Skip to main content

Documentation Index

Fetch the complete documentation index at: https://onecli.sh/docs/llms.txt

Use this file to discover all available pages before exploring further.

​
Overview

OneCLI connects AI agents to the Google Admin SDK through Google’s OAuth flow. Agents can manage users, groups, and organizational units in your Google Workspace domain. The gateway injects OAuth credentials into requests to the Admin SDK API automatically. This is useful for IT automation agents that need to provision users, manage group memberships, or audit organizational structure.

​
Setup

1

Go to Connections

Open the OneCLI dashboard and navigate to Connections > Google Admin.
2

Authorize

Click Connect Google Admin. You’ll be redirected to Google to authorize OneCLI. You must sign in with a Google Workspace admin account. Review the permissions and click Allow.

​
What agents can do

  • List users in your Google Workspace domain
  • Create new user accounts with name, email, and organizational unit
  • Update user details (name, password, suspension status, org unit)
  • Delete or suspend user accounts
  • List groups and their members
  • Create new groups and add or remove members
  • Manage organizational units (list, create, update, delete)
  • Read user login activity and account status
  • Manage user aliases and email addresses

​
Controlling access with rules

Use OneCLI’s rules engine to limit what agents can do with Google Admin. For example, you can allow read-only access for audit agents, or block account deletion and password changes. Rules are evaluated before credential injection, so a blocked request never reaches the Admin SDK.