Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 9.2.1 - Administration Guide for Connecting to Google Workspace

Table of Contents

Mapping a Google Workspace environment in One Identity Manager

Architecture overview One Identity Manager users for managing a Google Workspace customer Configuration parameters

Synchronizing a Google Workspace customer

Setting up initial synchronization of a Google Workspace customer

Users and permissions for synchronizing with a Google Workspace customer

Setting up the necessary permissions for accessing the Google Workspace customer

Setting up the Google Workspace synchronization server

System requirements for the Google Workspace synchronization server Installing the One Identity Manager Service

Creating a synchronization project for initial synchronization of a Google Workspace customer

Information required for setting up a synchronization project Creating an initial synchronization project for a Google Workspace customer

Configuring the synchronization log

Customizing the synchronization configuration for Google Workspace

Configuring synchronization with Google Workspace customers Configuring synchronization of different Google Workspace customers Updating schemas Speeding up synchronization with revision filtering Advanced settings for the system connection to Google Workspace

Editing connection parameters in the variable set Editing target system connection properties

Configuring the provisioning of memberships Configuring single object synchronization Accelerating provisioning and single object synchronization

Running synchronization

Starting synchronization Displaying synchronization results Deactivating synchronization Synchronizing single objects

Tasks following synchronization

Post-processing outstanding objects Adding custom tables to the target system synchronization Managing Google Workspace user accounts through account definitions

Troubleshooting Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)

Managing Google Workspace user accounts and identities

Account definitions for Google Workspace user accounts

Creating account definitions Editing account definitions Main data for account definitions Editing manage levels Creating manage levels Assigning manage levels to account definitions Main data for manage levels Creating mapping rules for IT operating data Entering IT operating data Modify IT operating data Assigning Google Workspace account definitions to identities

Assigning Google Workspace account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all identities Assigning account definitions directly to identities Assigning account definitions to system roles Adding account definitions in the IT Shop

Assigning Google Workspace account definitions to target systems Deleting Google Workspace account definitions

Assigning identities automatically to Google Workspace user accounts

Editing search criteria for automatic identity assignment Finding identities and directly assigning them to user accounts Changing the manage level in Google Workspace user accounts Assigning account definitions to linked user accounts

Manually linking identities to Google Workspace user accounts Supported user account types

Default user accounts Administrative user accounts

Providing administrative user accounts for one identity Providing administrative user accounts for several people

Privileged user accounts

Specifying deferred deletion for Google Workspace user accounts

Login credentials for Google Workspace user accounts

Password policies for Google Workspace user accounts

Predefined password policies Using password policies Editing password policies Creating password policies General main data of password policies Policy settings Character classes for passwords Custom scripts for password requirements

Checking passwords with a script Generating passwords with a script

Editing the excluded list for passwords Checking passwords Testing the generation of passwords

Initial password for new Google Workspace user accounts Email notifications about login data

Managing Google Workspace entitlement assignments

Assigning Google Workspace entitlements to user accounts in One Identity Manager

Prerequisites for indirect assignment of Google Workspace entitlements to Google Workspace user accounts Assigning Google Workspace entitlements to departments, cost centers, and locations Assigning Google Workspace entitlements to business roles Adding Google Workspace entitlements to system roles Adding Google Workspace entitlements to the IT Shop Assigning Google Workspace user accounts directly to an entitlement Assigning Google Workspace entitlements directly to a user account Assigning Google Workspace groups directly to a customer Assigning Google Workspace customers directly to a group

Effectiveness of Google Workspace entitlement assignments Inheritance of Google Workspace entitlements based on categories Assigning Google Workspace groups to an external user Assigning external users to a Google Workspace group Overview of all assignments

Mapping Google Workspace objects in One Identity Manager

Google Workspace customers

Creating Google Workspace customers Editing main data of Google Workspace customers General main data of Google Workspace customers Google Workspace customer address data Defining categories for the inheritance of Google Workspace entitlements Additional tasks for managing Google Workspace customers

Displaying the Google Workspace customer overview Editing the synchronization project for a Google Workspace customer

Google Workspace user accounts

Creating Google Workspace user accounts Editing main data of Google Workspace user accounts General main data of Google Workspace user accounts Password data for Google Workspace user accounts Phone numbers for Google Workspace user accounts Addresses for Google Workspace user accounts Email addresses for Google Workspace user accounts External IDs for Google Workspace user accounts Instant messenger data for Google Workspace user accounts User details for Google Workspace user accounts Relationships of Google Workspace user accounts Websites of Google Workspace user accounts Additional tasks for managing Google Workspace user accounts

Displaying the Google Workspace user account overview Assigning extended properties to Google Workspace user accounts Moving Google Workspace user accounts to a different organization

Locking Google Workspace user accounts Deleting and restoring Google Workspace user accounts Transferring user data to a different Google Workspace user account

Google Workspace groups

Creating Google Workspace groups Entering main data of Google Workspace groups General main data of Google Workspace groups Additional settings for Google Workspace groups Additional tasks for managing Google Workspace groups

Displaying the Google Workspace group overview Assigning extended properties to Google Workspace groups Assigning group managers to Google Workspace groups Assigning group owners to Google Workspace groups Assigning Google Workspace groups to Google Workspace groups

Deleting Google Workspace groups

Google Workspace products and SKUs

Editing main data of Google Workspace products and SKUs General main data of Google Workspace products and SKUs Additional tasks for managing Google Workspace products and SKUs

Displaying the Google Workspace products and SKUs overview Assigning extended properties to Google Workspace products and SKUs

Google Workspace organizations

Creating Google Workspace organizations Editing main data of Google Workspace organizations General main data of Google Workspace organizations Additional tasks for managing Google Workspace organizations

Displaying the Google Workspace organizations overview Moving Google Workspace organizations

Deleting Google Workspace organizations

Google Workspace domains Google Workspace domain aliases Google Workspace admin roles

Creating Google Workspace admin roles Editing main data of Google Workspace admin roles General main data of Google Workspace admin roles Additional tasks for managing Google Workspace admin roles

Overview of Google Workspace admin roles Assigning admin privileges to Google Workspace admin roles

Deleting Google Workspace admin roles

Google Workspace admin privileges

Display main data of Google Workspace admin privileges Additional tasks for managing Google Workspace admin privileges

Overview of Google Workspace admin privileges Assigning Google Workspace admin privileges to admin roles

Google Workspace admin role assignments

Creating Google Workspace admin role assignments Additional tasks for managing Google Workspace admin role assignments

Overview of Google Workspace admin role assignments Assigning extended properties to Google Workspace admin role assignments

Deleting Google Workspace admin role assignments

Google Workspace external email addresses

Assigning Google Workspace external email addresses to customers Additional tasks for managing Google Workspace external email addresses

Displaying the Google Workspace external email address overview

Deleting Google Workspace external email addresses

Reports about Google Workspace objects

Handling of Google Workspace objects in the Web Portal Basic configuration data for managing a Google Workspace customer

Job server for Google Workspace-specific process handling

Editing Google Workspace Job servers General main data of Job servers Specifying server functions

Target system managers for Google Workspace customers

Troubleshooting the connection to a Google Workspace customer

Newly added Google Workspace user accounts are marked as outstanding

Configuration parameters for managing a Google Workspace environment Default project template for Google Workspace API scopes for the service account Processing methods of Google Workspace system objects Special features in the assignment of Google Workspace groups

Additional tasks for managing Google Workspace customers

After you have entered the main data, you can run the following tasks.

Task	Theme
Google Workspace customers overview	Displaying the Google Workspace customer overview
Assign groups	Assigning Google Workspace groups directly to a customer
Define search criteria for identity assignment	Editing search criteria for automatic identity assignment
Edit synchronization project	Editing the synchronization project for a Google Workspace customer
Synchronize this object	Synchronizing single objects

Displaying the Google Workspace customer overview

To obtain an overview of a Google Workspace customer

In the Manager, select the Google Workspace > Google Workspace customers category.
Select the customer in the result list.
Select the Google Workspace customer overview task.

Editing the synchronization project for a Google Workspace customer

Synchronization projects in which a Google Workspace customer is already used as a base object can also be opened in the Manager. You can, for example, check the configuration or view the synchronization log in this mode. The Synchronization Editor is not started with its full functionality. You cannot run certain functions, such as, running synchronization or simulation, starting the target system browser and others.

NOTE: The Manager is locked for editing throughout. To edit objects in the Manager, close the Synchronization Editor.

To open an existing synchronization project in the Synchronization Editor:

In the Manager, select the Google Workspace > Google Workspace customers category.
Select the customer in the result list.
Select the Change main data task.
Select the Edit synchronization project task.

Related topics

Customizing the synchronization configuration for Google Workspace

Google Workspace user accounts

Using One Identity Manager you can manage a customer's users. The user data for the registered users is represented in One Identity Manager as user accounts. You can use the user accounts to manage the user's permissions, for example, membership of Google Workspace groups or administrative permissions.

A user account can be linked to an identity in One Identity Manager. You can also manage user accounts separately from identities.

NOTE: It is recommended to use account definitions to set up user accounts for company identities. In this case, some of the main data described in the following is mapped through templates from identity main data.

NOTE: If identities are to obtain their user accounts through account definitions, the identities must own a central user account and obtain their IT operating data through assignment to a primary department, a primary location, or a primary cost center.

Related topics

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center