Overview

This guide provides step-by step instructions for setting up SCIM provisioning via Google Workspace groups using WorkOS.

Role Hierarchy

When users belong to multiple groups with different roles, they will be assigned the highest role in the following order of precedence (from highest to lowest):

1. Administrator

2. Manager

3. Staff

4. Viewer

5. Unapproved

Setting up SCIM via Google Workspace Groups

1. Receive the WorkOS Setup Link

   1. Numeric will send you a WorkOS setup link for configuring directory sync.

   2. If you haven’t received the link, please contact solutions@numeric.io for assistance.

2. Share the Setup Link with Your IT Admin

   1. Forward the WorkOS setup link to your Google Workspace IT administrator, as applicable.

3. Directory Sync Configuration

   1. Click the setup link and select 

      Google Workspace as your directory provider.

   2. Follow the on-screen instructions to grant access to your Google Workspace.

4. Select Google Workspace Groups

• Choose all applicable Google Workspace Groups for provisioning. These groups will determine security settings and role assignments within Numeric.

5. Assign Roles to Groups

• Assign a Numeric role to each Google Workspace Group. Roles correspond to the permissions users in the group will have within Numeric.

• For simplicity, we recommend naming groups as follows and assigning roles accordingly (Group → Role):

  1. Numeric Admin → Administrator

  2. Numeric Manager → Manager

  3. Numeric Staff → Staff

  4. Numeric Viewer → Viewer

  5. Numeric Unapproved → Unapproved

     1. There would generally not be a reason to set a group to this role.

6. Create New Groups (As Needed)

• If you need to create new groups for your organization, refer to Option 1 of 

  this Google Admin Console Guide.

7. Add Members to Groups

• Add users to the appropriate groups based on the roles they should have in Numeric.

8. Test the Directory Connection

• Once roles are configured for all groups, click 

  Continue to next step and test the directory connection.

• After the initial sync, updates will automatically sync approximately every 30 minutes.

• You can manage assignments anytime via your WorkOS admin portal.

Additional Resources

• WorkOS Google Directory Sync (See Steps 3-5 & FAQ)

• WorkOS Directory Sync