Google Workspace directory
Each person's name, email, department and manager. Also title, cost center, organizational unit and status. Nothing changes on a screen until an admin matches people to your teams. Never phones, addresses, photos, mail, files or calendars.
Access
- Kind
- A read-only key you paste
- What to give
- Read-only service account
- Why that one
- A service account allowed one read-only scope, the user directory, acting as one administrator. Valistry reads each person's email, name, department, title, cost center, organizational unit, manager and status, and nothing else.
What it attributes on its own
- From the source
- each person's department, title and cost center; their organizational unit and manager; whether they are still here
- Needs a rule or a trace
- spend: this source places people on teams, and other sources carry what they spent; anything in mail, files or calendars: never read
The addresses it calls
- https://oauth2.googleapis.com/token
- https://admin.googleapis.com/admin/directory/v1/users
Valistry calls only these addresses. It blocks any other call and logs every call.
Connecting it
- Create a key. Create service account. Copy Client ID, in Advanced settings. Keys → Add key → JSON. Open ↗
- Let Valistry read the directory. Click Add new. Paste the Client ID and the scope. Then Authorize. Open ↗
No Google Workspace? Upload a file of people instead: email, team, department and manager, one row each.