Suspend user access to Shared Drive but not to My Drive

[JosefP]

Hi,

we need to temporarily suspend specific user access to all Google Workspace apps except for Gmail and My Drive. There are some internal policy issues that need to be resolved before user can regain regular access again. We are on Google Workspace Nonprofit licence.
So I created Organisational Unit where all apps are disabled. However I was unable to find option that would allow me to disable only Shared Drives, but still allow user to use My Drive. There is always an option to remove user from all Shared Drives and Groups that grants access manualy, but that would be time demanding task, that I would like to avoid if possible.

Is there any elegant way how to acomplish all of this that Iam not aware of?
thanks in advance for any advice

[KAM · Accepted solution]

@JosefP unfortunately that sounds like expected behavior and the OU is what I would do.  You can only stop them from creating new shared drives.  https://support.google.com/a/answer/7337635?hl=en

I would look at GAM as something to help you further: https://www.ditoweb.com/2021/03/using-open-source-google-apps-manager-to-administer-google-workspace...

-KAM

[JosefP]

@KAM thanks
I moved user to OU and just removed from all groups and from all shared drives. Found no files shared directly to the user. So everything should be fine. 
I dont think this will ever happen again with size of our our company.