Integration · Security and identity
AI agents for Google Workspace Admin
Manage people and groups in a Google Workspace domain.
- Actions
- 9
- Read
- 5
- Write
- 4
Actions
What your agents can do in Google Workspace Admin
Manage people and groups in a Google Workspace domain: find users and read their details, list groups and members, add or remove group members, suspend or restore an account, sign someone out of every session, and read the audit log of sign-ins and other activity. Signed in as a Google Workspace admin.
Read 5
Look things up. Nothing changes.
Find users
Finds people in the Workspace account.
Get a user
Reads one person by primary email, alias or user ID.
List groups
Lists the account's groups, or only the groups one person belongs to (user).
List a group's members
Lists the members of a group by its email or ID, optionally only owners or managers, or with indirect members of nested groups.
Read the audit log
Reads Workspace activity events, newest first, for one person or everyone (all), from one area.
Write 4
Create, change or send.
Suspend or restore a userDeletes data
Suspends a person (suspended true): they cannot sign in to Gmail, Drive or any Google service, and their data stays; or restores them (suspended false).
Sign out everywhereDeletes data
Signs a person out of every web and device session and resets their sign-in cookies, so they must sign in again (it can take a few minutes on mobile).
Add someone to a group
Adds a person or another group to a group, as a MEMBER unless another role is given.
Remove someone from a groupDeletes data
Removes a member from a group, by the group's and the member's email or ID, which takes away the group's mail and shared-drive access.
A person can approve first
Any write action can be set to wait for a person's approval before it runs, so an agent asks before it changes anything. Actions that delete data ask first by default.
Connection
How it connects
Connect it once in the console, then give it to the agents and workflows that need it.
Sign in with Google and approve access (OAuth).
Kept safe
- Credentials are stored encrypted with your organization's own keys.
- They are opened only by the process that makes the call, at the moment it runs, and never go into a prompt or the browser.
- Calls go only to the tool's own servers.
Ideas
Ideas to start with
Starting points made only from the actions above. Mix them with any other tool your agents can use.
- 01
Ask about your Google Workspace Admin data
Ask a question in plain words. The agent can find users, get a user or list groups in Google Workspace Admin, then answers with what it found.
- 02
Let an agent update Google Workspace Admin
Have the agent add someone to a group or suspend or restore a user in Google Workspace Admin as part of a larger task. Turn on approval and a person signs off on each change first.
- 03
Share what it finds in Slack
Give one agent Google Workspace Admin and Slack: it can find users in Google Workspace Admin and post a summary to a Slack channel in the same run.
Works well with
More Security and identity tools
- Okta14 actionsFind people and read their groups, apps, MFA factors and sign-in history in Okta, list groups and members, and run joiner and leaver steps.
- Microsoft Entra ID10 actionsFind people and groups in Microsoft Entra ID (formerly Azure Active Directory), read a person's group and role memberships and their sign-in log, add or remove group members, and run leaver and incident steps.
- CrowdStrike Falcon8 actionsInvestigate and respond in CrowdStrike Falcon: search the hosts the Falcon sensor protects and read their details, network-contain a compromised host or lift containment, search and read alerts.
- Wiz7 actionsWork cloud security issues in Wiz: list open issues by severity or type, read one issue with the affected resource and its notes, move it to in progress, resolve or reject it with a reason, add a note.
- Vanta8 actionsTrack compliance in Vanta: see which automated tests are failing and the exact resources (users, buckets, laptops, repos) causing it, progress on each framework.
- 1Password4 actionsWatch a 1Password Business account's security activity through the Events API.
FAQ
Google Workspace Admin and MyDeepAgents
Can MyDeepAgents connect to Google Workspace Admin?
Yes. The Google Workspace Admin connector has 9 actions: 5 read and 4 make changes. Your agents can call them as tools, and your workflows can run them as steps.
How do I connect Google Workspace Admin?
Sign in with Google and approve access (OAuth). Credentials are stored encrypted with your organization's own keys and are opened only at the moment of a call.
Can an agent change data in Google Workspace Admin without asking?
Only if you let it. Each of the 4 actions that change data can be set to wait for a person's approval before it runs, and the 3 that delete data ask first by default.
Can I use Google Workspace Admin in workflows as well as agents?
Yes. Every Google Workspace Admin action also works as a step in a workflow, and the same connection serves your agents and your workflows.
Early access
Put Google Workspace Admin to work
Connect it in a few minutes, give an agent the actions it needs, and decide which changes wait for a person.