Google Workspace - Configure Permissions to Sync Organizational Units (OUs)

Introduction

We now support syncing Organizational Units (OUs) within Google Workspace. To enable this feature, the Sublime app requires updated permissions that include the Directory API scope. This allows Sublime to automatically sync your organization’s OUs within the platform and create Lists.


Setup

Cloud-managed Google Workspace

  1. Sign into the Google Workspace admin interface at https://admin.google.com
  2. In the lefthand sidebar, click Security > Access and data control > API controls
  3. Scroll down and click Manage Domain Wide Delegation under Domain wide delegation
  4. Click Add new
  5. Paste the Sublime Cloud Client ID 112905660299333414135
  6. Paste the following value into the OAuth scopes field: https://www.googleapis.com/auth/admin.directory.orgunit.readonly
  7. Allow up to 24 hours for changes to propagate

Self-managed Google Workspace

The Directory API scope is already included in the initial setup of your self-managed instance.

To confirm that the settings are correct, follow steps in the Grant domain-wide delegation section on Self Managed - Google Workspace.


That's it!