> ## Documentation Index > Fetch the complete documentation index at: https://onecli.sh/docs/llms.txt > Use this file to discover all available pages before exploring further. # Google Admin Integration: Workspace User Management > Manage users, groups, and organizational units in Google Workspace. Requires admin privileges on the Google account. ## Overview OneCLI connects AI agents to the Google Admin SDK through Google's OAuth flow. Agents can manage users, groups, and organizational units in your Google Workspace domain. The gateway injects OAuth credentials into requests to the Admin SDK API automatically. This is useful for IT automation agents that need to provision users, manage group memberships, or audit organizational structure. ## Setup Open the OneCLI dashboard and navigate to **Connections** > **Google Admin**. Click **Connect Google Admin**. You'll be redirected to Google to authorize OneCLI. You must sign in with a Google Workspace admin account. Review the permissions and click **Allow**. ## What agents can do * List users in your Google Workspace domain * Create new user accounts with name, email, and organizational unit * Update user details (name, password, suspension status, org unit) * Delete or suspend user accounts * List groups and their members * Create new groups and add or remove members * Manage organizational units (list, create, update, delete) * Read user login activity and account status * Manage user aliases and email addresses ## Controlling access Access is per agent: [grant](/docs/guides/agent-access) the connection to each agent that needs it, choosing per tool what runs freely, what needs human approval, and what stays blocked — a read-only agent is a single grant. Organization [rules](/docs/guides/rules) add guardrails on top, like rate limits and blanket blocks. Everything is checked before credential injection, so a blocked request never reaches the Admin SDK.