Choose Directory API scopes  | Admin console  | Google for DevelopersGoogle for DevelopersUMA requires the following permission scope to work with your Google Workspace environment:
For further information on Google Workspace scopes follow the documentation here:
User sync provides administrators with the ability to control and manage all UMA users from within Google Workspace.
Please note, syncing will fail until all required groups have been created and at least one user has been added to the 'Admin' group.
To get started, create groups in Google Workspace with the following names:
UMA Admin
UMA Advanced Manager
UMA Manager
UMA Hidden User
UMA User
Make sure that 'only invited users' is selected when you create the groups.
Then assign users as members to each group based on the role required.
Next, navigate to 'Company Settings' in UMA and under 'User Settings' toggle on 'User Sync' and hit 'Save' at the bottom of the page.
The initial sync is completed immediately and if the above steps have been completed successfully you should see all your users in the 'Manage' -> 'Users' section within a few minutes.
All existing users within UMA that haven't been added to a group will be made inactive after a successful sync.
All existing users in UMA that have been added to a group will stay active.
All users that have synced from Google Workspace will be automatically created as active users.
After user sync has been turned on and successfully synced it will now check for any changes periodically and replicate in UMA.
If you add or remove a member from an Google Workspace group it will automatically sync with UMA periodically.
If you remove a member from a group they will be made 'inactive' and won't be able to login to UMA.
If you add a user to more than one group they will be given the lowest permissions.
UMA provides an easy and secure way to get connected to your Google Workspace tenant using OAuth2.0 and OpenID Connect.
Shown below is the authentication process that UMA uses using OAuth2.0 and Open ID connect:
For more information on OAuth and OpenID Connect, follow the documentation below:
Users can be assigned to a specific group in Google Workspace which matches their role in UMA. For more information on roles click .
Permissions
Understanding Google API permissions.
Setup
Get started here.
Add resources
Sync your Google resources with UMA.
User sync
Sync your users with Google Workspace groups.
OAuth authentication flow
How your users will log in
Privacy policy
View UMA's privacy policy here
UMA allows you to connect to your own Google Workspace tenant using the Google API to sync users and resources.
You will need your Google Workspace global admin to carry out the steps below.
To understand the permissions required for the UMA Vision application click here.
To get started, navigate to your Google Workspace admin console.
Head to the security settings and find 'Manage Domain Wide Delegation' under 'Access Data Control' and 'API Controls'.
Click 'Add New'.
Insert the following Client ID: 103562150091217457953
Insert the following scopes: (each on a separate line) https://www.googleapis.com/auth/calendar https://www.googleapis.com/auth/admin.directory.resource.calendar https://www.googleapis.com/auth/admin.directory.group.readonly https://www.googleapis.com/auth/admin.directory.group.member.readonly https://www.googleapis.com/auth/admin.directory.user.readonly
Click 'Authorise'.
A booking account is required for our application to create bookings on behalf of users.
We recommend using a generic email address such as booking@yourcompany.com as this account will not need to be logged into and will be easier to identify.
Create a new Google Workspace user - e.g. booking@yourcompany.com.
Click on the newly created user/booking account and navigate to admin roles and privileges.
Ensure this user is given the super admin permissions role.
Click on the Google button on the log in page here.
Sign in with your Google Workspace admin account.
Configure company settings.
Configure your user preferences.
Connect your Google calendar from the integrations page.
Confirm that the instructions presented have been completed.
Enter in the booking account created above - e.g. booking@yourcompany.com.
Connect.
To create resources in Google Workspace follow the guide here.
To import your Google Workspace resources into UMA follow the guide here.
To sync your users from Google Workspace follow the guide here.
In Google Workspace, navigate to directory -> buildings and resources -> overview.
Open resource management.
Click on manage buildings and add a new building.
Go back to resource management and add a new resource and assign to a building.
Here you can add a meeting room, desk, parking space or other resource.
