This feature is available on Essential, Pro, and Enterprise tiers. See what's included in your tier →
This article provides an overview of all available offboarding steps in CloudM Automate, including their purpose and flexibility within a workflow.
Understanding offboarding step flexibility
Each offboarding step has unique properties that determine where it can be placed in a workflow.
| Property | Description |
|---|---|
| Initial fixed | Required to occur at the beginning of the workflow. Cannot be moved or reordered. |
| Final fixed | Required to occur at the very end of the workflow. Cannot be moved or reordered. |
| Flexible | Can be placed anywhere in the workflow between the initial and final steps, in any order. |
| Repeatable | Can be used more than once in a single offboarding workflow. |
Available offboarding steps
| Offboarding step | Summary | Initial | Final | Flexible | Repeatable |
|---|---|---|---|---|---|
| Request Approval | Sends a notification to the executor, allowing them to approve or deny the offboarding. | ✅ | |||
| Preemptively Suspend User | Prevents the user from logging in and accessing services from this account. | ✅ | |||
| Prompt for Resource Allocation | Sends a notification to the executor, asking them to confirm the allocation of resources. | ✅ | |||
| Assign Google Workspace License | Ensures the appropriate Google Workspace licence is in place to prevent certain workflow steps from failing. | ✅ | |||
| Wipe Mobile Devices | Remotely wipes Google Workspace data from any devices owned by the user. | ✅ | |||
| Wipe Chrome OS Devices | Remotely wipes user accounts from any Chrome OS devices owned by the user. | ✅ | |||
| Change Password | Changes the user's password to prevent login and clears their password reset question answers. | ✅ | ✅ | ||
| Revoke 2-Step Verification | Removes all forms of 2-step verification from the user's account. | ✅ | |||
| Remove Recovery Methods | Removes the recovery email and phone number currently set up for the user. | ✅ | |||
| Revoke Application Specific Passwords | Revokes all application-specific passwords created for the user's account. | ✅ | |||
| Revoke OAuth Tokens | Revokes all OAuth tokens issued to the user, preventing applications from accessing the account. | ✅ | |||
| Remove or Replace User as Manager | Removes or replaces the user from the Manager field on any associated user profiles. | ✅ | |||
| Revoke Existing Delegate Access | Revokes existing delegation for other users to access this user's Gmail. | ✅ | |||
| Set Out of Office Message | Sets an out of office message for the user. | ✅ | |||
| Remove Email Forwarding Settings | Removes the email forwarding settings configured for the user. | ✅ | |||
| Delegate Access | Delegates Gmail access to a specified user, allowing them to read, send, and delete messages on the user's behalf. | ✅ | ✅ | ||
| Move User | Moves the user profile to a specified Organisational Unit. | ✅ | ✅ | ||
| Hide User | Removes the user from the Google Workspace global address list. | ✅ | |||
| Rename User | Renames the user's primary email address, first name, and/or last name. | ✅ | ✅ | ||
| Assign Alias | Assigns the user's old email address as an alias to a specified user. | ✅ | |||
| Archive | Archives the user's data to your cloud storage bucket. Can be restored to another user. | ✅ | |||
| Archive Vault | Archives the user's Vault data to long-term storage. Can be restored to another user. | ✅ | |||
| Purge Backup | Purges the user's backed-up data a set number of days after offboarding. | ✅ | |||
| Transfer Ownership of Documents | Transfers ownership of the user's documents to a specified user. | ✅ | |||
| Migrate Calendar Events | Migrates the user's primary calendar events and secondary calendars to a specified user. | ✅ | |||
| Transfer Ownership of Groups | Transfers ownership of the user's groups to a specified user. | ✅ | |||
| Transfer Contacts | Copies contacts from the user's account to a specified user. | ✅ | |||
| Transfer Shared Drives | Transfers ownership of Shared Drives to a specified user. | ✅ | |||
| Transfer Looker (Google Data) Studio | Transfers ownership of Looker Studio reports to a specified user. | ✅ | |||
| Remove From Groups | Removes the user from any groups they are a member of. | ✅ | |||
| Migrate Emails | Migrates the user's email to a specified user via CloudMigrator Lite. | ✅ | |||
| Suspend User | Prevents the user from logging in and accessing services from this account. | ✅ | |||
| Unassign Licenses | Unassigns licences from the user so they are returned to the pool. | ✅ | |||
| Apply Google Archived User (AU) License | Switches the profile to a Google Archived User licence. | ✅ | |||
| Delete User | Deletes the user profile from CloudM Automate and your domain. This operation is irreversible. | ✅ |
Need help? Contact CloudM Support