Grouper Google GCP provisioner

External system

Setup the external system

Movie

Setup the google provisioner managing groups and entities (and memberships)

Provisioner

Grouper uses directory APIs to manage groups. Group fields and attributes are below. Documentation. API. Settings.

Advice

Provisioning type is membershipObjects
Use group and entity link (since there are uuids in the target for groups and entities that need to be looked up)

Additional settings

Grouper name	Type	Required?	Description
Group attributes. Documentation. API.
id	String	required	UUID read from GCP. Select only. This should not be translated from Grouper and the target attribute should be cached.
name	String	required for create	Name of the group in GCP. Note: required for group create. If not creating groups you need name or email.
email	String	required for create	Unique email address of the group. Note: required for group create. If not creating groups you need name or email.
description	String	optional	Description of the group
whoCanAdd	String	optional	Valid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanJoin	String	optional	Valid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanViewMembership	String	optional	Valid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanViewGroup	String	optional	Valid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanInvite	String	optional	Valid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
allowExternalMembers	Boolean	optional	Valid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanPostMessage	String	optional	Valid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
allowWebPosting	Boolean	optional	Valid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource

Grouper name	Type	Required?	Description
Entity attributes. Documentation. API.
id	String	required	UUID read from GCP. Select only. This should not be translated from Grouper and the target attribute should be cached.
email	String	required	email address of the user. In GCP, it's called primaryEmail.
familyName	String	required for create	Family name (Last name). Note: required for entity create. If not creating entities you need the email and id.
givenName	String	required for create	Given name (First name). Note: required for entity create. If not creating entities you need the email and id.