Google Workspace Admin
With the Google Workspace Admin modules in Make, you can watch, list, create, update, retrieve, and delete users, roles, role assignments, and organizational units.
To get started with Google Workspace Admin, create an account at https://workspace.google.com.
Make's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy.
- Log in to your Make account, add a Google Workspace Admin module to your Make, and click Create a connection.
- Optional: In the Connection name field, enter a name for the connection.
- Optional: Click Show Advanced Settings field, and enter the client credentials from your custom application. See Connecting to Google services using Oauth2.
- Click the Sign in with Google button and select your Google account.
- Review the access information and click Allow.
You have successfully established the connection. You can now begin editing scenarios and adding more Google Workspace Admin modules. If your connection needs reauthorization at any point, follow the connection renewal steps here.
Make's modules' advanced settings let you enter your own OAuth2 client credentials. OAuth is a security authorization protocol to interact with your protected data that does not require sending your login information.
In order to use OAuth2 with your Google apps, you need to create your own project and a custom OAuth client in Google Cloud Console. This is useful for connecting restricted Google services, like Google Drive or Gmail, to Make.
The following procedure is intended for:
- Personal use (@gmail.com and @googlemail.com users)
- Organizational use (Internal use within a business or other organizationGoogle Workspace (formerly GSuite) users that prefer to use a custom OAuth client)
Prerequisites:
- a Google account
To create a custom OAuth client for Google service you must do the following:
Open the Dashboard, and click the CREATE PROJECT button.
googleOAuthCreateProject.pngChoose a name for your project, then click Create.
googleOAuth2NameProject.png
Click Enable APIs and services.
googleOAuth2EnableAPIs.png- Enter the name of the service you want to use (for example, Gmail API or Google Drive API) in the Enable APIs and services field.
The desired service option should display as you type. Click on the API/service you want to connect to Make.
googleOAuth2SearchAPIs.pngClick Enable.
googleOAuth2ClickEnable.png
Go to APIs & Services > OAuth consent screen settings, choose the External option, then click Create.
googleOAuth2CreateConsentScreen.png- Fill in the required fields as follows:
- For the Scopes section:
- On the Test Users section, click Add users to add the email address associated with the Google account you want to connect to Make.
For example: Make.
Enter the name of the app asking for consent.
make.com
integromat.com
SERVICE/API REQUIRED SCOPES <app> <scopes> <app> <scope>
Add required scopes for the Google service you want to connect to Make.
Click + Create credentials, and select the OAuth client ID option.
googleOAuth2CreateCredentials.pngFill in the required fields as follows, then click Create.
googleOAuth2EnterClientInfo.pngA dialog containing the app's Client ID and Client Secret is displayed.
googleOAuth2ClientCreated.png
- https://www.integromat.com/oauth/cb/google-restricted for Gmail or Google Drive
- https://www.integromat.com/oauth/cb/google/ for other Google apps
- https://www.integromat.com/oauth/cb/google-custom for Google Text-to-Speech and Google Natural Language
- https://www.integromat.com/oauth/cb/app for any app created via the Make Developer Platform
Add one of the following URIs:
- Go to your Make Make and choose the Google module you want to use.
- Next to Connection, click Add.
- Click Show advanced settings.
- Enter the Client ID and Client Secret you retrieved in step 4 of the preceding procedure into the respective fields, then click Continue.Create credentials
- Sign in with your Google account.
- The This app isn't verified window appears.
Click on Continue.
googleOAuth2GoogleHasntVerified.png- Click the check box next to Google Product and click Allow to confirm your choices.
You have now established the connection to your chosen Google service using a custom OAuth client.
Using the following modules, you can watch, create, update, list, retrieve, and delete users and make users super admin.
Triggers when a new user is created.
| |
---|---|
Connection | |
Your Domain | Select the domain whose users you want to watch. |
Query Search | |
Projection | |
Custom Field Mask | Enter a comma-separated list of schema names. |
Limit | The maximum number of users Make should return during one Make execution cycle. |
For more details, refer to the Search Query Documentation.
- Field: Specifies the user attribute to search. For example, givenName.
- Operator: Test is performed on this attribute. For example, contains a value.
- Value: Specifies the content to test. For example, Andrew.
Enter the search query. You can search the users with the following three attributes:
- Basic: Do not include any custom fields for the user.
- Custom: Include custom fields from schemas requested in customFieldMask.
- Full: Include all fields associated with this user.
Select the subset to fetch the user details:
Retrieves a list of users in a domain.
| |
---|---|
Connection | |
Your Domain | Select the domain whose users you want to list. |
Query Search | |
Order By | |
Projection | |
Custom Field Mask | Enter a comma-separated list of schema names. |
Show Deleted | When selected, lists the users who are deleted. |
Sort Oder | |
View Type | |
Limit | The maximum number of users Make should return during one Make execution cycle. |
For more details, refer to the Search Query Documentation.
- Field: Specifies the user attribute to search. For example, givenName.
- Operator: Test is performed on this attribute. For example, contains a value..
- Value: Specifies the content to test. For example, Andrew.
Enter the search query. You can search the users with the following three attributes:
- Email
- Family Name
- Given Name
Select the order in which you want to list the users:
- Basic: Do not include any custom fields for the user.
- Custom: Include custom fields from schemas requested in customFieldMask.
- Full: Include all fields associated with this user.
Select the subset to fetch the user details:
- Ascending
- Descending
Select the order in which you list the users:
- Admin View
- Domain View
Select the option to view the users:
Gets the details of a user.
| |
---|---|
Connection | |
User ID | Select the User ID whose details you want to retrieve. |
Projection | |
Custom Field Mask | Enter a comma-separated list of schema names. |
View Type | |
- Basic: Do not include any custom fields for the user.
- Custom: Include custom fields from schemas requested in customFieldMask.
- Full: Include all fields associated with this user.
Select the subset to fetch the user details:
- Admin View
- Domain View
Select the view:
Creates a new user.
| |
---|---|
Connection | |
First Name | Enter the first name of the user. |
Last Name | Enter the last name of the user. |
Password | Enter the password of the user. |
Your Domain | Select the domain for the user. |
Phones | |
Secondary Email | |
Change Password at Next Login | When selected, it prompts the user to change the password when tried to login next time. |
- Yes
- No
- Not defined
Select whether this is the primary phone number of the user:
Primary
Select the phone number type.
Type
Enter the phone number.
Phone Number
Add the phone numbers of the user:
- Home
- Work
- Other
Select the email address type:
Type
Enter the email address.
Email Address
Add the secondary email address:
Updates an existing user.
| |
---|---|
Connection | |
User ID | Select the User ID you want to update. |
First Name | Enter the first name of the user. |
Last Name | Enter the last name of the user. |
Password | Enter the password of the user. |
Your Domain | Select the domain for the user. |
Phones | |
Secondary Email | |
- Yes
- No
- Not defined
Select whether this is the primary phone number of the user:
Primary
Select the phone number type.
Type
Enter the phone number.
Phone Number
Add the phone numbers of the user:
- Home
- Work
- Other
Select the email address type:
Type
Enter the email address.
Email Address
Add the secondary email address:
Deletes a user.
| |
---|---|
Connection | |
User ID | Select the User ID of the user you want to delete. |
Makes a user a super administrator.
| |
---|---|
Connection | |
User ID | Select the User ID of the user whom you make a super admin. |
Using the following modules, you can list, retrieve, create, update, and delete organizational units.
Retrieves a list of all organizational units for an account.
| |
---|---|
Connection | |
Path | Select the path whose organizational units you want to list. |
Type | |
Limit | The maximum number of organizational units Make should return during one Make execution cycle. |
- All
- Children
Select the type of organizational units you want to list:
Gets the details of an organizational unit.
| |
---|---|
Connection | |
Get Organizational Unit | |
Organizational Unit Path | Select the organizational path whose organizational unit details you want to retrieve. |
- By Path
- By ID
Select the method by which you want to retrieve the organizational units:
Creates a new organizational unit.
| |
---|---|
Connection | |
Name | Enter the name of the organizational unit. |
Description | Enter the details of the organizational unit. |
Parent Organizational Unit Path | Enter the path to the parent organizational unit if this organization is a subsidiary of any other organization. |
Updates an existing organizational unit.
| |
---|---|
Connection | |
Get Organizational Path | |
Organizational Unit Path | Select the organizational path whose organizational unit details you want to update. |
Name | Enter a new name for the organizational unit. |
Description | Enter the details of the organizational unit. |
- By Path
- By ID
Select the method by which you want to retrieve the organizational units:
Deletes an organizational unit.
| |
---|---|
Connection | |
Get Organizational Path | |
Organizational Unit Path | Select the organizational path whose organizational unit details you want to delete. |
- By Path
- By ID
Select the method by which you want to retrieve the organizational units:
Using the following modules, you can create, update, list, retrieve, and delete roles.
Retrieves a list of all roles in a domain.
| |
---|---|
Connection | |
Limit | The maximum number of roles Make should return during one Make execution cycle. |
Gets the details of a role.
| |
---|---|
Connection | |
Role ID | Select the Role ID whose details you want to retrieve. |
Creates a new role.
| |
---|---|
Connection | |
Role Name | Enter a name for the role. |
Role Privileges | |
Role Description | Enter the details of the role. |
Select the permission.
Privilege Name
Select the service.
Service ID
Add the permissions for the role:
Updates an existing role.
| |
---|---|
Connection | |
Role ID | Select the Role ID you want to update. |
Role Name | Enter a name for the role. |
Role Privileges | |
Role Description | Enter the details of the role. |
Select the permission.
Privilege Name
Select the service.
Service ID
Add the permissions for the role:
Deletes a role.
| |
---|---|
Connection | |
Role ID | Select the Role ID you want to delete. |
Using the following modules, you can list, retrieve, assign, and delete role assignments.
Retrieves a list of all role assignments.
| |
---|---|
Connection | |
Search Role Assignments | |
Your Domain | Select the domain whose role assignments you want to list. |
Limit | The maximum number of role assignments Make should return during one Make execution cycle. |
- By User Email Name
- By User ID
- By Role ID
Select the option to search the role assignments you want to list:
Gets the details of a role assignment.
| |
---|---|
Connection | |
Role Assignment ID | Select the Role Assignment ID whose details you want to retrieve. |
Assigns a user to a specific role.
| |
---|---|
Connection | |
Role ID | Select the Role ID which you want to assign to the user. |
Assign To | Select the user to whom you want to assign the role. |
Deletes a role assignment.
| |
---|---|
Connection | |
Role Assignment ID | Select the Role Assignment ID you want to delete. |
Retrieves a list of all privileges for a customer.
| |
---|---|
Connection | |
Limit | The maximum number of privileges Make should return during one Make execution cycle. |
Performs an arbitrary authorized API call.
| |
---|---|
Connection | |
URL | |
Method | |
Headers | Enter the desired request headers. You don't have to add authorization headers; we already did that for you. |
Query String | Enter the request query string. |
Body | Enter the body content for your API call. |
For the list of available endpoints, refer to the G Suite Admin API Documentation:
Enter a path relative to https://www.googleapis.com. For example: /admin/directory/v1/users
to delete an entry.
DELETE
to make a partial entry update.
PATCH
to update/replace an existing entry.
PUT
to create a new entry.
POST
to retrieve information for an entry.
GET
Select the HTTP method you want to use:
The following API call returns all the users in the same domain from your G Suite Admin account:
URL:
/admin/directory/v1/users
Method:
GET
Query String: Key: domain Value: {{domain you want to retrieve users from}}

Matches of the search can be found in the module's Output under Bundle > Body > users. In our example, 3 users were returned:
