payment of the past-due balance of 71.02 owed to Google Workspace AC.



IMMEDIATE ACTION IS REQUIRED.

This balance must be paid via your Google Workspace Account. ABC-Amega is not authorized to accept payment or access your account.



Please note that the account may not be reactivated until the full balance is cleared.



HOW TO PAY YOUR GOOGLE WORKSPACE BALANCE:

1) After logging in to the Admin console

2) Click ‘Payments Accounts’ and select the account ID mentioned above

3) Under Your Balance, click Pay Early or Make a Payment

4) On the Make a Payment screen, select or add your payment method:

a. To use the displayed payment method: skip to Step 6

b. To use a different existing payment method: see next to the displayed payment method, click the down arrow, and then select a different method

c. To add a new payment method: next to the displayed payment method, click the down arrow. Select the option to add a credit or debit card or a bank account (if available) and enter the required payment information

5) (Optional) Check the Use this Payment Method box to make this card or account your primary payment method for recurring payments.

6) Specify how much you want to pay

7) Click Make a Payment

8) Make sure that the payment details are correct, then click Confirm > Got It



IMPORTANT NOTES:

•   Billing access remains available even when services are suspended but may not be available for deleted/cancelled accounts.

•   Expired or failed payment methods must be updated before payment can be processed.

•   You will need to contact Google Support for payment of final balances from canceled accounts.



If you cannot sign in, use Google’s account recovery options.

Google Support is available within the Admin Console after login.



If you believe the charges are fraudulent, report them here:

[https://support.google.com/a/answer/9125044](https://support.google.com/a/answer/9125044)



If you do not have administrative access to your account you can follow the link provided to assist you in adding a verified contact:

[https://support.google.com/paymentscenter/contact/billing\_information\_update\_support\_for\_monthly\_invoicing\_customers\_only](https://support.google.com/paymentscenter/contact/billing_information_update_support_for_monthly_invoicing_customers_only)



cc:

[MYEMAIL@DOMAIN.com](mailto:MYEMAIL@DOMAIN.com)







ABC Amega

135 Delaware Ave., Suite 504

Buffalo, NY 14202

 

This collection agency is licensed by the Minnesota Department of Commerce. 

N.C. Department of Insurance Permit # 119498584 

This collection agency is licensed by the Division of Banking in the Wisconsin Department of Financial Institutions, www.dfi.wi.gov.     

Hey everyone, I'm trying to learn Google Workspace Migrate (GWM) from scratch, but the documentation can feel a bit scattered. Are there any good video tutorials, online courses, training materials, or community resources available for learning how GWM actually works? Any recommendations would be greatly appreciated!

Hi! Does anyone know if there is a "touch up appearance" feature on Google Meet? I can not figure it out for the life of me.

I also am unable to save my background image/apparently my background image does not automatically populate when I go to join a meeting.

I prefer Zoom and absolutely hateeee Google Meet, but I have to use it because I am interviewing for jobs, and apparently there are many companies that use it.

I'm always scrambling at the last minute to add my background in and try to figure out if there is a touch up appearance setting. It would be so much more convenient if you could save your background and have it always populate instead of having to upload your background photo every single time you join a meeting.

Is there any way to do this that maybe I'm just missing? Help!

I just noticed that I there are charges for google workspace.

I never subscribed to it, at least not that I am aware of. I see that somehow there is a credit card there set up and they started charging me.

They charged 17 bucks twice already and I tried cancelling and they say they will charge me 200 dollars for cancelling.

How do i deal with this? What caused the subscription? I see an email in May - welcome to Google workspace. Maybe I clicked something that i was not supposed to click.

Is there a user-friendly app or script that can help with this? We have hundreds of folders, they are named sequentially, so easy to sort by name (which sorts the same as created-date). But what we really need is to be able to sort by modified... but not when the Folder itself is modified, but when its contents are modified. We want to quickly get to folders that someone added a document to.

I know it's not a built-in function (where can I petition to make it so?). Using "recent" doesn't help, because that is a MASSIVE list of separate files from all my clients, and its not folders.

Let me know your suggestions.

On a Dell XPS 9310 (Tiger Lake Iris Xe), Google Meet intermittently freezes the outgoing video stream when hardware acceleration is enabled. Teams, Zoom, and the Windows Camera app are unaffected. The issue reproduces across Chrome profiles, multiple webcams, and browsers, and disappears when hardware acceleration is disabled.

hardware:

• Dell XPS 13 9310
• Intel Core i7-11th Gen (Tiger Lake)
• Intel Iris Xe Graphics
• Windows 11
• Intel graphics driver 32.0.101.7088
• Logitech C920 webcam and internal Dell camera

Notes:

• Internet approximately 650 Mbps down / 150 Mbps up
• Windows Camera app works normally
• Microsoft Teams works normally
• Zoom works normally
• Reproduces in a fresh Chrome profile
• Reproduces with multiple Logitech C920 webcams
• WebRTC transport remains connected
• Chrome GPU process does not crash
• Remote participants observe the bad outgoing stream.

I have to use Google Meet for work and for important external stakeholder meetings. I have been troubleshooting this for weeks and nothing has helped. I've updated Chrome, Intel driver, tried changing chrome flags, etc. I have reported it as a bug. Anything else I can try? Anyone else having this issue?