---
title: Connect Google Workspace
description: Authorize Surface once with a Workspace admin account, and it keeps group membership in sync.
---

## Before you begin

- You are a **Google Workspace admin**. A regular account cannot approve the permission.
- You have the Admin role in Surface.

## How it works

```mermaid
sequenceDiagram
  participant You
  participant Console as Surface Console
  participant Google
  You->>Console: Click Connect with Google
  You->>Google: Sign in as a Workspace admin
  Google->>You: Ask for read-only Groups permission
  You->>Google: Allow
  Google->>Console: Send you back, approved
  Console->>You: Card shows Connected
```

1. **Start the connection**

    Open **Hub**, **Integrations** tab. Click the **Google Workspace** card, then **Connect with Google** in the panel.

2. **Sign in and approve**

    Sign in with your **Workspace admin** account. Google asks for read-only access to groups. Click **Allow**.

3. **Return to Surface**

    Google sends you back to Hub, and you see "Google Workspace connected". The card now shows **Connected**.

## What happens next

Surface reads your groups and members on a schedule and keeps the [Users](/surface/environment/users) page in sync.

## If it fails

The usual cause is signing in with an account that is not a Workspace admin. Try again with an admin account.