Manage G Suite Users

When Okta end users are assigned, or changed in the Universal Directory Profile Editor, choosing true allows any changes in their Google license(s) to be automatically pushed to Google. Choosing false does not push any information.

1. In Okta, select the Assignments tab for your G Suite instance, select a User or Group, then click Edit.

2. Select true from the Manage licenses on create update drop-down menu.

3. Click the appropriate check-boxes to assign the license(s) to the selected User or Group.

Caution: Only certain groups of Google licenses can be individually selected, as some groups provide mutually exclusive options. For example: You can assign only one license selection at a time for Google Apps and Google Drive. Choosing more than one results in an error on the Tasks page, and only the first selection is honored.

Note that you also have the option to Remove all G Suite licenses for the selected User or Group under Deactivation options on the Edit User/Group Assignment screen.

Note: Customers need to contact Okta Support to migrate their Universal Directory profile template to enable this feature.

1. In Okta, select the Assignments tab for your G Suite instance, select a User or Group, then click Edit.

2. Select true from the Manage roles on create and update drop-down menu.

3. Click the appropriate check-boxes to assign the Role to the selected User or Group.

Note that you also have the option to Remove all G Suite Roles for the selected User or Group under Deactivation options on the Edit User/Group Assignment screen.

Deactivating a Google Apps User

When you need to deprovision or deactivate an Okta user from Google Apps, you can do so without compromising the user's Google account. Control this element under Deactivation options on the Edit User Assignments screen.

If options are left unchecked, the user is suspended in Okta and in their corresponding Google account. See details about these options below.

Deactivation options are:

• Do not suspend user: Checking this box prevents the user's account from being suspended in Google after deprovisioning in Okta. The user's Google account remains active.

• Remove all G Suite licenses: Checking this box insures that, when deprovisioned, Google licenses for this user no longer exist in Okta.

• Remove all G Suite Roles: Checking this box insures that, when deprovisioned, Google roles for this user no longer exist in Okta.