Skip to content

Resources / Integrations / Google Workspace directory

Google Workspace directory

Read-only user directory sync from Google Workspace through an OAuth connection by one admin.

Last verified against our product: October 4, 2026

Availability

Available in the admin console

How an admin connects it

OAuth Connect button, granted by one admin. No domain-wide delegation.

Who can set it up: Organization admin (a Google Workspace admin account is required to consent).

  1. In the Mucho Gusto admin console, open the Google Workspace card and click Connect.
  2. Sign in with a Google Workspace admin account and approve the read-only request.
  3. You are returned to the admin console. Pick who to invite and import the org chart.

Permissions requested

Permission or scopeWhat it allows
https://www.googleapis.com/auth/admin.directory.user.readonlyRead users in your Workspace directory, read-only.
openid emailIdentify the approving admin and their domain.

Data we read

Read

  • Primary email
  • Full name
  • Primary job title
  • Manager (the manager relation on the user)

Not read

  • Phone numbers, addresses and photos
  • Custom schema fields
  • Group membership
  • Mail, Drive, Calendar or any other Google service data
  • Suspended users (skipped)

Google's directory call returns a fuller user object than we keep. Everything except the four fields above is discarded when received and never stored. This source supplies no hire or termination dates to us, so it gives no tenure data.

How the data is used

  • Seeds the org chart with titles and reporting lines.
  • Lets an admin choose which directory people to invite.
  • A manager you have set by hand is never overwritten by a sync.

Sync frequency

Automatically once a day (04:00 UTC), plus on demand with the admin console's sync button.

Disconnecting and purging data

How: Admin console, Google Workspace card, Disconnect.

  • Our stored connection (admin email, domain and refresh token) is deleted.
  • Nightly syncs stop.
  • Disconnecting removes our stored connection. We do not call the vendor to revoke the grant, so also revoke Mucho Gusto's access inside the vendor's own admin settings.

What remains: Disconnecting removes the stored connection only. Org-chart entries, titles, reporting lines and employment dates already imported stay in your organization's workspace, and member accounts are not deleted. To have previously synced data removed as well, email [email protected] and we will handle it case by case; there is no self-service purge today.

Back to all integrations

Questions or a correction? [email protected]. See also: Security, Subprocessors, Privacy, Terms.