Google Workspace Admin

**Judgement:** This skill is a strong, production-grade integration for Google Workspace Admin Directory operations via a managed OAuth gateway. It’s well-suited for serious automation of user, group, and org-unit management, provided it’s deployed in a tightly controlled environment. **Key strengths:** - Comprehensive coverage of core Admin Directory features: users, groups, members, org units, domains, roles, and role assignments. - Clean design: URLs largely mirror Google’s native Admin SDK, making it intuitive for anyone familiar with Google Workspace APIs. - Good developer ergonomics: clear base URL, authentication pattern, multi-language examples, and troubleshooting tips. - Managed OAuth and explicit connection management make multi-tenant or multi-domain setups feasible. **Risks / limitations:** - Very high-impact permissions: with admin-scoped OAuth, this skill can create/delete users, alter roles, and manage groups and org units. Misuse (or untrusted agents using it) could cause major security and operational incidents. - Relies on the Maton gateway as an extra infrastructure dependency (availability, latency, and rate limits of 10 req/sec per account). - Only covers the Admin Directory-style surfaces; other Google or third-party APIs require separate skills (e.g., the `api-gateway` skill). **Recommended scenarios:** - Enterprise agents automating Google Workspace user provisioning, deprovisioning, and suspension based on HR or identity events. - IT and security operations automations that maintain group memberships and admin roles at scale. - Internal admin consoles or chatops bots for helpdesk teams, where the agent is strictly permissioned and workflows are carefully constrained. - Compliance and security tools that periodically audit users, groups, roles, and domains in a Workspace environment.