Google Admin
for LuumenAI
Read Workspace users and groups, then change membership as an approved step
Connect the Google Admin Console and Luumen can answer questions about your Workspace directory directly in the terminal: who a user is, which groups exist, who belongs to them. When a change is needed — a new account, a group membership, a suspension — Luumen shows the exact call first and waits for your approval before it runs.
The Google Admin toolbox
14 tools: 5 read, 9 write. Reads answer instantly. Writes require approval by default. Everything is logged.
- ReadGet Google Workspace Group DetailsRetrieves detailed information about a Google Workspace group.
- ReadGet Google Workspace User DetailsRetrieves detailed information about a Google Workspace user.
- ReadList Google Workspace Group MembersLists all members of a Google Workspace group with optional filtering and pagination.
- ReadList Google Workspace GroupsLists Google Workspace groups with optional filtering and pagination.
- ReadList Google Workspace UsersLists Google Workspace users with optional filtering and pagination.
- WriteAdd Alias to Google Workspace UserAdds an email alias to a Google Workspace user. Approval by default
- WriteAdd User to Google Workspace GroupAdds a user to a Google Workspace group with the specified role. Approval by default
- WriteCreate Google Workspace GroupCreates a new Google Workspace group with the specified details. Approval by default
- WriteCreate Google Workspace UserCreates a new Google Workspace user with the specified details. Approval by default
- WriteDelete Google Workspace UserDeletes a Google Workspace user permanently. Approval by default
- WriteRemove Alias from Google Workspace UserRemoves an email alias from a Google Workspace user. Approval by default
- WriteRemove User from Google Workspace GroupRemoves a user from a Google Workspace group, revoking their group access. Approval by default
- WriteSuspend/Unsuspend Google Workspace UserSuspends or unsuspends a Google Workspace user account. Approval by default
- WriteUpdate Google Workspace Group SettingsUpdates settings for a Google Workspace group. Approval by default
One prompt, start to finish
What a governed Google Admin run looks like inside Luumen.
Questions
Authorize once with OAuth 2.0. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Read actions answer immediately. Anything that writes — add alias to google workspace user, add user to google workspace group, create google workspace group, create google workspace user, and more — is shown as a plan and requires approval by default, including the 3 actions classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Every call to Google Admin — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Often connected alongside
All integrations
OktaAccess and posture from Okta, with approval on every change.
Microsoft Entra IDAccess and posture from Microsoft Entra ID, with approval on every change.
Auth0Access and posture from Auth0, with approval on every change.Ping IdentityAccess and posture from Ping Identity, with approval on every change.Put Google Admin to work with Luumen
Connect in minutes. Every action scoped, approved, and audited from day one.