Google Organizational Units Sync

Sync users from specific Organizational Units (OUs) in your Google Workspace domain to target training for specific departments, teams, or locations.

Overview

Google Organizational Units provide a hierarchical way to organize users in your domain. With INFIMA's OU sync feature, you can:

  • Select specific OUs to include in synchronization
  • Automatically trigger sync after configuration changes

Prerequisites

Before configuring OU sync, ensure you have:

  1. Completed the Google Workspace integration setup
  2. Granted domain-wide delegation with the required OAuth scopes
  3. Admin access to the INFIMA Dashboard

Configuring OU Sync

Steps

  1. Log into the INFIMA Dashboard
  2. Navigate to Users and click Sync by Organizational Units
  3. The page displays your current Google Workspace OUs
  4. Select OUs to sync by checking the boxes next to each OU name
    • You can select multiple OUs at different levels
  5. Review the Selected Organizational Units shown on the right:
  6. Determine whether to Include sub-organizational units:
    • Enable to automatically sync all child OUs under selected parent OUs
    • Disable to only sync users directly in the selected OUs

Sync Behavior

When you select specific OUs, only users within those OUs will remain in INFIMA. Users outside the selected OUs will be removed from the platform.

  1. Click Save to apply the configuration
  2. Click Refresh Users Now to update the users after saving
    • Changes will take effect after the refresh completes

Best Practices

Organizational Strategy

  • Department-based: Select OUs representing specific departments for targeted training
  • Location-based: If OUs are organized by office location, select specific offices
  • Role-based: Target OUs containing users in security-sensitive roles

Switching Sync Methods

You can switch between different sync methods at any time:

  • All Users: Removes OU restrictions and syncs everyone
  • OU Sync: Sync based on organizational units (this method)
  • Group Sync: Sync based on Google Groups

Switching Methods

When switching sync methods, your previous selections are deleted but existing users will remain in INFIMA if they are included in the new sync configuration. Users not included in the new configuration will be removed during the next sync.

Troubleshooting

OUs Not Appearing

If your organizational units aren't showing:

  1. Verify domain-wide delegation includes the admin.directory.orgunit.readonly scope
  2. Try refreshing the page or logging out and back in

User Count Mismatch

If the displayed user counts seem incorrect:

  1. Note that service accounts and admin accounts may be inactive
  2. Suspended users are not counted in sync totals
  3. Recently created users may take time to appear