> ## Documentation Index
> Fetch the complete documentation index at: https://docs.goguardian.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Provision Admin Accounts from Google

> Set up Google Admin Provisioning to automatically create GoGuardian Admin accounts by syncing Google Groups.

Use Google Admin Provisioning to automatically create and assign GoGuardian Admin accounts by syncing Google Groups. When a user joins a mapped Google Group, GoGuardian assigns them the corresponding Admin role, with no manual invitation required.

## Review Requirements

Before configuring Google Admin Provisioning, confirm the following:

* **GoGuardian Admin licensing**: An Admin license is required to sync and assign GoGuardian Admin roles.
* **GoGuardian access in Google Admin Console**: Grant GoGuardian access to Google Workspace data so provisioning can sync Google Groups. See [Enable GoGuardian in Google Admin Console](/products/admin/enable-in-google-admin-console).
* **Google Workspace permissions**: The configuring user needs Super Admin access, or at minimum Read access to Groups in Google Workspace, to see Google Groups in Org Management.

## Configure Google Admin Provisioning

1. In Org Management, navigate to **Integrations** and confirm the **Google Directory** link is enabled. If it is not, enable it before continuing.

   Once Google Directory is enabled, select the **Google Directory** tile and check the box for **Admin Provisioning Settings** to activate the feature.

<img src="https://mintcdn.com/goguardian/-8wTzK_1Id6b12Ip/images/screenshots/provision-admins/step-02.png?fit=max&auto=format&n=-8wTzK_1Id6b12Ip&q=85&s=a0160505883eb72c154bdc701390c8e7" alt="Review Requirements" width="1830" height="1326" data-path="images/screenshots/provision-admins/step-02.png" />

<img src="https://mintcdn.com/goguardian/-8wTzK_1Id6b12Ip/images/screenshots/provision-admins/step-03.png?fit=max&auto=format&n=-8wTzK_1Id6b12Ip&q=85&s=3f41fe3a95705c75576240858b0fc0c3" alt="Review Requirements" width="2786" height="1166" data-path="images/screenshots/provision-admins/step-03.png" />

<img src="https://mintcdn.com/goguardian/-8wTzK_1Id6b12Ip/images/screenshots/provision-admins/step-04.png?fit=max&auto=format&n=-8wTzK_1Id6b12Ip&q=85&s=5ad16db349b7338fcd44ab068ae11e76" alt="Review Requirements" width="2864" height="1736" data-path="images/screenshots/provision-admins/step-04.png" />

2. On the Administrator Provisioning (Google) page, select **+ New Mapping Group**.

3. On the New Mapping page, select a Google Group to provision, then choose an Org Management role and a GoGuardian Admin role to assign to members of that group. Select **Save**.

   Assignable roles include **Super User** (Org Management), **Full Access**, **Filter and Monitor**, and any custom RBAC roles your organization has created.

4. Return to the Administrator Provisioning (Google) page to confirm the new mapping group appears in the list. Users already in the mapped Google Group receive their assigned role at the next sync. New group members are provisioned automatically after they join.

## Resources

<CardGroup cols={2}>
  <Card title="Review User Roles and Permissions" href="/products/org-management/user-roles-and-permissions">
    Reference the full permission levels available for GoGuardian Admin and Org Management.
  </Card>

  <Card title="Enable GoGuardian in Google Admin Console" href="/products/admin/enable-in-google-admin-console">
    Approve GoGuardian's access to Google Workspace data before setting up provisioning.
  </Card>
</CardGroup>