OU Explorer
Your Google Workspace organizational units as a tree, with device and user counts on every node and the devices and users inside one click away. Read-only on the Free plan.
What it does
The Google Admin console shows organizational units one level at a time and gives no count until you open the device list and filter it. For a district with a few hundred OUs, answering “how many Chromebooks are still under Unassigned at the middle school?” is several minutes of clicking.
OU Explorer reads your OU tree, devices and users through the Admin SDK and shows them as one tree. Each node carries its device count and user count. Expand a node to see its children; open it to see the devices and users inside, with their assignment state. The Chromebook rules UserAuthGuard manages for an OU are shown alongside, so you can see what applies where.
Data comes from UserAuthGuard’s sync with Google: a full sync runs nightly and you can refresh on demand. On the Free plan the explorer is read-only. Moving devices between OUs, in bulk or one at a time, is part of Bulk Assignment on the Enterprise plan.
- ✓ The whole tree, with countsDevices and users per OU, including children, so a building or grade total is one glance rather than a filtered export.
- ✓ Drill to the devicesOpen any OU to list its devices with serial, model, annotated user and last sync, and its users with their assigned devices.
- ✓ Pairs with the assignment-gap reportDevices with no owner and students with no device are listed in the gap report, also on the Free plan, and each one opens in its OU here.
- ✓ Rules in contextWhere UserAuthGuard manages a rule on an OU (school Wi-Fi only, overnight lock, sign-in screen), it is shown on that node.
- ✓ No device capThe Free plan reads your entire Workspace, however many devices and OUs it holds.
Requires
- Google Workspace for Education with UserAuthGuard authorized to read organizational units, Chrome devices and users.
- Nothing else. OU Explorer is part of the Free plan.
Does not
- Write to Google on the Free plan. Creating, renaming or deleting OUs, and moving devices or users between them, are Enterprise plan actions.
- Update in real time. Counts reflect the last sync; a full sync runs nightly and you can refresh on demand.
- Show policies you set directly in Google Admin. It shows the rules UserAuthGuard manages; the rest stays in the console.
Where it fits
Before year-end collection
Count devices per grade or building, and see which OUs still hold devices with no owner, before the first cart is wheeled in.
Reorganizing the tree
Setting up a new building or flattening an old structure is easier when you can see every node and what it holds. Plan the moves here, then make them in Bulk Assignment.
Why is this device getting the wrong policy?
Look the device up and see which OU it is actually in and which UserAuthGuard rules apply there. Most policy mysteries are a device in the wrong place.
Frequently asked questions
How current is the data?
A full sync with Google runs nightly, and you can trigger a refresh from the dashboard. Changes you make in the Google Admin console appear after the next sync. It is not a live view.
Can I move devices between OUs from here?
Not on the Free plan, which is read-only. On the Enterprise plan, Bulk Assignment moves devices between OUs individually or in bulk, with a dry run before anything is written.
Is there a limit on OUs or devices?
No. The Free plan has no device cap. OU Explorer reads whatever your Google Workspace holds.
What does UserAuthGuard need permission to do?
To read organizational units, Chrome devices and users through the Admin SDK. On the Free plan nothing is written back to Google.
See your whole Workspace, free
OU Explorer is part of the Free plan: every OU, device and user, read-only, with no device cap and no credit card.