Documentation
¶
Overview ¶
google-workspace-directory-sync pulls the Google Workspace user directory into saas_identities so the Security Graph, the executive report, and the Google Workspace assessment stop reporting 0 privileged identities / 0 active accounts / 0% MFA coverage on real tenants. Until this command landed, the only producer of saas_identities was scripts/seed.ts (demo data); the live tables stayed empty after a Google connect even though the audit-log poller was already producing findings.
Separated from cmd/google-workspace-poller because the two read different Google APIs (admin.reports vs admin.directory), have different rate limits, and progress on very different cadences. Coupling them would force the audit pipeline to wait through a Directory API outage.
Source Files