Not sure which process to use to assign our Google Premium licences, any advice?

[Jaan]

Morning all,

 

So we've just made the jump to Google Premium after about 8 years on the free tier!

 

I've received the licences and how to pack along with the documentation on how to assign licences.

 

I was hoping that i'd be able to just use Google active Directory Sync to assign licensing, with the option to "Remove licenses from suspended users" option..... Apparently i dream that button up!

 

So before i make a decision, i was just wondering how you guys do it. How you manage suspended user license removal, and any pitfall i might need to know about?

 

Cheers all

[RLR]

We assign licenses via OU. To remove licenses we run an offboarding script for staff and students. Part of that offboarding script is to remove the their google license via a GAM command. I believe GADS can assign licenses too but not sure if it can remove. Not explored that area before.

 

GAM command:

 

gam user $username delete license 1010310008

 

You can get a list of license skus from here: https://developers.google.com/admin-sdk/licensing/v1/how-tos/products

Edited March 24, 2022 by RLR

[Jaan]

Oh right, so if i move a member that has a license assigned out of the OU that automatically assigns them, It doesn't get removed automatically if i move them out of that OU?

 

EDIT: looks like Google directory cloud sync does support assigning of and removal of licenses;

 

(Optional) Check the Remove this license from Google domain users that don’t match this rule box to remove licenses from Google users that don’t match the rule.

 

Note: Checking the box might result in removing licenses for a large set of users in your account if your LDAP configuration isn’t correctly defined. Check your configuration before using this feature.

Edited March 24, 2022 by Jaan

[RLR]

Oh right, so if i move a member that has a license assigned out of the OU that automatically assigns them, It doesn't get removed automatically if i move them out of that OU?

 

Correct, moving a user to a Google OU that doesn't automatically get licenses will not remove their license.

[timbo343]

We assign licenses via OU. To remove licenses we run an offboarding script for staff and students. Part of that offboarding script is to remove the their google license via a GAM command. I believe GADS can assign licenses too but not sure if it can remove. Not explored that area before.

 

GAM command:

 

gam user $username delete license 1010310008

 

You can get a list of license skus from here: https://developers.google.com/admin-sdk/licensing/v1/how-tos/products

 

I've been looking at GADS / GCDS tonight and managed to get our licenses to apply based on a couple of LDAP rules looking at specific fields that we complete when creating accounts. They do give an example of users who are a member of a group but i couldn't get it show all the users of the group.

 

It does look like it can remove the license from a user if the user is not part of the OU however for this to work movements and syncs need to be done via GADS / GCDS. From what i understand moving a user around in Google Workspace will not remove the license.

 

It's a shame Google don't allow license assignment based on groups. That would make life so much easier.