External system

Setup the external system


Movie

Setup the google provisioner managing groups and entities (and memberships)

Provisioner

Grouper uses directory APIs to manage groups. Group fields and attributes are below.  Documentation.   API.

Advice

  • Provisioning type is membershipObjects
  • Use group and entity link (since there are uuids in the target for groups and entities that need to be looked up)

Additional settings

Group attributes.   Documentation.   API.
Grouper nameTypeRequired?Description
idStringrequiredUUID read from GCP. Select only.  This should not be translated from Grouper and the target attribute should be cached.
nameStringrequired for createName of the group in GCP.  Note: required for group create.  If not creating groups you need name or email.
emailStringrequired for createUnique email address of the group. Note: required for group create.  If not creating groups you need name or email.
descriptionStringoptionalDescription of the group
whoCanAddStringoptionalValid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanJoinStringoptionalValid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanViewMembershipStringoptionalValid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanViewGroupStringoptionalValid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanInviteStringoptionalValid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
allowExternalMembersBooleanoptionalValid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
whoCanPostMessageStringoptionalValid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
allowWebPostingBooleanoptionalValid values are listed at https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource
Entity attributes.   Documentation.   API.
Grouper nameTypeRequired?Description
idStringrequiredUUID read from GCP. Select only.  This should not be translated from Grouper and the target attribute should be cached.
emailStringrequiredemail address of the user. In GCP, it's called primaryEmail.
familyNameStringrequired for createFamily name (Last name).  Note: required for entity create.  If not creating entities you need the email and id.
givenNameStringrequired for createGiven name (First name).  Note: required for entity create.  If not creating entities you need the email and id.