Skip to content

Connect OpenClaw to Google Admin

Let an OpenClaw agent manage Google Workspace users, groups and aliases through the Google Admin console, with no credentials handed to the agent.

Tags:integrations

Google Admin is the console behind Google Workspace: the place where IT and operations teams create accounts, manage groups, hand out aliases and suspend people who have left. It is essential and it is tedious. Onboarding a new hire means the same ten clicks every time, offboarding means remembering every group they were in, and “who is actually in the engineering@ list?” is a question that gets asked in chat far more often than it gets answered from the console.

With Claworc’s External Connections, an OpenClaw agent can work inside your Google Admin console on your behalf. You sign in to Google once through a popup with an admin account, Composio holds the resulting token, and the agent gets an auto-generated claworc-google_admin skill that tells it which Google Admin tools exist and how to call them. The agent never sees a password, an OAuth token or an API key.

Composio’s Google Admin toolkit exposes 14 tools covering users, groups and aliases. These are the ones an OpenClaw agent reaches for most often:

  • List and look up users — list Workspace users with filters and pagination, or fetch one user’s full record.
  • Create accounts — provision a new account with name, primary email and the other details the directory needs.
  • Suspend and reinstate — suspend or unsuspend an account, the first step of any offboarding and the quickest way to lock someone out without deleting their data.
  • Manage group membership — add or remove users from groups, including the role the member gets.
  • List groups and members — answer “who is in this group” and “which groups do we have” without opening the console.
  • Create and configure groups — create a new group and adjust its settings.
  • Add email aliases — give a user an additional email address.

Every tool is called through a small broker running next to the agent, so the agent only needs to describe what it wants done in plain language and let the skill handle the rest.

“Create an account for Priya Shah starting Monday, add her to engineering@ and all-hands@, and give her the alias priya@.” The agent creates the account, adds the group memberships, sets the alias and reports back with exactly what it created. Same result as the manual checklist, none of the clicking.

When someone leaves, ask the agent to suspend the account, list every group the person belongs to, and remove them from each one. Because it enumerates memberships rather than relying on memory, the departed contractor is no longer quietly receiving finance@ six months later.

“Who is in the security-reviewers group, and which of them were created in the last month?” The agent lists the group’s members, looks up each user’s record and returns a list you can paste straight into an audit response.

Connecting Google Admin takes three steps: an admin adds a Composio API key to Claworc’s settings, you open the instance’s Settings tab, click + Add connection, pick Google Admin and sign in to Google with a Workspace admin account. The claworc-google_admin skill appears in the instance a moment later. The full walkthrough, including the exact Composio permissions the key needs, is in the External Connections documentation.