I agree with many of your complaints, this article[1] from Latacora comes to mind. However, a lot of the "good stuff" that fixes some of these problems already

I agree with many of your complaints, this article[1] from Latacora comes to mind. However, a lot of the "good stuff" that fixes some of these problems already exist and are fully implemented in GSuite, they just happen to be locked behind the priciest service tier[2]. I've had many frustrations like these, because if you're on the lower tiers of GSuite you pretty much have to DIY using their API. But, if you choose to bite the bullet and pay up, your life will be way better in many of these aspects. Also other things about the "GSuite way" just diverge philosophically from the standard IT operation playbooks, if you haven't already, I suggest giving the BeyondCorp paper[3] a read. Most of their IdP-related products build on top of these concepts, rather than plain "directory-management style" ITOps. [1] https://latacora.micro.blog/gripes-with-google/ https://latacora.micro.blog/gripes-with-google/ [2] https://gsuite.google.com/pricing.html https://gsuite.google.com/pricing.html [3] https://research.google/pubs/pub43231/ https://research.google/pubs/pub43231/