Backupify/Datto SaaS Protection for G Suite 1.0: How do I manage Google Vault Former Employees users?


Any domains with Google Vault enabled automatically generate 'vfe' (Vault Former Employees) users. When a customer needs to use Vault to store an ex-Google Apps user's data, they move the user to an OU called 'Former Employees'. This creates a new Google Apps user called '', for example... the actual user is then deleted or suspended.

On our end, we also attempt to back up The backup fails (we backup no data), and the user is marked as disabled (or Archived, in the application), because the 'Former Employees' OU is seen as disabled. The customer has no option to enable the Former Employees OU on the Google Apps end because it does appear with the rest of the Google Apps OU structure.

But, the difference is that we have the backed up data covered becomes an Archived user as well.

Most customers do not want these 'vfe' users backed up (because the data is already archived under the original account). As a workaround, we would recommend turning off (or having you turn off) the 'Former Employees' OU on the domain's auto-add settings, AND also bulk delete all of the 'vfe' users (Support can assist with either of those actions).

As a side note, for example, you may see that is not in the database as an Archived user, but you do see That is usually because they were deleted from Google Apps before SaaS Protection/Backupify was set up (but the user still existed in the Former Employees OU).

To contact Backupify/Datto SaaS Protection support, click here to submit a Support Request, or click here for more contact options.

Was this article helpful?

0 out of 0 found this helpful

You must sign in before voting on this article.

Want to talk about it? Have a feature request?

Head on over to our Datto Community Forum or the Datto Community Online.

For more Business Management resources, see the Datto RMM Online Help and the Autotask PSA Online Help .

Still have questions? Get live help.

Datto Homepage