Understanding the Difference: Suspension vs. Deletion
Before you remove a user, decide whether you really want to delete the account or simply suspend it. Suspending a user immediately blocks sign-in and mail delivery without deleting data; it’s ideal for temporary leaves of absence. Deleting, by contrast, permanently removes the account after a brief recovery window and can trigger data loss if you don’t transfer or back up information first.
Prerequisites and Considerations
-
Administrator Privileges: Only Super Administrators or delegated admins with user-management rights can delete accounts.
-
Data Ownership: Plan how to handle the user’s Drive files, calendars, and email. You can transfer ownership or delegate access to another user before deletion.
-
Licenses and Billing: Deleting an account frees up a license seat immediately or at your next billing cycle, depending on your subscription.
-
Compliance and Records Retention: If you need to preserve email for legal or auditing purposes, export the user’s data using Google Vault or the Data Export tool before deletion.
-
Group Memberships and Shared Resources: Removing a user can disrupt workflows if they’re the sole owner of shared drives, groups, or calendars. Transfer ownership or add additional co-owners first.
Step 1: Export or Transfer Critical Data
-
Google Drive and Shared Drives
-
In the Admin console, go to Apps > Google Workspace > Drive and Docs > Transfer ownership.
-
Enter the departing user’s email as the source and the recipient as the new owner.
-
-
Email
-
Use the Data Export tool (under Tools in the Admin console) to create a ZIP archive of the user’s mail. Alternatively, set up forwarding or delegate mailbox access temporarily.
-
-
Calendar
-
In the user’s Calendar settings, share each calendar with edit rights to another admin or team member, then make them the new owner.
-
-
Contacts, Sites, and Other Services
-
Review other apps (Contacts, Sites, Groups) where the user has unique content, and transfer or share appropriately.
-
Step 2: Suspend the User (Optional Safety Measure)
Suspending first can buy you time to finalize transfers without risking accidental data loss.
-
Open the Admin console at admin.google.com.
-
Navigate to Directory > Users.
-
Select the user, click More, and choose Suspend User.
-
Confirm the action.
Suspension blocks sign-ins and halts mail delivery, but leaves all data intact. It also releases the user’s Active Directory license seat if configured.
Step 3: Delete the User Account
Once you’re ready to permanently remove the account:
-
In the Admin console, go to Directory > Users.
-
Click on the user’s name to open their profile.
-
Choose More (•••) and then Delete User.
-
On the confirmation dialog, you can opt to transfer any remaining Drive files to another user.
-
Confirm the deletion.
Deleted users enter a 20-day recovery window during which you can restore the account (along with mailbox, Drive, and settings). After that, Google automatically purges the account and all data.
Step 4: Post-Deletion Cleanup
-
Groups and ACLs: Check Google Groups to ensure no permissions rely solely on the deleted account. Add backup owners where needed.
-
Shared Drive Access: Verify that shared drives still have active managers.
-
Third-Party Apps: Remove or reassign any OAuth tokens or API client permissions granted by the deleted user.
-
SSO and Mobile Devices: Deactivate or wipe mobile devices via the Admin console’s Devices section to prevent unauthorized access.
Best Practices and Tips
-
Document Your Process: Keep a checklist of transfer steps, suspension, deletion, and cleanup tasks.
-
Automate with API: For bulk deletions or large organizations, consider using the Directory API to script user removal and data transfers.
-
Audit Logs: Review the Admin console’s audit logs after deletion to confirm that the actions were recorded properly.
-
Communication Plan: Notify teams and external partners of the user’s departure and updated contact points.
-
Data Retention: If you need long-term email archives, ensure Google Vault holds the user’s data before deletion.
By following these steps—exporting or transferring data, optional suspension, careful deletion, and thorough cleanup—you can remove a user from Google Workspace securely, maintain operational continuity, and meet compliance requirements without losing critical information.