What admin rights will I need to set up the Google Workspace sync?

Find out which Google Workspace admin privileges you will need to authorize synchronization.


To authorize the synchronization with Google Workspace, you will need a Google account with the following Admin API Privileges:

  • Users - Read
  • Groups - Read

  • Organizational Units - Read


The Super Admin role includes all of the above as do a combination of the User Management and Groups Admin roles. Alternatively you could create an Admin Role specifically for the sync covering the privileges specified and assign that to the authorizing user.


Please note that the above also applies with Service Account authentication as you will have to provide a Delegated User Email. This is the email address of the user that the Service Account will impersonate when accessing the Google Directory API and will not work without sufficient privileges/roles assigned.

Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.