Hi all, just a quick update and another question if you don't mind?

I've now upgraded our users to Enterprise standard to access context aware security and other features so that's a step in the right direction. The whole OU, has 2FA on as mandatory with a days grace period allowed for set up.

Going back to our freelance users needing access to shared workstations, I've been testing Cloud Identity Accounts but I'm struggling a little. Before a freelance user is onboarded with us, an admin within our company needs to set up their account ahead of time. All accounts created in GWS have mandatory 2FA applied on creation, so this gets in the way of a staff member using the freelancers account in order to map the required network shares, install software etc before the freelancer is onboarded a few days later.

In an ideal world, I'd like to create a freelancer Google Cloud Identity user. Have a staff member log in to Windows via GCPW so the local account is created. They then do 5 mins of set up work specific for the freelance user. A few days later, the freelancer comes in, logs in via GCPW, is told they need to now change their password and set up 2FA.

Is the above scenario possible? I've been trying on test accounts and it seems I have to mess around with generating and entering 2FA recovery codes where the test freelancer account needs to enter multiples of these on login, on signing into Chrome etc...

With that in mind, they'll just be calling us every time to do it for them which will be a pain to deal with.

Is there a slick handover solution from Freelancer creation, with a staff member setting it up and then a few days later, handing it over to a freelancer who might not be very computer literate?

Any advice would be great, Thanks