Which Google Workspace permissions do I need?

You need a super admin account to set up domain wide delegation. Cloud Directory itself then only works with the minimal scopes admin.directory.user.readonly and admin.directory.customer.readonly. We cannot read mails, calendars or write anything.

Can Cloud Directory also write to Google Contacts?

Not currently. We read employees from Google Workspace into our central directory. Write access to individual Google Contacts is on the roadmap.

Where is the Google Workspace data stored?

At Supabase in Frankfurt, eu central 1. Photo avatars in a private storage bucket, directory entries in a dedicated Postgres table per workspace. No transfer to the USA.

How often does Google Workspace sync run?

Choose between hourly, daily or weekly. Default is daily. You can pause the sync any time or trigger it manually when you made urgent changes to your team.

What happens if I disconnect Cloud Directory from my Google tenant?

You remove the service account from domain wide delegation in the Google Admin Console and delete the connection in Cloud Directory settings. Both steps fully stop further read access. Existing directory entries in the cache are removed on request.

Google Workspace address book

Cloud Directory for Google Workspace.

Syncs your Google Workspace employees into a modern web directory. With photos, filters by domain and department, multi language and GDPR hosting in Frankfurt.

14 days free trial See pricing

What Cloud Directory brings to Google Workspace

Full feature set without any tenant changes.

Direct Google Directory API

Service account with domain wide delegation reads all active Google Workspace users. Suspended and archived accounts are filtered automatically.

Photo avatars included

Profile pictures from Google Workspace land directly in the Cloud Directory listing. Employees see colleagues with a face instead of just a name.

Smart filters by domain and department

With multiple domains in the workspace, filter precisely what should be visible. Guests or external accounts can be excluded.

Modern web directory

Employee search in the browser, installable as PWA, also usable on mobile and offline. No need to switch to the Google admin console.

GDPR hosting in Frankfurt

Supabase eu central 1 as data location. DPA included. No transfer of employee data to the USA.

Secure service account handling

The private key is stored AES encrypted. You keep full control and can revoke the connection anytime.

Setup in 4 steps

Connected in under 15 minutes, no custom development required.

1
Create a Google Cloud service account
In Google Cloud Console create a new project or pick an existing one. IAM and Admin, Service Accounts, create new. Name like cloud-directory-sync. Download the JSON key.
2
Enable the Admin SDK API
Under APIs and Services, Library, search for Admin SDK API and enable it. This allows the service account to talk to the Directory API.
3
Grant domain wide delegation in Google Workspace
In the Google Admin Console under Security, API access control, Domain wide delegation. Add the service account with scopes admin.directory.user.readonly and admin.directory.customer.readonly.
4
Connect inside Cloud Directory
In Cloud Directory go to Settings, Data sources, Google Workspace tab. Upload the JSON key, enter the admin email, connect. The first sync starts automatically.

Frequently asked questions about Google Workspace integration

Which Google Workspace permissions do I need?: You need a super admin account to set up domain wide delegation. Cloud Directory itself then only works with the minimal scopes admin.directory.user.readonly and admin.directory.customer.readonly. We cannot read mails, calendars or write anything.
Can Cloud Directory also write to Google Contacts?: Not currently. We read employees from Google Workspace into our central directory. Write access to individual Google Contacts is on the roadmap.
Where is the Google Workspace data stored?: At Supabase in Frankfurt, eu central 1. Photo avatars in a private storage bucket, directory entries in a dedicated Postgres table per workspace. No transfer to the USA.
How often does Google Workspace sync run?: Choose between hourly, daily or weekly. Default is daily. You can pause the sync any time or trigger it manually when you made urgent changes to your team.
What happens if I disconnect Cloud Directory from my Google tenant?: You remove the service account from domain wide delegation in the Google Admin Console and delete the connection in Cloud Directory settings. Both steps fully stop further read access. Existing directory entries in the cache are removed on request.

Ready to make Google Workspace productive?

14 days free trial, no credit card. Setup in under 15 minutes.

Create workspace