Your toolkit for Google Workspace
Manage your users, groups, access, applications and devices. Automate onboarding and offboarding, detect risks and simplify your day-to-day operations.
No credit card required. You won’t be charged unless you activate a paid subscription.
For IT teams, Google Workspace managers and business owners.
Find a user, manage groups and aliases, review Drive and licences, start transfers supported by Google, and prepare joiners and leavers announced by your HR tool.
support@example.com
Group · 6 members
Group aliases
MOZAYK Workspace complements the Google Admin console by making everyday tasks easier.
Every change is sent to Google with your own permissions, after your confirmation. Advanced settings are still managed in the console.
Find a user and review their status, aliases, organisational unit and last sign-in.
Add or remove members, manage their roles, and manage group and user aliases.
Create a user account with their groups, licence and aliases. When a user leaves the organisation, suspend or delete the account immediately or on a scheduled date. The list of equipment to return (company computers and mobiles) is prepared automatically and access on personal devices (BYOD) is cut off. Compatible with universal webhooks (n8n, Make, Zapier).
Review shared drives and identify external or public sharing.
Identify licences assigned to accounts that need review and remove a licence when necessary, including Google Voice licences (Starter, Standard, Premier), and identify potential savings on dormant accounts. You can also review storage and costs estimated using your own pricing, without assuming the price of your licences.
Transfer Drive and Calendar, and make the recipient owner or manager of the source account’s groups and shared drives. Email transfer cannot be automated and is flagged as such.
Connect Lucca, PayFit or BambooHR to automate onboarding and offboarding. Extend your workflows with webhooks compatible with n8n, Make and Zapier, while keeping full control with a 1-click approval queue before any action.
Automate Google Workspace account provisioning based on job roles: organisational units (OU), groups, Google Workspace and Voice licences, shared drive access and team calendars. Schedule offboarding and safely reassign access.
Check domain compliance on demand: live DNS lookup (MX, SPF, DKIM, DMARC), strict validation against deliverability standards, and spoofing prevention.
Centralise the information available on macOS, Windows and Linux computers, as well as the mobile devices and Chromebooks linked to your Google Workspace environment. Review the security information reported by Google and take the management actions supported for each device type and configuration.
Find a timestamped history of operations performed in MOZAYK Workspace: device management, licences, transfers and account suspensions. See which actions were taken, by whom and with what result, to support your internal audits and compliance work.
Delegate tasks without granting Google Super Admin rights. Assign modular access space by space: a dedicated meeting-room role, read-only access for auditors, or restricted permissions per member.
See a colleague’s groups, shared drives with the exact permission level, and shared files in one view, with CSV export.
Identify public files, open links and shares with external addresses. The highest-risk access appears first. Review and correct permissions after confirmation.
Remove group and shared drive access from the departure wizard, after confirmation. A safeguard prevents removing someone who is a group’s only owner.
Define groups and shared drives by role or department. Apply these permissions on arrival or when someone changes role, with a preview before confirmation.
One view of their available access.
Exact roles and shares to examine.
You choose which changes to apply.
Each operation’s outcome is recorded.
Scope and security
MOZAYK Workspace analyses events and permissions accessible through the granted Google Workspace authorisations. Results depend on available permissions and do not necessarily constitute an exhaustive inventory of all files and access.
Permission changes and revocations require explicit administrator confirmation. Each operation is verified and its outcome is logged.
See the third-party applications your colleagues have authorised, identify sensitive permissions and spot access that needs review. MOZAYK uses the information available in Google Workspace to help you manage the risks of external applications.
Available authorisations and sign-ins.
Who uses what, with which permissions?
Select OAuth authorisations to revoke.
Vendor accounts and licences still need attention.
A SAML application configured but never used does not appear. Available usage dates and sign-ins depend on the logs and their retention period.
Accounts created directly with a vendor without Google sign-in, SCIM licences and SaaS billing are not visible. MOZAYK Workspace lists what Google reports, nothing else. Revoking an OAuth authorisation does not delete the vendor account or necessarily close its sessions.
Monitor your sensitive spaces, external shares and unusual file movements using Google Workspace audit logs. 100% cloud: nothing to install on computers.
Google provides accessible events.
Your chosen recipients are notified.
You decide whether suspension is needed.
Suspension is reversible, with no data deletion.
Choose the shared drives or folders to protect. MOZAYK flags downloads, shares, copies and moves that affect them.
Get alerted when a document is made public or shared outside the company, with specific detection of personal Gmail addresses. A list of partner domains avoids false alerts.
Example: many downloads plus at least one external share within 24 h trigger a critical alert. Unusual volumes are compared with the last 30 days.
Email with the user, the file and a link to the document. Up to 20 recipients of your choice, a 0–100 risk score and incident history.
When suspicious activity is detected, the administrator can suspend the account from the incident page. This action requires explicit confirmation and does not delete the user’s data.
Suspension and Google session revocation
Suspend the user account and request revocation of supported Google sessions. Access to the affected services is restricted, without guaranteeing that every third-party session closes immediately.
Data retained
No file, email or history is deleted.
Account reactivation
After a false alarm or once the investigation is complete, the administrator can reactivate the account so the user regains access to their Google Workspace services.
Strict safeguards
A Google Workspace super administrator cannot be suspended (no risk of losing access to the domain), nor can your own account.
A lightweight alternative to traditional DLP
Automatic analysis every 15 minutes; Google publishes events with a delay of a few minutes to a few hours. Some Google Workspace editions do not expose every Drive event.
Review the accounts, access, apps, groups, licences and Drive sharing that need your attention.
Active accounts
48
Suspended accounts
3
Administrators
2
Groups
17
Indicators
Alerts
Check coverage: 9 of 11
Identify the points that need attention and the actions to consider. Examples of findings:
Each finding is based on data read directly from Google. When a piece of data is not available with the granted permissions, the app says so rather than guessing. This is neither a vulnerability scanner nor real-time monitoring: nothing is changed automatically.
Findings
Accounts without 2-step verification
6 active accounts, including 1 administrator
Accounts inactive for more than 90 days
4 accounts · adjustable threshold (30 to 365 days)
High-impact third-party apps
1 app with Gmail access granted by an administrator
Licences assigned to suspended accounts
3 licences to review
4 computers run an outdated operating system
macOS or Windows 10 past end of support
Number of administrators
2 active administrators
Indicative posture
62
out of 100 · indicative only
Understand the situation quickly: active and suspended accounts, administrators, groups and audit indicators on a single page.
Review findings and spot improvements, with the related recommendation and its source (Google, NIST or MOZAYK) for each item.
Review access and points to watch: 2-step verification, open or external groups, public shares, accounts with no recent sign-in.
A recurring meeting stays in the calendar after the need has changed, and the room still shows as busy. Teams look for another room while that time slot could be available.
MOZAYK Workspace lets you review recurring bookings and release the relevant time slots while keeping the participants’ meeting.
A team books a room every week for its recurring meeting, then all the participants end up joining remotely. The room stays booked week after week, but nobody uses it. With MOZAYK Workspace, you release those bookings while keeping the participants’ meeting.
1.Find the booking
In the room catalogue, open the relevant room: its recurring meetings are listed with their frequency, organiser and end date (or “never ends”).
2.Choose the slots to release
Keep the next N time slots, or release every booking from a given date. Preview the affected time slots before releasing them.
3.Confirm and check
The room itself declines the invitation on each released slot. The result is verified after each change and recorded in the room’s history.
Room catalogue
Atlas room · 8 seats
Recurring meetings
Weekly product sync
Every Tuesday · never ends
c.durand@example.com
Project committee
Every Monday · ends 15 Dec
a.martin@example.com
Support review
Every Thursday · after 8 occurrences
l.bernard@example.com
Select a series
A recurring booking that is no longer needed? Make the room available again.
Illustration of the flow · sample data
Saved clean-up tracking · Weekly product sync
Series with no end date: run the clean-up again regularly, no scheduled task does it for you.
Room history
All actions are recorded, including failures and partial results.
Good to know: the app reviews bookings over an adjustable period of 1 to 36 months and changes no more than 20 bookings at a time. For a recurring meeting with no end date, release the room again regularly; no scheduled task does it for you. The app does not detect whether a meeting actually takes place: you choose the recurring meeting and bookings to release.
Security and compliance
MOZAYK relies on secure cloud infrastructure, with a database hosted in the European Union and infrastructure providers holding SOC 2 Type II and ISO 27001 certifications. The service is designed to meet GDPR requirements.
Our infrastructure providers undergo SOC 2 Type II audits, with strict controls over security, availability and confidentiality.
Infrastructure operated by ISO 27001-certified providers, the international standard for information security management.
Designed to meet GDPR requirements. The database is hosted in the European Union, and data is processed in accordance with applicable regulations.
Centralise checks and make recurring operations easier.
Manage rooms and the authorised areas according to your permissions.
Find the useful information and actions with labels you can understand.
Do you support several companies? The Service Provider plan is available on a custom quote for a multi-organisation scope tailored to your needs. In every case, members only access the functions allowed by their role in MOZAYK Workspace and by their Google rights.
No credit card required. You won’t be charged unless you activate a paid subscription.
Sign in with Google and choose your plan.
Configure the required Google permissions and explore your plan’s features for 30 days.
Activate a paid subscription to keep using the service after your trial. Otherwise, you won’t be charged.
Some Google permissions must be granted by a Google Workspace administrator, so plan for that during set-up. The Business plan covers one organisation. The Service Provider plan is available on a custom quote for multiple organisations; any trial arrangements are agreed with us. Changing plans does not restart the 30-day trial period.
30-day free trial. No credit card required. Save €58 a year with annual billing.
1 organisation
or €29 excl. VAT/month with monthly billing
30-day free trial. No credit card required.
Multi-organisations
30-day free trial. No credit card required.
The prices shown apply to the paid subscription after your trial, only if you choose to activate it.
Prices exclude VAT. Applicable taxes are added when you subscribe.
An organisation is one Google Workspace environment and may include several domains.
Google Workspace licences are not included.
Personalised consulting services are billed separately.
Need help configuring, securing or administering your Google Workspace environment? Get support from a specialist for an audit, a set-up or the day-to-day administration of your organisation.
This support is a separate service from the MOZAYK Workspace subscription.
MOZAYK Workspace grows with the way you work. If you need an additional feature for your Google Workspace, tell us about it: it can join the toolbox or be built as a dedicated development.
Dedicated developments are scoped and billed separately.
Email us at contact@mozayk.cloud or book a slot directly in our online calendar.
Discover how MOZAYK Workspace simplifies the management of your Google Workspace environment: rooms, security, users, groups and aliases.
No credit card required. You won’t be charged unless you activate a paid subscription.
Sign in with your Google account. 30-day free trial, no credit card required.
