Integration guide

Google Workspace directory and vendor discovery

Import Google Workspace directory users into Personnel and discover third-party applications through read-only access. The integration does not modify your Google Workspace data.

Overview

Your directory remains the source of truth.

An authorized administrator connects Google Workspace from the signed-in Integrations page and reviews the requested permissions on Google's consent screen. After consent, Sythe Labs imports directory users as organization-scoped Personnel and lists authorized third-party applications in the organization-scoped Vendors discovery view.

Open the signed-in Integrations page
Data access

Read-only Google Admin access.

The authorization requests basic Google account identity, the authorizing administrator's Google account email address, read-only access to Google Workspace directory user records, and read-only access to Google Workspace domain usage reports for authorized applications. It does not create, update, or delete data in Google Workspace. Sythe Labs also receives the Google Workspace customer ID needed to bind the correct tenant.

Imported Personnel fields
  • Stable Google directory identifier
  • Primary email address and full name
  • Job title, department, and manager relationship
  • Account suspension and archive status
  • Mailbox setup status and profile photo URL
Compliance evaluation fields
  • Administrator and delegated administrator status
  • 2-Step Verification enrollment and enforcement status
  • Organizational unit path
Synchronization and storage

A bounded, organization-scoped sync.

Synchronization

The first sync is queued after authorization. The integration then synchronizes daily at midnight UTC, and an authorized administrator can choose Sync now. Every request to Google is read-only.

Storage and use

Sythe Labs stores the authorization credential in encrypted form. Imported fields are stored as Personnel and related compliance evidence. Authorized-application client identifiers, names, report dates, and account counts are stored as vendor discovery records. Access is organization-scoped.

Disconnect and deletion

Disconnect stops access. Deletion is separate.

Choosing Disconnect removes the saved Google authorization from Sythe Labs and stops scheduled synchronization. Existing imported Personnel remain in the Sythe Labs platform and no longer receive Google Workspace directory updates. Connector-discovered applications leave the active Discovery view. Reconnecting and completing a sync can restore them.

To delete imported Personnel, submit a request through the support page and select Other. Imported Personnel are also deleted when the tenant is deleted through the Sythe Labs platform.

Google Limited Use

Use is limited to the disclosed integration purpose.

The use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

More information