Exercise 6: Edit user attributes

Exercise directions: Part 1

Change Sam’s profile name

Step 1

If you are not already signed in, sign in to your domain as the Administrator at admin.google.com.

Step 2

From the main menu, navigate to Directory, then click Users.

Step 3

In the Users list, hover over Samantha M and click Rename user at the end of the row.

Step 4

Change the First name to Sam.

Step 5

Click UPDATE USER.

Step 6

Click DONE.

Notes

After you change a profile name, the new profile name appears in messages the user sends (unless they change their own Gmail settings), calendar invites, shared docs and other Google services, and your company's searchable Directory.

Important: A user's previous profile name isn't private and might be visible to other users in some circumstances.

Exercise directions: Part 2

Change Tim's password

Step 1

From the main menu, click Directory, then click Users.

Step 2

Hover over Tim L in the user list and click the Reset password option that appears.

Step 3

In the Reset password dialog box, select Create password and enter the password hellohello10.

Notes

1. Users can change or reset their existing password if they know their existing password and can successfully sign in. For more information no this topic, please explore the Help Center article titled Change or reset your password.

2. If the administrator has enabled non-admin password recovery, users can reset their password without administrator assistance. See the Help Center article titled Set up password recovery for users for more detail. Please note that this feature is not available for customers using single sign-on (SSO). In those cases, password policies must be managed at the Identity Provider (IdP) level.

3. Administrators should check the Help Center for considerations regarding user off-boarding and hijacked accounts before enabling password recovery for users.

Exercise directions: Part 3

Part 1: Update Timmy’s primary email address and add an email alias

Step 1

From the main menu, navigate to Directory, then click Users.

Step 2

In the Users list, hover over Tim L and click Rename user. 

Step 3

Under Primary email, enter timothy.l.

Step 4

Click Update user.

Note: Renaming the primary email address automatically preserves the old address as an email alias to prevent delivery failures.

Part 2: Add an email alias to Timmy’s account

Step 1

From the main menu, navigate to Directory, then click Users.

Step 2

Click the name Tim L in the user list. On the user's profile page, locate and click the User information card/section.

Step 3

Click the Alternate email addresses (email alias) section.

Step 4

In the first Alternate email text field, enter Timmy, then click SAVE.

Exercise directions: Part 4

Part 1: Monitor password strength and 2-Step Verification

Step 1

From the main menu, navigate to Reporting, then click Reports, User Reports and Accounts. 

From here, explore these columns for each user:

• 2-Step verification enrollment

• 2-Step verification enforcement

• Password length compliance

• Password strength

• Less secure apps access

Part 2: Enforce a strong password and 2-Step Verification

Step 1

From the main menu, navigate to Security, then click Authentication, and then click Password management.

Step 2

To enforce the new password requirements for all users, select the top-level organizational unit.

Step 3

In the Strength section, check the Enforce strong password box.

Step 4

In the Length section, enter a minimum length of 10 and a maximum length of 25 for your users' passwords.

Note: A maximum length of up to 100 characters can be set to accommodate passphrases.

Step 5

To force users to change their password, check the Enforce password policy at next sign-in box. If you don’t check this option, users with weak passwords can access your organization’s Google services until they decide to change their password.

Step 6

In the Expiration section, select 60 days.

Note: If a user account has added a delegated user, the delegated user can still access the account, even if the account password has expired. To prevent ongoing access, either reset the account password or remove the delegated user.

Step 7

Click SAVE.

Step 8

Return to the Authentication menu and click 2-step verification.

Step 9

Set Enforcement to "On" to require all users to use a second factor (like a passkey or Google Prompt), which provides significantly higher protection than a password alone.

Step 10

Click SAVE.

Step 11

Send an email to the organization on the need to set up 2-Step Verification.