Google Workspace Directory Sync

Keep your Clockwise roster matched to your Google Workspace directory, so you aren't

maintaining the same list of people twice. Included on every plan.

What Syncs

Names, email addresses, job titles, departments, and reporting lines.

Suspended or archived in Google → deactivated in Clockwise.

Optionally, users removed from Google can be deactivated too.

Clockwise never deletes anyone. Deactivated people keep their timesheet history;

they simply can't sign in or be assigned work. Nothing is ever written back to Google —

the connection is read-only.

Google does not control a person's Clockwise role (that stays an explicit decision

here), their employment type, or their hire and termination dates. 1099 contractors and

subcontractors are ignored by the sync entirely.

In Google Cloud, create a service account and download a JSON key.

In the Google Admin console → Security → Access and data control → API controls

→ Domain-wide delegation, authorize that service account's client ID for the

read-only directory scope shown on the Clockwise setup page.

In Clockwise, go to Settings > Integrations and choose Google Workspace.

Enter the Workspace admin the service account should act as, paste the JSON key, and

click Test connection.

Review the sample of what Google returns, then Import users.

Credentials are stored encrypted, so you won't need to paste them again.

Nightly sync — pick a time on the integration page.

Sync now — pulls immediately. Use this straight after changing someone in

Google rather than waiting for the overnight run.

The review step has a lookup box. Search an address to see exactly what Google returns

for that person — useful right after changing their manager or title, since the sample

list only shows the first few users alphabetically.

If someone's address changes in Google, Clockwise follows the person rather than

creating a second account. There is a gap between the rename and the next sync during

which they can't sign in, because Clockwise still holds their old address — run

Sync now after a rename and they're back immediately.

Use What gets synced → Never sync these addresses for anything that isn't a person:

shared mailboxes, service accounts, meeting rooms. Excluded addresses are left

completely alone — not created, not updated, and not deactivated for going missing.