domainwidedelegation.comStart free

Use cases → Admin and governance

Synchronise contacts across all Workspace users

Push or update contact lists for every user in the domain to maintain consistent, up-to-date address books.

Who it is forIT admins needing to push shared contacts or manage address books for all staff.
APIsAdmin SDK
Typical scopesadmin.directory.user, admin.directory.user.readonly

The problem

Users often end up with outdated or incomplete contacts, especially after org changes or mergers. Manual updates don’t scale and often miss users, leading to communication breakdowns.

How it works

  1. Enumerate all active users with the Admin SDK.
  2. Impersonate each user using domain-wide delegation.
  3. Push or update contacts for each user, handling batch writes where possible.
  4. Log and retry any failed synchronisations, noting API rate and quota limits.

What changes

All users’ contact lists are kept current, reducing confusion and ensuring everyone can reach colleagues and key external partners.

The trap in this one. The Contacts API does not guarantee immediate consistency: writes may take minutes to propagate, and reading back too soon can return stale data. Additionally, contact group updates can silently drop members if the batch size exceeds documented limits, with no error beyond a generic 400. Always verify synchronisation in a delayed, secondary pass.

Questions people ask

Can this update external contacts as well?

Yes, but you must ensure external entries are formatted correctly, or updates will be rejected without a clear error message.

How often should synchronisation run?

Daily or weekly is typical; more frequent runs risk hitting API quotas and amplifying propagation delays.

Want this built?

This is a pattern we run in production. We will set up the delegation and build this on top of it — $500 per hour, most of it working the same day.

Talk to us Or read the setup guide

Related use cases

Audit which third-party apps can read your mail

List every OAuth grant across the domain and find the retired tools still holding access.

Automate joiners, movers and leavers

Create accounts, set group membership, provision Drive and hand over mailboxes without a manual checklist.

Continuously verify your delegation still works

A scheduled probe that proves every API still answers under every tenant, before a customer finds out otherwise.