Skip to main content

​
Overview

OneCLI connects AI agents to the Google Admin SDK through Google’s OAuth flow. Agents can manage users, groups, and organizational units in your Google Workspace domain. The gateway injects OAuth credentials into requests to the Admin SDK API automatically. This is useful for IT automation agents that need to provision users, manage group memberships, or audit organizational structure.

​
Setup

1

Go to Connections

Open the OneCLI dashboard and navigate to Connections > Google Admin.
2

Authorize

Click Connect Google Admin. You’ll be redirected to Google to authorize OneCLI. You must sign in with a Google Workspace admin account. Review the permissions and click Allow.

​
What agents can do

  • List users in your Google Workspace domain
  • Create new user accounts with name, email, and organizational unit
  • Update user details (name, password, suspension status, org unit)
  • Delete or suspend user accounts
  • List groups and their members
  • Create new groups and add or remove members
  • Manage organizational units (list, create, update, delete)
  • Read user login activity and account status
  • Manage user aliases and email addresses

​
Controlling access

Access is per agent: grant the connection to each agent that needs it, choosing per tool what runs freely, what needs human approval, and what stays blocked — a read-only agent is a single grant. Organization rules add guardrails on top, like rate limits and blanket blocks. Everything is checked before credential injection, so a blocked request never reaches the Admin SDK.