Microsoft 365 & Google Workspace
Google Workspace Integration
3-legged connection with a dedicated service account for users, buildings, resources and calendar events — including required permissions.
Updated May 4, 2026
Integrations · Authentication · 1.3
The Gfacility integration with Google Workspace uses a 3-legged approach: a dedicated service account in your Workspace explicitly grants consent, and Gfacility receives scoped access to users, resources and calendar events. By using a dedicated account — rather than a real employee’s — the integration stays stable independently of staffing changes.
Step 1: Dedicated Workspace account
Create a dedicated Google Workspace account that is used solely for the Gfacility integration. Benefits:
- Stable — no impact when employees change roles or leave.
- Scoped — access limited to what this account explicitly sees.
- Auditable — every integration action shows a single, clear actor.
Step 2: Assign permissions
In the Admin Console → Directory → Users, assign the Gfacility user the appropriate role. Three integration aspects, each with its own permissions:
Users
Read permissions on users. Pick an existing role or create a custom Gfacility role. Scope = the entire organisation or a specific OU.
Buildings & resources
Read permissions on buildings & resources. Assign per resource or via a group with admin rights on all resources.
Calendar events
"Modify events" on the resource. Required for signage, planner and analytics.
Step 3: Activate the integration
In Gfacility:
- Go to the Google Workspace module in the admin panel.
- In the top right, select the newly created Workspace account as the integration account.
- Toggle the switch on for each integration.
- Confirm in the Google pop-up that Gfacility may have access.
Sync frequency
Users
Once per night. New accounts are created automatically.
Buildings & resources
Once per night.
Calendar events
Real-time — for signage and planner.