Google Workspace Admin n8n integrationAutomate Google Workspace Admin with n8n.

Returns one ChromeOS device record, so the rest of the workflow can read its details before deciding anything.

• Device: selects the device to retrieve, picked from the list or passed as an expression such as {{ $json.deviceId }} when the identifier comes from an earlier node.
• Output: basic leaves custom fields out, full includes every field attached to the device.

Lists the Chromebooks enrolled in the domain, which is the starting point of any fleet inventory.

• Output: required, basic leaves custom fields out, full includes every field attached to each device.
• Return All: on, n8n walks the API pages until every device is collected; off, Limit caps how many come back.
• Include Children: includes devices from organizational units below the one selected.
• Query: filters with Google's querying syntax, and Order By sorts on values such as lastSync or serialNumber.

Writes the administrative metadata of a Chromebook back to the directory, the part Google calls annotations.

• Device: the device to modify, required.
• Update Fields: Annotated User and Annotated Location record who holds the machine and where it sits, Annotated Asset ID carries the internal asset tag, Notes stores free text, and Move to Organizational Unit Name or ID takes the full path of the target unit.

Switches a Chromebook between usable and blocked, without touching anything else on the record.

• Device: the device to act on.
• Status: disable disables a chromebook, reenable brings a disabled one back.

Opens a new Google group, which becomes both a mailing address and a permission handle.

• Group Email: the group's address, for example sales@example.com; it has to be unique, and on a multi-domain account the right domain gets picked here.
• Group Name: the display name shown to members.
• Description: an extended description explaining who should join and what gets sent there.

Removes a group from the directory. The address stops accepting mail and the permissions attached to it disappear with it.

• Group: the group to act on, chosen from the list or resolved from an expression.

Fetches a single group and its details, which is how a workflow checks that an alias exists before writing to it.

• Group: identifies the group, selected in the dropdown or supplied by a previous node.

Reads several groups at once, with filters that decide what the list actually contains.

• Return All: brings back every group across API pages; turned off, Limit sets the maximum.
• Domain: restricts results to one domain, while Customer targets the unique ID of the Workspace account.
• User ID: takes an email or immutable ID and lists the groups that user belongs to.

Edits an existing group in place, keeping its members and history intact.

• Group: the group being modified, required.
• Update Fields: Name changes the display name, Description rewrites the extended description, and Email moves the group to another address, which still has to be unique.

Attaches an existing account to a group, which is how mailing lists and shared access get granted.

• User: the account to add, usually carried over as {{ $json.primaryEmail }} from the operation that created it.
• Group: the destination group.

Creates a Workspace account and returns it, ready to receive mail.

• First Name and Last Name: both required, the identity shown in the directory.
• Password: minimum 8 characters, maximum 100.
• Domain Name or ID: the domain the address belongs to, combined with Username, so n.smith on example.com becomes n.smith@example.com.
• Change Password at Next Login: forces a reset on first sign-in.

Erases an account from the directory for good, so it belongs at the very end of an offboarding sequence rather than at the start.

• User: the account to delete, selected in the node or resolved from an expression.

Reads one account and decides how much of it to return.

• User: the account to look up.
• Output: simplified returns a short set including primaryEmail, isAdmin, lastLoginTime and suspended; raw returns the whole API response; select hands control to Fields.
• Custom Fields: set it to Custom and list the schemas in Custom Schema Names or IDs to pull company-specific attributes.

Exports the directory, which is the operation most reporting workflows start from.

• Output: required, simplified keeps the payload small on large domains, raw keeps everything.
• Custom Fields: required, basic excludes custom fields, custom pulls the schemas named in Custom Schema Names or IDs, itself required, full includes all of them.
• Return All: pages through every account; off, Limit stops the export short.
• Show Deleted: retrieves the list of deleted users instead of the active ones.
• Query: filters using the Admin SDK search syntax.

Detaches an account from a group while leaving the account itself untouched, which is the difference that matters during a role change.

• User: the member being removed.
• Group: the group losing that member.

Modifies an existing account, and carries the widest set of fields in the node with 11 of them.

• User: the account to modify, required.
• Suspend: on, the user is suspended; off, the user is reactivated; left out, the status stays as it is.
• Primary Email: must stay unique and cannot be an alias of another user.
• Roles: assigns admin roles such as Help Desk Admin or Groups Admin.