Guide · Agent skill
How to use the IT Administrator Persona agent skill (persona-it-admin)
Updated · written with AI from the project's own documentation and checked against our catalogue data
The IT Administrator Persona is an agent skill from the googleworkspace/cli project that tells an AI agent to act as an IT administrator for a Google Workspace organization. It covers daily standup reporting, checking for suspicious logins, reviewing audit logs and tightening Drive sharing rules. This guide explains what the skill does, how to install it, how to ask for its work, and what you need in place before you let it touch your tenant.
IT Administrator Personagoogleworkspace/cli · Apache-2.0 Download the skill Quick start
- 1Install gws. Install the gws command-line tool so the binary named gws is available on your system.
- 2Set up authentication. Configure gws with a service account or user credentials that have Workspace administrator rights.
- 3Verify access. Run gws auth status to confirm your permissions are working.
- 4Download the skill ZIP. Get the persona-it-admin ZIP from the directory page.
- 5Unzip into the skills folder. Extract it into ~/.claude/skills/ or a project's .claude/skills/ folder, or upload it under Settings → Capabilities → Skills.
- 6Ask for a standup or a security check. Make a plain request such as reviewing pending IT requests or checking login activity, and ask for dry runs before any change.
What is an agent skill, and what does this one do?
An agent skill is a folder containing a SKILL.md file that gives an AI agent instructions for a specific job. When the agent loads the skill, it follows those instructions as a role. This skill is named persona-it-admin and is described as: administer IT, monitor security and configure Workspace.
The file asks the agent to start each day with the command gws workflow +standup-report to review pending IT requests, to watch for suspicious login activity and review audit logs, and to configure Drive sharing policies to enforce organizational security. The SKILL.md is short and high-level, so the agent will need to work out many specifics on its own.
gws workflow +standup-reportWhat you need before you install
The skill depends on three things. First, the gws command-line tool, whose binary is named gws. Second, a Google Workspace account with administrator rights; without them the commands will fail or need elevated permissions. Third, authentication configured for gws, using either a service account or user credentials. The skill also loads three utility skills: gws-gmail, gws-drive and gws-calendar.
- gws command-line tool (binary named gws)
- Google Workspace account with administrator rights
- Authentication configured for gws (service account or user credentials)
- Skills: gws-gmail, gws-drive, gws-calendar
Install the persona-it-admin skill
Download the ZIP file for the skill from the directory page. Unzip it into your personal skills folder at ~/.claude/skills/, or into a project's .claude/skills/ folder if you want the skill available only in that project.
If you use the Claude apps instead, upload the skill under Settings, then Capabilities, then Skills.
- Personal install: unzip into ~/.claude/skills/
- Project install: unzip into the project's .claude/skills/ folder
- Claude apps: Settings → Capabilities → Skills, then upload
Check that gws is ready
Before asking the agent for anything, confirm that the gws tool is installed and that its authentication works. The skill's own tips recommend running gws auth status regularly to verify service account permissions. If that check fails, the agent's Workspace commands will fail too.
gws auth statusHow to trigger the skill with natural requests
You do not need a special command to use the skill. Describe the IT task in plain language and mention the Workspace context. The agent should load the persona and its utility skills, then choose the matching gws commands. Good requests name a goal, a scope and a time frame.
Examples of requests that fit the skill:
- Run my morning IT standup and tell me which requests are pending.
- Look for suspicious login activity in the last 24 hours and summarise anything unusual.
- Review recent audit log entries for admin changes and list them.
- Check our Drive sharing settings against our policy and propose changes, but do not apply them yet.
- Preview any bulk change with a dry run before you make it.
Safety: scripts, network and bulk changes
This skill runs scripts and uses the network, because it reaches your Workspace data through gws. The source does not describe how the scoping of admin permissions works, so limit the account and credentials you give gws to what you intend the agent to do.
The most important rule in the source is to always use --dry-run before bulk operations. The agent may still change sharing or account settings, and one mistake can affect many users. Test in a non-production tenant or review each proposed change before it runs.
- Always add --dry-run to bulk operations and read the output first.
- Do not run this against a production tenant without a review step.
- Use a dedicated account with only the rights you need, rather than a broad super admin login.
- Keep the authentication check (gws auth status) in your routine.
What people use it for
- Starting the day with a standup report of pending IT requests using gws workflow +standup-report.
- Scanning for suspicious login activity and reviewing audit logs for unusual admin actions.
- Reviewing Drive sharing settings against an internal policy checklist before making changes.
- Building an internal admin assistant for a team that already uses gws and these utility skills.
Frequently asked questions
Is the IT Administrator Persona skill free?
The project is published under the Apache-2.0 licence, as listed on this page. The source does not mention pricing, so check the googleworkspace/cli project for licence terms. You still need a Google Workspace account with administrator rights to use it.
What do I need to run the persona-it-admin skill?
You need the gws command-line tool (binary named gws), a Google Workspace account with administrator rights, authentication set up for gws using a service account or user credentials, and the gws-gmail, gws-drive and gws-calendar skills.
How do I install an agent skill like this one?
Download the ZIP from this page and unzip it into ~/.claude/skills/ for personal use, or into a project's .claude/skills/ folder. In the Claude apps, you can upload it under Settings → Capabilities → Skills.
Why does the agent fail when I ask for a standup report?
The most likely cause is that gws is not installed or authentication is not configured. Run gws auth status to check. The commands also need an account with administrator rights, so a user without those rights will see failures.
Is it safe to let the agent change Drive sharing settings?
The source warns that the agent may still change sharing or account settings and that mistakes can affect many users. Use --dry-run before bulk operations, review proposed changes, and test in a non-production tenant first.
How does this compare with doing IT checks by hand or with other admin tools?
The skill is a role-playing persona that drives gws commands and depends on other skills. The source gives only high-level instructions, so it is a checklist-style starting point rather than a complete admin procedure. Compare it with your own runbooks or the Google Workspace admin console before relying on it.
New agent skills, repos and AI tools — every week
The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.
Our verdict
Use this skill if you are a Workspace administrator who already runs gws and wants an agent to help with standups, login checks and Drive sharing reviews. Skip it if you lack admin rights, if you want detailed procedures, or if you need to make bulk changes in production without a dry-run and review process.
Download the skill