> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/saas-data-monitoring/inventory/inventory-users/google-workspace-users/internal-users.md).

# Internal users

Internal users belong to your organization's Google Workspace and operate within the organization domains or subdomains. 

After you filter a specific user's assets, you can generate a [CSV report ](#generate-report)or [remediate exposure](#remediate-asset-exposure) for specific assets. The internal users page displays the following data:

* [Internal user list](#internal-user-list)
* [Internal user details](#internal-user-details)
* [Assets](#assets)
* [Events](#events)

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FoDW3iMEwM0G2Q5FrLtqM%2FInternal%20users.png?alt=media&amp;token=5fbf1561-d702-448b-8b1a-b83432ac3cb6" alt=""><figcaption><p>Inventory and event details for an internal user in Google Workspace</p></figcaption></figure>

## Locate an internal user

To view personal details, asset and event data for a specific internal user in Google Workspace:

1. From the DoControl side menu, click **Inventory** > **Users**.
2. Select **Google Workspace** and **Internal**.<br>

   <figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FverzhubT2MWHdNbC3PRF%2FGoogle%20users%20choose.png?alt=media&amp;token=768df7d6-b619-416d-8fe1-0fbcdb53accc" alt=""><figcaption></figcaption></figure>
3. Filter for a specific user.
4. Click the user's **email address** to open the [internal user details](#internal-user-details).
5. Click any **app** icon to display user details, assets and events for that SaaS app.

## Internal user list

All internal users in your Google Workspace are displayed with these parameters:

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FYeGJJWQmhgDDIYdTBkWI%2FGoogle%20users.png?alt=media&amp;token=77613cdc-f5ee-4ead-b639-364ee08da016" alt=""><figcaption></figcaption></figure>

<table><thead><tr><th width="223.87890625">Internal user parameter</th><th>Description</th></tr></thead><tbody><tr><td>Email</td><td>Internal user's email address. Click the email to open the <a href="#internal-user-details">internal user details</a> with <a href="#assets">asset</a> and <a href="#events">event</a> data. </td></tr><tr><td>User status</td><td>Google Workspace status: Active, Suspended, Archived, or Deleted.</td></tr><tr><td>First name</td><td>Internal user's given name</td></tr><tr><td>Last name</td><td>Internal user's surname</td></tr><tr><td>Admin</td><td>Indication if the user is a Google Workspace administrator</td></tr><tr><td>Created on</td><td>Date when the user was created in Google Workspace</td></tr><tr><td>Last login</td><td>Most recent date when the user accessed Google Workspace</td></tr><tr><td>Org unit path </td><td>The unique path name of the Google organizational unit to which the user belongs. You can also <a href="/docontrol-user-guide/workflows/define-workflow-settings/trigger-settings.md#to-define-a-workflow-condition-based-on-a-google-organizational-unit">define workflows </a>based on a specific organizational unit.</td></tr></tbody></table>

{% hint style="success" %}
Click **Export to CSV** <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FPWdaV30qx1aefHNdGX9C%2Fdownload%20icon.png?alt=media&amp;token=16257bf4-2b68-4417-91e6-78c5db741fdc" alt="" data-size="line"> to download a consolidated report of internal Google Workspace users in CSV format.
{% endhint %}

## Internal user details

Metadata for a specific internal user in Google Drive is displayed as follows:

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2F4LmmfODptYDjjkpGFnEj%2Finternal%20user.png?alt=media&amp;token=2a4d1d31-4dd5-4e5a-b879-23498e7d3d96" alt=""><figcaption><p>The user status is indicated for internal Google Workspace users: active, suspended or archived</p></figcaption></figure>

{% hint style="warning" %}

* A terminated employee might still have an **active** status if the IT department forgot to disconnect the user's Google account.
* Assets of **archived** users (Google users who were terminated) can also be remediated by DoControl.
  {% endhint %}

<table><thead><tr><th width="271">Internal user detail</th><th>Description</th></tr></thead><tbody><tr><td>Name</td><td>Internal user name</td></tr><tr><td>Email </td><td>Email of internal user</td></tr><tr><td>Phone</td><td>Phone number of internal user</td></tr><tr><td>User status</td><td>Google Workspace status: Active, Suspended, Archived or Deleted. The status is also indicated on the user's avatar.</td></tr><tr><td>Job title</td><td>Role of internal user</td></tr><tr><td>Department</td><td>Company department the user belongs to</td></tr><tr><td>Related active alerts</td><td>Number of active alerts where this user is the actor. Click <strong>View</strong> to open the Alerts page filtered for this user's alerts.</td></tr></tbody></table>

## Assets

View and filter metadata for an internal user's Google assets in My Drive.

1. From the DoControl side menu, click **Inventory** > **Users**.
2. Select **Google Workspace** and **Internal**.
3. Filter for a specific user.
4. Click the user's **email address** to open the internal user details.
5. Scroll down to view metadata for the user's Google Drive assets.

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FbUt5h8G1oobNS3pbywwg%2Finternal%20assets.png?alt=media&amp;token=79bcf3f1-863e-4836-81de-c41a0d89ade7" alt=""><figcaption><p>Asset details for a specific internal user in Google Drive</p></figcaption></figure>

The metadata displayed for Google assets in a user's My Drive includes these parameters:

<table><thead><tr><th width="204.33333333333331">Asset parameter</th><th>Description</th></tr></thead><tbody><tr><td>Asset name</td><td>Name of file in Google Drive. Click to open the individual asset page</td></tr><tr><td>Sensitivity</td><td>DoControl proprietary sensitivity ranking, based on the asset name</td></tr><tr><td>Drive type</td><td>Location of asset: My Drive</td></tr><tr><td>Drive name</td><td>Hover over the My Drive owner to display user details</td></tr><tr><td>Sharing status</td><td><p>Google statuses indicate how the asset is shared, with the number of collaborators per sharing status:</p><ul><li><strong>Public</strong> - Anyone with the link can access the asset, without authentication.</li><li><strong>External</strong> - Specific external users can access the asset. </li><li><strong>Internal with link</strong> - Anyone with the link can access the asset after authentication.</li><li><strong>Searchable</strong> - Internal users can search for the asset within the organization.</li><li><strong>Internal</strong> - Only specific internal users can access the asset. </li></ul><p><strong>Tip</strong>: Hover over the external sharing status to display the emails of all external users with access to that asset.</p></td></tr><tr><td>Google label</td><td><p>Google asset categories:</p><ul><li><p><strong>Badged label</strong> - Indicates your organization’s most critical metadata, and is displayed in color next to the asset name. </p><p>Organizations can have one badge with several values. For example, a File Sensitivity badge can have these values: Top Secret, Internal, Public, and Private, each with a different color.</p></li><li><strong>Standard labels</strong> - Tags that indicate file metadata in the file details. Labels can be structured elements including fields and values</li></ul></td></tr><tr><td>Created on</td><td>Date when the owner created the asset.</td></tr><tr><td>Modified on</td><td>Date when the asset was last updated. Hover to see the actor who last updated the asset.</td></tr><tr><td>Last viewed</td><td><ul><li>Date when the asset was last viewed. </li><li>See historic views from the last 6 months prior to integrating Google Workspace with DoControl.</li><li>Hover to see the actor who last viewed the asset.</li></ul></td></tr><tr><td>Remediate</td><td>Click the magic wand <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FxxTrAqT5s1Zz9cYEJNrn%2Fmagic%20wand%20icon.png?alt=media&amp;token=94994886-2fe3-4e21-8667-0d4ab6f2fae1" alt="" data-size="line"> to <a href="#apply-inventory-actions">remediate</a> a specific asset with the relevant inventory action, such as <strong>Change owner</strong> or <strong>Remove external collaborators</strong>.</td></tr></tbody></table>

{% hint style="success" %}
To see the filtering options for Google Drive assets, see [Filter all assets.](/docontrol-user-guide/saas-data-monitoring/inventory/inventory-assets/google-drive-assets.md#filter-all-assets)
{% endhint %}

### Generate CSV report

You can generate a report for selected asset metadata in CSV format.

1. Select the relevant assets.
2. Click the **Export to CSV** <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FPWdaV30qx1aefHNdGX9C%2Fdownload%20icon.png?alt=media&amp;token=16257bf4-2b68-4417-91e6-78c5db741fdc" alt="" data-size="line"> icon.
3. Name your report and select the columns you wish to include in your report.<br>

   <div align="left"><figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FVgrYinFvVTGjbLHKxJ9n%2Fexport%20to%20CSV%20report.png?alt=media&amp;token=cfd09ade-6df1-4a01-98c3-e92d2c6a46f2" alt="" width="563"><figcaption></figcaption></figure></div>
4. Click **Create report**.&#x20;

{% hint style="info" %}
It might take a few minutes or more to download your report.&#x20;

The maximum report download size is 1 GB.

You can export up to 1 million assets per report.
{% endhint %}

### Remediate asset exposure

You can apply [inventory actions](/docontrol-user-guide/workflows/inventory-actions-quick-actions.md) to Google Drive assets, in order to manually trigger on-demand remediation actions to resolve specific issues. Click **Remediate** to apply these inventory actions to selected Google Drive assets:

* [Change owner](/docontrol-user-guide/workflows/inventory-actions-quick-actions/google-drive-inventory-actions.md#change-owner)
* [Remove public sharing](/docontrol-user-guide/workflows/inventory-actions-quick-actions/google-drive-inventory-actions.md#remove-public-sharing)
* [Remove external collaborators](/docontrol-user-guide/workflows/inventory-actions-quick-actions/google-drive-inventory-actions.md#remove-external-collaborators)
* [Remove org-wide sharing](/docontrol-user-guide/workflows/inventory-actions-quick-actions/google-drive-inventory-actions.md#remove-org-wide-sharing)

## Events

DoControl monitors real-time events of user activities in Google Drive. If no date range is selected, events are displayed from the last 30 days.

#### To view events for a specific internal user:

1. From the DoControl side menu, click **Inventory** > **Users**.
2. Select **Google Workspace** and **Internal**.
3. Filter for a specific user.
4. Click the user's **email address** to open the internal user details.
5. Scroll down to view metadata for the user's events in Google Drive.

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FuLeABlKqn8qFI5c6ZYQC%2Finternal%20events.png?alt=media&amp;token=16a99bea-2b82-4364-8090-5e7694e1ffd3" alt=""><figcaption><p>Event details for a specific internal user in Google Drive</p></figcaption></figure>

The metadata displayed for a user's events in Google Drive includes these parameters:

<table><thead><tr><th width="271">Event parameter</th><th>Description</th></tr></thead><tbody><tr><td>Date and time</td><td>When the event occurred</td></tr><tr><td>Actor </td><td>The user who triggered the event</td></tr><tr><td>Target</td><td>Recipient of the event. If the recipient is a Google email alias, the user's real email address is displayed.</td></tr><tr><td>App</td><td>App involved in the event: Google Drive</td></tr><tr><td>Asset</td><td>Name of the asset involved</td></tr><tr><td>Event type</td><td>Type of event as defined in Google Drive (View, Edit, etc)</td></tr><tr><td>Triggered</td><td>Number of workflows or alerts that were triggered by this event</td></tr><tr><td>Event ID</td><td>Unique identifier for the event</td></tr><tr><td>Event JSON</td><td>Click to open the JSON file with raw details about the event</td></tr></tbody></table>

{% hint style="success" %}
Click **Export to CSV** <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FPWdaV30qx1aefHNdGX9C%2Fdownload%20icon.png?alt=media&amp;token=16257bf4-2b68-4417-91e6-78c5db741fdc" alt="" data-size="line"> to download a consolidated report of event metadata for a specific Google Workspace user.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/saas-data-monitoring/inventory/inventory-users/google-workspace-users/internal-users.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.