Google Workspace Cleanup
For organizations whose Google Workspace has quietly become the place everything lives, with sharing, file ownership, and admin rights that nobody has looked at since the domain was set up.
A cleanup for a Google Workspace that has been running far longer than anyone has been governing it. We rebuild the organizational unit tree so policy can be aimed at a team instead of everybody, pull Super Admin back to the people who genuinely need it, move company work out of personal My Drive and into Shared Drives, and read the Vault retention rules before one of them quietly purges something you needed. The hardening is governed against the CIS Benchmark for the platform, so what we tighten it to is a published standard rather than a house preference. You approve the list before any account or drive is touched.
- Duration
- 3 to 5 weeks
- Engagement
- Setup
Output
What you walk away with
A defined output, on paper or in your tenant. Yours to use whether the work continues with us or not.
Workspace state report
The counted position: admin role holders and the scope each one runs at, the OU tree as it stands, Shared Drive holdings against My Drive holdings, externally shared files, suspended accounts, and the Vault rules currently in force.
Admin and OU restructure
Super Admin reduced to a named few with recovery configured, day to day work moved onto scoped prebuilt or custom roles, and an OU tree that lets you apply a policy to one team without hitting the whole company.
Drive ownership migration
Company work moved into Shared Drives with managers and members set properly, files rescued from departed users, general access defaults corrected, and open external shares either closed or renewed on purpose.
Vault and offboarding rework
Retention rules read against what you actually need to keep, holds checked, and an offboarding sequence that transfers Drive ownership before the account is deleted and the 20 day restore window starts counting.
How It Works
How the work runs.
A short, defined sequence. Nothing in your tenant or domain changes until the scope and access are confirmed.
What the domain actually contains
We start by counting what is there, because the admin console will tell you things about sharing and ownership that nobody inside the organization can.
Who still needs it
We agree what moves, what stays, who loses access, and which external collaborators are still genuinely working with you, before anything shifts.
Suspend before delete
Teclara restructures the OUs and roles first, then migrates Drive content in batches so people can keep working, checking access after each batch.
The record you keep
You get the record of what moved and what changed, the new ownership map, and a quarterly checklist that keeps Drive from drifting again.
Best Fit
Sound familiar?
Every user sits in the root organizational unit, so nothing can be applied to one team on its own
Super Admin was the easy answer at the time and there are now several of them
Client work lives in individual My Drive folders, including folders belonging to people who have left
Old link shares and external collaborators have piled up without anyone reviewing them
Vault retention rules were set once and nobody has checked what they would delete
Frequently asked questions.
Who is Google Workspace Tenant Cleanup for?
Google Workspace Tenant Cleanup is built for organizations on Google Workspace for two or more years, teams with Drive ownership scattered across individuals, and owners whose workspace has never been reviewed.
How does this engagement start?
Every engagement starts with a short first call to confirm the situation, the decision owner, the access required, and whether this is the right engagement for what you actually need.
What happens after the first call?
Teclara confirms the scope, the access, and the timing. If the engagement is a fit, we agree on the work and start. If a different engagement fits better, we say so.
Ready to start?
Book the first call. We will confirm the situation, the access required, and the right way to move forward, with no obligation past that conversation.