Populate the Alternate Email/Email Alias in Gsuite with AD Info?

[JRA]

Morning all,

Have a bit of an odd one. Feeling my way around a new place's Gsuite I've had PasswordSync just not work for a group of staff here. Discovered why the other day. We use both O365 AND Gmail here, and the group in question has a different email address in the mail field in AD to their Gmail address, so ofc that sync won't work being keyed to it.

I have discovered though that adding in the email address that appears in AD to the "Alternate email addresses (email alias)" in User information DOES then allow the PasswordSync to work. Question is though how to automate that.

Can GAM do it? Has anyone reading also got this and solved it?

Thanks much any/everyone for any pointers!

[JRA]

Just found the following:

how to add email alias in bulk (google.com)

Pretty much got me where I need!

Is there any way though to set that command running for a particular OU (either in AD or in Gmail) and add the alias as the "mail" field that appears in AD?

If not it can be as the linked thread suggests and an "overnight" thing against a .csv

Thanks all!

[Thomas Cook]

Take a look at GCDS.  It is made to sync AD with Workspace.  We have it set up and it runs once per hour all the time.

On Thu, Jan 20, 2022 at 7:15 AM JRA <james....@plantsbrooklearning.org.uk> wrote:

Unsubscribe

It appears that you have subscribed to commercial messages from this sender. To stop receiving such messages from this sender, please unsubscribe

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit http://secure-web.cisco.com/15o3T3k_t2ZWPfHsrYsIwNXWxFSYo_EHKQfVPphdlzJGkKFVw3gApydKL7hT8m4HM_TYZMYJZizyJjJfeGy3OuGxc1atfUrZBpgVNA00E1es5OUJmOAcEK9-s-rqGsu94UQpS2qZ5HpezNF3KQ8l8HeW79f7R6IT_b0KxXTKXiAV8BNmbhDugAitoXrmqK57qwtTnfyRJg-QTxr5juAfUlqembHP6Om3ysjQJnn1ji0Nt9IMzG2_N3LnyxFAuRKUD3vNndpz9xH6mMbo-R2wLpZm-Ubpe6GlPsyzQ8rPpH4DgWmkhB7RuOG6rFAt4y0QjvwfmrYfdHqr9daEvXXHct-GasskDbTK3uuoGq3NoTNxhjAQYi-MiEeQlKVg7aSEBEVZYsIehBSXqksgX6gHOO7h6kIJqhVqE02VdK0IwiGNQC9GWvm6uLxtX6Aw3fU_CJiNcHNxD9a5zNLqT8vcpog/l110%3Ahttps%3A%2F%2Fgroups.google.com%2Fd%2Fmsgid%2Fgoogle-apps-manager%2F9bd54032-3488-4f03-9b13-ee53463d81d8n%2540googlegroups.come.

--

Thomas Cook

Systems Engineer

City of Chattanooga - Department of Information Technology

423.643.6275 office
423.421.4266 mobile

Failure is not an option. It is mandatory. The option is whether or not to let failure be the last thing you do.
Nobody outranks Sergeant Safety except Major Negligence...

[JRA]

Ah ok interesting. We have GCDS but it's not running just now (disabled pending a checkup I think.)

So with this running, regardless of the email addresses being different in AD and gmail this should sync the passwords right?

Thanks much for the reply there. :)

[JRA]

Ok so just in case anyone else comes across this and doesn't know GCDS very well (like I didn't) this can be done from User Accounts > User Attributes and an AD attribute then assigned to be Alias.