Google Admin

Google Workspace administration: users, groups, org units, and device management

Google Admin API referenceAPI checked August 16, 2026

Signs in with: OAuth 2.0 sign-in
Runs on: Cloud or On-Prem Worker
Operations: 128
Ready-made triggers: 1

Connect Google Admin

In Neblex open Connect › Connections and click Connect a Service.
Choose Google Admin and whether the connection is shared across the workspace or used in one project.
Click Authorize and approve access in the window that opens. The connection is created.

For services offered under Connect a Service you only sign in and approve access. Otherwise use Connect with OAuth2 with your own OAuth app. See Authorize with OAuth.

There are no fields to fill in: you sign in to Google Admin and approve access.

Triggers

Start a flow when something changes in Google Admin: add a Poll for changes trigger, choose Google Admin and pick the event.

Event	What it does	How
User created	A user was added to the domain.	Checks for changes by `creationTime`

Use it in a flow

Open a flow, open the node library and search for Google Admin.
Drag it onto the canvas and choose an Operation and your connection.
Map the operation's fields from earlier steps, or click Map with Matt.
Use Test this step to see what it returns, then save.

Operations

128 operations in 12 groups. Each one is a step you can add to a flow.

Customer3

Get the customer`getCustomer`	GET	The customer account record.
Patch the customer`patchCustomer`	PATCH	Sparse update of the customer record.
Update the customer`updateCustomer`	PUT	Replace customer record fields (language, contact, postal address).

Device14

Batch-change ChromeOS status`batchChangeChromeOsStatus`	POST	Change the status of a batch of ChromeOS devices (deprovision, disable, re-enable).
ChromeOS device action`chromeOsDeviceAction`	POST	Take an action on a ChromeOS device (deprecated in favor of batch status change; still served).
Count ChromeOS devices`countChromeOsDevices`	GET	Count ChromeOS devices matching a filter.
Get a ChromeOS command`getChromeOsCommand`	GET	The state and result of a command issued to a device.
Get a ChromeOS device`getChromeOsDevice`	GET	One ChromeOS device's properties.
Get a mobile device`getMobileDevice`	GET	One mobile device's properties.
Issue a ChromeOS command`issueChromeOsCommand`	POST	Issue a command for a ChromeOS device to execute (reboot, wipe, screenshot...).
List ChromeOS devices`listChromeOsDevices`	GET	Page through the account's ChromeOS devices.
List mobile devices`listMobileDevices`	GET	Page through the account's user-owned mobile devices.
Mobile device action`mobileDeviceAction`	POST	Take an action on a mobile device (e.g. admin remote wipe, approve, block).
Move ChromeOS devices to an OU`moveChromeOsDevicesToOu`	POST	Move up to 50 ChromeOS devices to an organizational unit.
Patch a ChromeOS device`patchChromeOsDevice`	PATCH	Sparse update of a device's updatable properties.
Remove a mobile device`deleteMobileDevice`	DELETE	Remove a mobile device from the account.
Update a ChromeOS device`updateChromeOsDevice`	PUT	Replace a device's updatable properties (annotatedUser, annotatedLocation, notes, orgUnitPath).

Domain8

Add a domain`insertDomain`	POST	Add a domain to the customer.
Add a domain alias`insertDomainAlias`	POST	Add a domain alias under a parent domain.
Delete a domain`deleteDomain`	DELETE	Remove a domain from the customer.
Delete a domain alias`deleteDomainAlias`	DELETE	Remove a domain alias of the customer.
Get a domain`getDomain`	GET	One domain of the customer.
Get a domain alias`getDomainAlias`	GET	One domain alias of the customer.
List domain aliases`listDomainAliases`	GET	The customer's domain aliases, optionally under one parent domain.
List domains`listDomains`	GET	The customer's domains.

Group9

Add a group alias`addGroupAlias`	POST	Add an email alias to a group.
Create a group`createGroup`	POST	Create a group with an email and name.
Delete a group`deleteGroup`	DELETE	Delete a group.
Get a group`getGroup`	GET	Fetch a group by email, alias or id.
List a group's aliases`listGroupAliases`	GET	The group's email aliases.
List groups`listGroups`	GET	Page through the domain's groups (or a user's groups via userKey).
Patch a group`patchGroup`	PATCH	Sparse update of group fields (patch semantics).
Remove a group alias`removeGroupAlias`	DELETE	Remove an email alias from a group.
Update a group`updateGroup`	PUT	Patch group fields.

Member7

Add a group member`addMember`	POST	Add a user (or group) to a group.
Check membership`hasMember`	GET	Whether a user is a member of the group (direct or nested).
Get a group member`getMember`	GET	One member's membership properties in a group.
List group members`listMembers`	GET	Page through a group's members.
Patch a group member`patchMember`	PATCH	Sparse update of a member's membership properties.
Remove a group member`removeMember`	DELETE	Remove a member from a group.
Update a group member`updateMember`	PUT	Replace a member's membership properties (role, delivery settings).

Org Unit6

Create an org unit`createOrgUnit`	POST	Create an organizational unit under a parent path.
Delete an org unit`deleteOrgUnit`	DELETE	Remove an organizational unit.
Get an org unit`getOrgUnit`	GET	One organizational unit by path segment or id.
List org units`listOrgUnits`	GET	The customer's organizational units.
Patch an org unit`patchOrgUnit`	PATCH	Sparse update of an organizational unit.
Update an org unit`updateOrgUnit`	PUT	Replace an organizational unit's fields.

Printer15

Batch-create print servers`batchCreatePrintServers`	POST	Create multiple print servers in one call.
Batch-create printers`batchCreatePrinters`	POST	Create multiple Chrome printers in one call.
Batch-delete print servers`batchDeletePrintServers`	POST	Delete multiple print servers in one call.
Batch-delete printers`batchDeletePrinters`	POST	Delete multiple Chrome printers in one call.
Create a print server`createPrintServer`	POST	Create a print server under an organizational unit.
Create a printer`createPrinter`	POST	Create a Chrome printer under an organizational unit.
Delete a print server`deletePrintServer`	DELETE	Delete a print server.
Delete a printer`deletePrinter`	DELETE	Delete a Chrome printer.
Get a print server`getPrintServer`	GET	One print server's configuration.
Get a printer`getPrinter`	GET	One printer's configuration.
List print servers`listPrintServers`	GET	Page through print server configurations.
List printer models`listPrinterModels`	GET	Page through the supported printer models.
List printers`listPrinters`	GET	Page through Chrome printer configs under a customer.
Update a print server`patchPrintServer`	PATCH	Sparse update of a print server's configuration.
Update a printer`patchPrinter`	PATCH	Sparse update of a printer's configuration.

Resource19

Create a building`insertBuilding`	POST	Create a building (id, name, floors).
Create a calendar resource`insertCalendarResource`	POST	Create a bookable calendar resource (room, equipment).
Create a resource feature`insertResourceFeature`	POST	Create a resource feature.
Delete a building`deleteBuilding`	DELETE	Delete a building.
Delete a calendar resource`deleteCalendarResource`	DELETE	Delete a calendar resource.
Delete a resource feature`deleteResourceFeature`	DELETE	Delete a resource feature.
Get a building`getBuilding`	GET	One building.
Get a calendar resource`getCalendarResource`	GET	One calendar resource.
Get a resource feature`getResourceFeature`	GET	One resource feature.
List buildings`listBuildings`	GET	Page through the account's buildings.
List calendar resources`listCalendarResources`	GET	Page through the account's calendar resources (rooms, equipment).
List resource features`listResourceFeatures`	GET	Page through the account's resource features (e.g. Whiteboard, VC).
Patch a building`patchBuilding`	PATCH	Sparse update of a building.
Patch a calendar resource`patchCalendarResource`	PATCH	Sparse update of a calendar resource.
Patch a resource feature`patchResourceFeature`	PATCH	Sparse update of a resource feature.
Rename a resource feature`renameResourceFeature`	POST	Rename a resource feature everywhere it is referenced.
Update a building`updateBuilding`	PUT	Replace a building's fields.
Update a calendar resource`updateCalendarResource`	PUT	Replace a calendar resource's fields.
Update a resource feature`updateResourceFeature`	PUT	Replace a resource feature.

Role11

Assign a role`createRoleAssignment`	POST	Assign an admin role to a user or group, customer- or OU-scoped.
Create a role`createRole`	POST	Create an admin role from privileges.
Delete a role`deleteRole`	DELETE	Delete an admin role.
Delete a role assignment`deleteRoleAssignment`	DELETE	Remove a role assignment.
Get a role`getRole`	GET	One admin role.
Get a role assignment`getRoleAssignment`	GET	One role assignment.
List privileges`listPrivileges`	GET	All assignable privileges for the customer.
List role assignments`listRoleAssignments`	GET	Page through role assignments, optionally for one user or role.
List roles`listRoles`	GET	Page through the domain's admin roles.
Patch a role`patchRole`	PATCH	Sparse update of an admin role.
Update a role`updateRole`	PUT	Replace an admin role's fields.

Schema6

Create a schema`createSchema`	POST	Create a custom user-attribute schema.
Delete a schema`deleteSchema`	DELETE	Delete a custom schema.
Get a schema`getSchema`	GET	One custom schema by name or id.
List schemas`listSchemas`	GET	All custom user-attribute schemas for the customer.
Patch a schema`patchSchema`	PATCH	Sparse update of a custom schema.
Update a schema`updateSchema`	PUT	Replace a custom schema's definition.

Security10

Delete an ASP`deleteAsp`	DELETE	Revoke an application-specific password issued by a user.
Generate verification codes`generateVerificationCodes`	POST	Generate new backup verification codes for a user.
Get a token`getToken`	GET	One issued OAuth token's metadata by OAuth client id.
Get an ASP`getAsp`	GET	One application-specific password's metadata.
Invalidate verification codes`invalidateVerificationCodes`	POST	Invalidate the user's current backup verification codes.
List a user's ASPs`listAsps`	GET	The application-specific passwords a user has issued.
List a user's tokens`listTokens`	GET	The OAuth tokens the user has issued to third-party applications.
List verification codes`listVerificationCodes`	GET	The user's current set of valid backup verification codes.
Revoke a token`deleteToken`	DELETE	Revoke all access tokens a user issued to an application.
Turn off 2-Step Verification`turnOffTwoStepVerification`	POST	Turn off 2-Step Verification for a user.

User20

Add a user alias`addUserAlias`	POST	Add an email alias to a user.
Create a guest user`createGuestUser`	POST	Create a guest user with access to a subset of Workspace capabilities.
Create a user`createUser`	POST	Provision a user (name, primaryEmail, password required).
Delete a user`deleteUser`	DELETE	Delete a user (restorable for ~20 days with Undelete).
Get a user`getUser`	GET	Fetch a user by primary email, alias or id.
Get a user's photo`getUserPhoto`	GET	The user's thumbnail photo (base64 web-safe photoData).
List a user's aliases`listUserAliases`	GET	The user's email aliases.
List users`listUsers`	GET	Page through the domain's users, optionally searched (query syntax: email:ada orgName='Sales').
Make a super admin`makeAdmin`	POST	Grant a user super-admin status.
Patch a user`patchUser`	PATCH	Sparse update of user fields (patch semantics).
Patch a user's photo`patchUserPhoto`	PATCH	Sparse update of the user's thumbnail photo.
Remove a user alias`removeUserAlias`	DELETE	Remove an email alias from a user.
Remove a user's photo`deleteUserPhoto`	DELETE	Remove the user's photo.
Set a user's photo`updateUserPhoto`	PUT	Set the user's thumbnail photo (photoData = web-safe base64).
Sign a user out`signOutUser`	POST	Sign a user out of all web and device sessions and reset their sign-in cookies.
Stop a watch channel`stopChannel`	POST	Stop receiving push notifications on a channel opened by a watch call.
Undelete a user`undeleteUser`	POST	Restore a recently deleted user by id.
Update a user`updateUser`	PUT	Patch user fields (suspended: true suspends the account).
Watch a user's aliases`watchUserAliases`	POST	Open a push-notification channel on a user's alias list.
Watch users`watchUsers`	POST	Open a push-notification channel on the users list.