How to Audit Google Workspace Licenses and Find Ghost Users — Step by Step (2026)
Last updated: June 2026
To audit Google Workspace licenses and find ghost users: go to Admin Console → Reporting → User Reports → Accounts to see last activity per user across Gmail, Drive, and Meet. Sort by last activity and flag anyone with no activity in 90+ days who still holds an active license. Then go to Admin Console → Directory → Users, filter by Suspended status, and export — suspended accounts still consume a paid license until explicitly handled.
The Problem
Most Google Workspace admins assume that when someone leaves the company and their account is suspended, the billing stops. It does not.
A suspended Google Workspace user still occupies a paid license seat. The account cannot be used — no Gmail, no Drive, no Meet — but Google continues charging for it as if the person were actively working. At Business Standard pricing, that is approximately $14.40/user/month as of 2026 after the Gemini bundling price increase (pricing varies by tier and region — verify current rates at workspace.google.com/pricing). At a 50-person company with normal turnover, three to five suspended accounts sitting unaddressed for six months is $200-430 in billing for nothing.
The second, less obvious ghost user category: active accounts with no recent login. These are employees who technically still have their accounts but haven't signed in for 90 days or more — people who quietly moved on, contractors whose project ended, or part-time staff who stopped working. Google has no way to know they are gone. From a billing perspective, their seat looks identical to the most active user on the team.
According to Zylo's 2026 SaaS Management Index, the average organization uses only 54% of its SaaS licenses, leaving 46% wasted. Google Workspace, as typically the largest per-seat line item in a company's software budget, is often where the biggest gap lives.
Why This Keeps Happening
Google does not automatically suspend or remove accounts when someone leaves. There is no integration between your HR system and Google Workspace unless you have explicitly built one. When an employee exits, IT has to manually suspend the account — and in many small and mid-size companies, that step either gets delayed, forgotten, or done inconsistently.
The second reason: suspension and billing are decoupled in a counterintuitive way. Admins who do suspend accounts often assume they have stopped the billing. They have not. Suspension blocks the user from signing in, but the license assignment remains. The billing continues until the account is deleted, or the license is explicitly removed, or the seat count is reduced in the subscription settings.
The third reason: if your company is on an Annual Plan, even deleting a user does not immediately reduce your bill. Google locks in the seat count for the duration of the annual term. You free up the seat for a new hire, but the cost does not drop until renewal — unless you actively contact Google to negotiate a mid-term reduction.
The Audit: Four Steps
Step 1 — Compare licensed seats to actual users
This is the thirty-second check that reveals whether you have a problem before you go further.
Admin Console → Billing → Subscriptions
Note the number of licensed seats. Then go to Directory → Users and count your active (non-suspended) users. If licensed seats exceed active users, you are paying for ghost seats. The size of that gap tells you how urgent the rest of this audit is.
Step 2 — Find suspended accounts with licenses
Suspended accounts are the most common source of ghost billing. Filter for them directly:
Admin Console → Directory → Users → Add a filter → User Status → Suspended
This shows every account that has been suspended. All of these accounts are still consuming a paid license unless the license has been explicitly removed or the account deleted.
To export the full list: from the Users page, click the Download button (top right of the user list) → select Comma-separated values (.csv) or export to Google Sheets. The CSV includes email, status, and organizational unit. Cross-reference against your HR system — any suspended account that corresponds to a confirmed departure is a ghost seat candidate for deletion.
Important before deleting: suspended accounts retain their data (Drive files, Gmail, calendar). Before deleting any account, ensure:
- Critical Drive files have been transferred to a current employee
- Any shared resources (calendars, shared drives) are reassigned
- Google Vault retention policies are reviewed if you have compliance requirements
Once data is handled, delete the account: click the user → More actions → Delete user.
Important 2026 change: Starting in early 2026, when a user account is deleted, their secondary calendars — including group calendars — and all their calendar events are also deleted, with no recovery option. Before deleting any account, transfer calendars as well as Drive files. Google's own help page notes: "We recommend transferring calendars before you delete users."
Step 3 — Find inactive active users
These are accounts with "Active" status that nobody has touched recently. They do not show up in the suspended filter — they look like regular users — but they may be billing for people who have left without a formal offboarding.
Admin Console → Reporting → User Reports → Accounts
This report shows per-user activity across Gmail, Drive, Meet, and other Google services, including last login date. Sort by last activity date (oldest first). Anyone with:
- No login in the past 90 days, and
- An active license assigned
is a candidate for review.
Note: this report has a data lag of up to 48 hours and historical data availability varies by edition — Business Starter retains less history than Enterprise editions.
Export this report and cross-reference the no-activity accounts against your current employee roster. Anyone not on the current HR roster who still has an active Google account is a ghost seat regardless of last login date.
Step 4 — Check your billing against the cleaned list
After steps 2 and 3, you have a clear picture of:
- Suspended accounts still consuming licenses → delete or handle data then delete
- Active accounts with no recent activity whose owners have left → suspend then delete after data transfer
- The gap between contracted seats and actual current employees
If you are on a monthly (Flexible) plan: deleting users reduces your bill in the next billing cycle. The savings are immediate once the account is gone.
If you are on an Annual Plan: deleting users frees the seat for reassignment to a new hire, but your contracted seat count and invoice stay the same until renewal. To actually reduce costs mid-term, you need to contact Google or your reseller to request a seat count reduction — and Google's standard position is that mid-term reductions are not guaranteed. Your strongest leverage for reducing the seat count is at renewal, where you can document the ghost seat periods and negotiate from a position of actual usage data.
The Archive User Option
Before deleting an account, consider whether the data needs to be retained for legal, compliance, or institutional memory reasons. Google offers Archive User licenses at a lower monthly cost than standard Workspace licenses. An archived account retains its data in a read-accessible state but the user cannot sign in.
This is useful for:
- Former employees whose files are still referenced by the team
- Compliance-regulated industries where email and document retention is required
- Accounts that can't yet be deleted because data transfer is pending
Archiving is not the same as deleting — you are still paying, just at a lower rate. If the account's data genuinely needs to be kept, archiving is the right path. If the data can be transferred and the account no longer needed, delete it and stop paying entirely.
Where This Breaks Down
This four-step audit tells you what Google Workspace shows you — it does not tell you about tools those accounts are connected to outside of Google. A ghost user in Google Workspace is also a ghost user in every SaaS tool they authorized via "Sign in with Google," and those third-party tools often keep billing independently.
Suspending or deleting the Google account does not automatically revoke OAuth tokens granted to third-party apps. Those apps continue to trust the last valid token. A properly suspended Google user can still, in some cases, access tools they connected via OAuth from a personal device until those tokens are explicitly revoked.
After completing this audit, run the OAuth audit from Article 2 of this series — Admin Console → Reporting → Audit and investigation → OAuth log events — filtered by the users you've suspended or deleted, to catch the downstream tool connections that the Google suspension does not automatically sever.
How Terrier Handles This
Terrier cross-references your Google Workspace directory — active users, suspended users, last activity — against your corporate card transactions to surface the full ghost seat picture: not just which Google accounts are inactive, but which SaaS tools are still billing for those same email addresses after the Google account was suspended or deleted.
It reads directory metadata and transaction amounts. It does not access Drive files, Gmail content, or any private user data.
terrierops.com — free to scan your first month.
One Thing You Can Do Right Now
Go to Admin Console → Billing → Subscriptions. Note your licensed seat count. Then go to Directory → Users → Add a filter → User Status → Suspended. Count the suspended accounts. If you have any — even one — you are paying for a seat nobody can use. That is your immediate action: decide whether the data needs to be retained (Archive license) or can be deleted (stop billing entirely). Five minutes, measurable savings.
Frequently Asked Questions
Q: Does suspending a Google Workspace user stop the billing?
No — and this is the most common misconception in Google Workspace administration. Suspending a user blocks them from signing in but leaves the license assigned and the billing active. To stop billing for a suspended account, you need to either delete the account entirely, or (for accounts where data retention matters) downgrade to a Google Archive User license. Simply suspending without the follow-up step means you are paying full price for an account nobody can access.
Q: How do I find users who haven't logged in recently?
Go to Admin Console → Reporting → User Reports → Accounts. This shows per-user last activity across Gmail, Drive, and Meet. Sort by last activity date to find the oldest. Note that this report has a 48-hour data lag and historical data availability varies by edition — Business Starter has less history than Enterprise editions. For more precise last-login timestamps, the Admin SDK Directory API's lastLoginTime field gives exact timestamps, or the open-source GAM command-line tool can pull this data without requiring API code.
Q: What is the difference between suspending and deleting a Google Workspace user?
Suspending blocks sign-in but retains all data and keeps the license billing. Deleting removes the account and its associated data (Google gives a 20-day recovery window before permanent deletion) and frees the seat — but on Annual Plans, freeing the seat does not reduce your invoice until renewal. Suspended is a temporary hold; deleted is permanent. For departed employees with no data worth retaining, deletion is the right outcome. For employees whose data needs to stay accessible, an Archive User license between suspension and eventual deletion is the middle path.
Q: Can I reduce my Google Workspace seat count mid-contract?
If you are on a monthly (Flexible) plan: yes, reducing users reduces your next bill. If you are on an Annual Plan: your contracted seat count is locked for the term. Deleting users frees those seats for reassignment to new hires but does not reduce your invoice. To actually lower your Annual Plan seat count mid-term, you need to contact Google or your reseller and request a reduction — Google's standard position is that this is not guaranteed, though account managers may accommodate it for customers with documented usage gaps. Your strongest position is at renewal, where actual usage data gives you negotiating leverage.
Q: What are Archive User licenses?
Archive User licenses are a lower-cost Google Workspace option for accounts that need to retain data but no longer require active access. The archived user cannot sign in but their Drive files, Gmail, and Calendar remain accessible to admins and delegated users. Archive licenses typically range from approximately $2 to $7/user/month depending on your Google Workspace tier — significantly cheaper than a full active license.
One critical nuance: if you delete a user account entirely, Google Vault data is permanently removed along with the account — even if Vault holds are active. To keep former employee data subject to Vault retention rules, you must assign an Archive User license rather than deleting the account. Archive licenses are not available for self-serve purchase on all plans — contact Google or your reseller for current pricing and availability. They are most useful for compliance-regulated organizations that must retain former employee records for a defined period, or for teams that frequently reference files created by former employees.
Q: How often should I audit Google Workspace licenses?
At minimum, within 48 hours of every employee departure — that is when the ghost seat clock starts. Beyond that, a quarterly audit using Steps 1-3 above catches anything that slipped through. Companies with turnover above 15% annually, or with contractors and part-time staff cycling frequently, benefit from a monthly check of the suspended user list specifically. The five-minute billing check (Step 1) is worth doing every billing cycle.
Q: What happens to data when I delete a Google Workspace user?
Deleting a Google Workspace user initiates a 20-day recovery window during which the account can be restored from Directory → Users → Add a filter → Recently deleted. After 20 days, deletion is permanent. Before deleting: transfer ownership of critical Drive files (you will be prompted during the deletion flow), transfer calendars (starting in early 2026, secondary calendars and events are deleted along with the account), and confirm any Google Vault compliance holds are handled. Critical: deleting the account also permanently removes all associated Vault data, even if Vault is enabled — if you need to retain data for compliance, use an Archive User license instead of deleting.
Terrier is a SaaS spend optimization platform for Google Workspace companies. It identifies ghost seats, shadow AI, and unused software subscriptions in minutes without accessing email content or private user data. terrierops.com