Back to Resources
INTEGRATION

Google Workspace Integration for User-Based Filtering

Sync your Google Workspace directory for per-student and per-teacher filtering policies.

5 min read

Why User-Based Filtering?

Device-based filtering applies the same rules regardless of who's using the device. User-based filtering lets you apply different policies to different users — a 3rd grader and a teacher sharing a lab iPad get appropriate filtering for each.

Device-Based

Same policy for everyone on that device. Simple but inflexible. Best for 1:1 deployments.

User-Based ✨

Policy follows the user. Teachers get teacher policies. Students get grade-level policies. Best for shared devices.

Setup Steps

  1. Connect Google Workspace

    Go to Settings → Workspace in your KyberGate dashboard. Click 'Connect Google Workspace' and sign in with your Google admin account. Grant read-only access to your directory.

  2. Initial Directory Sync

    KyberGate will import all users, organizational units (OUs), and groups from your Google Workspace. This typically takes 1-3 minutes for districts under 10,000 users.

  3. Map OUs to Policies

    Assign filtering policies to each organizational unit. Example: /Students/Elementary → Elementary policy, /Students/HighSchool → High School policy, /Staff → Staff policy.

  4. Enable User Identification

    Set your org's filterMode to 'user' or 'both' in Settings → General. When set to 'both', the proxy checks the user's Google account first, then falls back to device-level policies.

  5. Test with a User

    Sign into a filtered device with a student Google account. Verify the correct policy applies by visiting a test domain.

Automatic Sync

KyberGate automatically syncs your Google Workspace directory every 6 hours. New students, transferred students, and graduated students are reflected automatically — no manual updates needed.

Scheduled Sync: Every 6 hours

Manual sync available anytime from Settings → Workspace

Connect your Google Workspace today

User-based filtering is included in all KyberGate plans.