ºÚÁϺ£½Ç91Èë¿Ú

The final step in creating a secure and consistent connection between ºÚÁϺ£½Ç91Èë¿Ú and Google Workspace is syncing data between the two platforms. This article outlines the steps you need to take to import or export data between ºÚÁϺ£½Ç91Èë¿Ú and Google Workspace.

Prerequisites

• A ºÚÁϺ£½Ç91Èë¿Ú administrator account
• ºÚÁϺ£½Ç91Èë¿Ú Device Package or higher
• A Google Workspace sync authorized and active in ºÚÁϺ£½Ç91Èë¿Ú
• A Google user account with the following roles:
  • Groups Admin (pre-built role)
  • User management Admin (pre-built role)
  • Custom role with ‘Domain Management’ admin API privileges
• You have read through the considerations for Get Started: Google Workspace Integration
• You have reviewed the attribute considerations and configured your desired user attributes per Configure the Google Workspace Integration
• An alternative method has been setup for 2-Step Verification, like a phone number

Considerations

• Inactive users in Google will not be created in ºÚÁϺ£½Ç91Èë¿Ú

Importing Google Workspace Users

Importing users allows you to:

• Conveniently create pre-existing Google accounts in ºÚÁϺ£½Ç91Èë¿Ú, either manually or automatically 
• Continuously sync changes from Google Workspace to ºÚÁϺ£½Ç91Èë¿Ú when user identities are being managed in Google
• Import one-off changes made in Google Workspace directly when user identities are being managed in ºÚÁϺ£½Ç91Èë¿Ú

To manually import users

1. Log in to the .
2. Navigate to DIRECTORY INTEGRATIONS > Cloud Directories.
3. Select the integration you authorized when completing the steps in Get Started: Google Workspace Integration. 
4. Navigate to the Details tab and scroll down to the Attribute mapping and settings section.
5. Confirm your attribute mapping and settings (per Configure the Google Workspace Integration) to ensure you are importing and exporting the proper attributes.

5. Scroll back up to the Import Users section and click Start Manual Import.
6. Select one of the following:
   • New users and user updates
   • New users only
   • User updates only
   • Select specific new users to import.
7. Click Import.
8. You will receive an email with a link to the import results. If you imported fewer than 100 users, you will also see the results in the last step of the import flow.

To enable automatic imports and updates

After doing your initial manual import, you can enable automatic (hourly) updates from Google.

1. Log in to the .
2. Navigate to DIRECTORY INTEGRATIONS > Cloud Directories.
3. Select the integration you authorized. 
4. Navigate to Details > Import Users and toggle on Enable automatic imports of users and user updates from Google

5. Optionally, select Receive summary email after each scheduled import to receive an email after each import is complete.
6. Click Save.

Associating ºÚÁϺ£½Ç91Èë¿Ú users with Google Workspace

After you authorize syncing for your Google Workspace directory, you can specify users and groups to manage from ºÚÁϺ£½Ç91Èë¿Ú through the sync by associating them to that Google Workspace directory. Users can be given access to a Google Workspace directory either directly or through a user group.

Prerequisites

• An authorized and activated Google Workspace directory.
• Ensure that any users or groups, either preexisting or new, follow Google's .

Considerations

• When you remove a user from a Google Workspace directory in ºÚÁϺ£½Ç91Èë¿Ú, either directly or by removing them from all User Groups that disconnects them from the Google Workspace directory, the user is immediately suspended in Google Workspace and any existing Google sessions expire. After they’re disconnected, the user is unable to log in to any Google Workspace resources that are connected to that directory.
• Don’t add a Google Workspace directory more than once in ºÚÁϺ£½Ç91Èë¿Ú. If you authorize sync for the same Google Workspace directory more than once, users that are connected to multiple instances of the same Google Workspace directory in ºÚÁϺ£½Ç91Èë¿Ú could be suspended if you remove them from one of the instances. You can avoid this by deactivating the sync for duplicate Google Workspace directories. 

To connect ºÚÁϺ£½Ç91Èë¿Ú users to a Google Workspace directory

From User Management > Users

1. Log in to the .
2. Navigate to USER MANAGEMENT > Users.
3. Select a user to view their details.
4. Select the Directories tab.
5. Select the Google Workspace directory to which you want to connect the user.
6. Click Save User. Synchronization will be initiated.
    

From User Management > User Groups

1. Log in to the .
2. Navigate to USER MANAGEMENT > User Groups.
3. Select a user group to view their details.
4. Select the Directories tab
5. Select the Google Workspace directory to which you want users in the user group to be synced and have access.
6. Select the Users tab.
7. Check the box next to each user you want added to the group. 
8. Click Save Group. Synchronization is initiated.
   

Post connection behavior

After you connect a user to a Google Workspace directory

• If the user didn’t previously exist in Google Workspace and the email sent as the PrimaryEmail matches a Google Workspace directory domain, a new, active user account is provisioned to Google Workspace 

• If the user resets their ºÚÁϺ£½Ç91Èë¿Ú password, it's synced to Google Workspace. When set, existing sessions to Google Workspace apps expire, and the user must log in again.
• After you connect a user to a Google Workspace directory, the flow differs slightly for staged and active users:
  • Staged user flow: A staged user is a user in a â€˜staged' user state with a password status of either ‘password pending' or 'active’. 
    • Staged users who do not already exist in the Google Workspace directory will not have access to Google Workspace until you change their user state to active and a password is set in ºÚÁϺ£½Ç91Èë¿Ú. They will not receive welcome or activation emails until they are in an 'active’ user state.
    • Staged users who already exist in the Google Workspace directory will remain active in that directory and will continue to have access. See Manage User States for more information about user states.
  • Active user flow: An active user is a user in an 'active' user state, has a password, and that password status is set to 'active'. After you add an active user to your Google Workspace directory in ºÚÁϺ£½Ç91Èë¿Ú, the user receives an email that tells them which directory they’ve been added to and to synchronize their password by logging in to their User Portal.

After you connect a group to a Google Workspace Directory

• If you enabled Google Workspace group management  and no distribution group with a matching email exists in Google Workspace, a distribution group is created in Google Workspace, and the ºÚÁϺ£½Ç91Èë¿Ú group name and description are synced to the new Google Workspace distribution group.
• If you changed a user group’s membership in ºÚÁϺ£½Ç91Èë¿Ú, the changes are synced to Google.