Apple Business User Guide
- Welcome
-
-
-
- Intro to Configurations
-
- AirDrop configuration
- AirPlay configuration
- AirPrint configuration
- App Access configuration
- Apple Intelligence & Siri configuration
- Application Layer Firewall configuration
- Certificate configuration
- Content Caching configuration
- Custom configuration
- Data Management configuration
- Energy Saver configuration
- FileVault configuration
- Gatekeeper configuration
- iCloud configuration
- Lock Screen configuration
- Password and Screen Unlock configuration
- Software Update configuration
- VPN configuration
- Web Clip configuration
- Web Filter configuration
- Wi-Fi configuration
- Edit a configuration
- Apply Blueprints
-
- Glossary
- Document revision history
- Copyright and trademarks
Sync user accounts from Google Workspace to Apple Business
Overview
When a user account is synced to Apple Business, the default role is Staff. After the sync is complete, only the Roles user account attribute can be edited. This attribute is stored with the user account in Apple Business and isn’t written back to Google Workspace, Microsoft Entra ID, or your IdP.
The synced account information is added as read-only until you turn off syncing. At that time, the accounts become manual accounts, and attributes in these accounts (such as a user’s name) can then be edited.
Note: The initial sync takes longer to perform than subsequent cycles do. Consult the Google Workspace documentation to learn how often users are synced.
How is federation data from Google Workspace used for directory syncing?
The following information is read by Apple Business when you link to Google Workspace for directory syncing:
Google Workspace user attribute | Apple Business user attribute | Required |
|---|---|---|
givenName | First Name |  |
familyName | Last Name | |
id | Managed Apple Account and email address | |
primaryEmail | User Name |  |
department | Department | |
costCenter | Cost Center | |
externalId | External Id | |
deletionTime | Deletion Time | |
For more information, see the Google REST Resource: users documentation.
Turn on Google Workspace Sync
Important: Review the following before you configure directory syncing.
In Apple Business, sign in with a user whose role has permissions to set up and configure federation and connect to an identity provider (IdP).
To view roles and permissions, see Intro to roles and permissions.
Under Directory Sync, select Set up next to the Google Workspace domain you want to sync with Apple Business.