---
title: Connect Google Workspace
description: Authorize Surface once with a Workspace admin account, and it keeps group membership in sync.
---

## Before you begin

- You are a **Google Workspace admin**. A regular account cannot approve the permission.
- You have the Owner or Admin role in Surface.

## How it works

```mermaid
sequenceDiagram
  participant You
  participant Console as Surface Console
  participant Google
  You->>Console: Click Connect on Google Workspace
  Console->>You: Click Authorize with Google
  You->>Google: Sign in as a Workspace admin
  Google->>You: Ask for read-only Groups permission
  You->>Google: Allow
  Google->>Console: Send you back, approved
  Console->>You: Card shows Connected
```

1. **Start the connection**

    Open **Integrations**, **Apps** tab. On the **Google Workspace** card, click **Connect**.

2. **Go to Google**

    A window titled "Connect Google Workspace" explains that you will be redirected. Click **Authorize with Google**.

3. **Sign in and approve**

    Sign in with your **Workspace admin** account. Google asks for read-only access to groups. Click **Allow**.

4. **Return to Surface**

    Google sends you back to the console. The card now shows **Connected**.

## What happens next

Surface reads your groups and members on a schedule and keeps the [Users](/surface/admin/users-and-roles) page in sync.

## If it fails

The usual cause is signing in with an account that is not a Workspace admin. Try again with an admin account.