Dynamic groups overview

A dynamic group is a Google Group whose memberships are automatically managed using a membership query or a query on employee attributes, such as job role or building location. For example, a membership query might be "all users whose job role is Technical Writer in my organization."

Note: Dynamic groups are only available to Google Workspace Enterprise Standard, Enterprise Plus, Enterprise for Education, and Cloud Identity premium accounts. You can create up to 500 dynamic groups per customer. This limit can be increased on a case-by-case basis—contact Google Workspace Support with your specific use case to request an increase.

As part of the group's definition, you supply the query and Google systems ensure that all matching users in your organization are members of the group. Membership queries are written using Common Expression Language (CEL) which is the standard language used to write expressions for Google Cloud APIs.

Though dynamic groups are created and maintained differently than Google Groups, they are used for the same purposes. Namely, dynamic groups are used as email groups (to send email to a specific set of people) and for managing Identity and Access Management (IAM) and Google Workspace policies. For further information on IAM policies, see IAM. For further information on Google Workspace policies, see Customize access to Google Workspace services using access groups and Customize service settings with configuration groups.

For introductory information on policies, refer to Understanding policies.

Note: You cannot add a dynamic group as a member of a regular Google Group.

Technologies used to create a dynamic group

You can create and manage dynamic groups using the REST API or client libraries.

What's next

Here are a few next steps you might take:

• Formulate and test a membership query.
• Create a dynamic group.