Here's what to do if:

You can stop any accounts from being brought over by adding them to the sync deny list.

If you don't wish an inactive user to be made active by the Google Workspace sync, you can add the user's email address to the sync deny list. You can do this in the Sync Wizard in the Google Workspace sync configuration page in your platform settings.

The most common reason for missing users is that you've run a Test Sync, instead of a Manual Sync. You can run a Manual Sync from the Google Workspace Sync page. If that doesn't resolve your missing users issue, please follow our guide to troubleshooting missing users below.

The sync will fail if the total number of all users (active or inactive) on your account exceeds the user limit placed upon it if present. The Summary sheet on the spreadsheet attachment of your sync summary includes an Updated User Count and User Limit. These figures will give you an impression of how far over the limit the account is. Sync failure alerts do not always include a full summary or attachment, you can run a test sync to obtain this data.

To get the sync working you will either need to delete users or have the user limit on your account increased.

The sync does not delete users but rather sets them to inactive. The idea is to provide a recycle bin of users who you can delete when you no longer need them. You can view your inactive users on the Users page and delete them as you see fit. Similarly you should review the Users Deactivated sheet on the sync summary spreadsheet attachment as you can also delete these users to bring your total down.

You will need to have the correct privileges set on your Google account in order to set up the Google Workspace sync. View a list of the requirements below.

You may encounter an 'admin_policy_enforced' error when using Delegated User authentication to set up your Google Workspace sync. This error happens when your Google Workspace is configured to block API access by third party applications.

You can grant our Sync Integration application API access in the Google Admin Console.

You should now be able to complete the sync authentication process as expected.

This error typically occurs when the Delegated User Email in your sync's Service Account Authentication configuration is not set correctly.

The Delegated User Email field must be set to that of a Google Workspace user with sufficient rights to make the Google Directory API requests required by the sync. You can view those privileges here.

You cannot use the email address of the service account as the Delegated User Email. It is not a real Google Workspace user and will not work. The service account is used by the sync integration to make API requests on behalf of a user rather than acting in lieu of a user.

If your Google Workspace sync fails with the message 'Error: access_not_configured', the authentication token we hold for your account may have expired and you can resolve the issue by re-authenticating with Google Workspace. You can do so from the Google Workspace sync set-up wizard in the platform settings.

The sync will fail if the groups you selected to load users from no longer exist in Google Workspace. Typically this is because the selected groups have been deleted from Google Workspace since the Google Workspace sync was configured on your account.

Under these conditions you would see the warning message below in the View Current Setting option on the Google Workspace sync settings page.

You would also see the error below in the Summary sheet in the Sync Summary email's spreadsheet attachment on a test or manual sync:

No allow listed groups found in the group data from the synced API

You can resolve this issue by running the configuration wizard and selecting new groups on the Group Configuration step.

The Google Workspace sync establishes a synced dataset based on your Google Workspace data and the filtering configuration of your sync. The sync will fail if it can't find any users that comply with your filtering preferences or the system's requirements for user records. The system requires that users have a first name, last name and a valid email address that conforms with your domain lock if enabled.

The Sync Summary email can give further information about this. The Users Loaded count will be 0 if all users fail to meet the system's requirements for user records. The Users Processed count will be 0 is there are no users in the synced dataset after filtering.

The error message in the Summary sheet of the Sync Summary spreadsheet attachment can also highlight the reason for this.

To resolve these issues you should run the steps in this article and check whether the groups in your sync's filtering preference contain users in Google Workspace.