Why User-Based Filtering?
Device-based filtering applies the same rules regardless of who's using the device. User-based filtering lets you apply different policies to different users — a 3rd grader and a teacher sharing a lab iPad get appropriate filtering for each.
Device-Based
Same policy for everyone on that device. Simple but inflexible. Best for 1:1 deployments.
User-Based ✨
Policy follows the user. Teachers get teacher policies. Students get grade-level policies. Best for shared devices.
Setup Steps
Connect Google Workspace
Go to Settings → Workspace in your KyberGate dashboard. Click 'Connect Google Workspace' and sign in with your Google admin account. Grant read-only access to your directory.
Initial Directory Sync
KyberGate will import all users, organizational units (OUs), and groups from your Google Workspace. This typically takes 1-3 minutes for districts under 10,000 users.
Map OUs to Policies
Assign filtering policies to each organizational unit. Example: /Students/Elementary → Elementary policy, /Students/HighSchool → High School policy, /Staff → Staff policy.
Enable User Identification
Set your org's filterMode to 'user' or 'both' in Settings → General. When set to 'both', the proxy checks the user's Google account first, then falls back to device-level policies.
Test with a User
Sign into a filtered device with a student Google account. Verify the correct policy applies by visiting a test domain.
Automatic Sync
KyberGate automatically syncs your Google Workspace directory every 6 hours. New students, transferred students, and graduated students are reflected automatically — no manual updates needed.
Scheduled Sync: Every 6 hours
Manual sync available anytime from Settings → Workspace