How to Manage Google Workspace Directory Contacts, Domain Shared Contacts, and Global Address Lists

In large corporate enterprises, maintaining a synchronized address book across thousands of employees, external vendors, board members, and subsidiary contractors is essential for organizational communication. Within Google Workspace, the central address repository is the Directory—often referred to in enterprise messaging as the Global Address List (GAL). While standard personal contacts belong strictly to individual users, Directory profiles and Domain Shared Contacts populate autocomplete suggestions across Gmail, Google Calendar, Google Meet, and Google Contacts fleet-wide. Understanding how to manage Directory sharing, provision external Domain Shared Contacts via the People API and Google Apps Manager (GAM), and synchronize corporate directories guarantees unified contact visibility without manual user intervention.

Directory Architecture: Personal Contacts vs. Domain Shared Contacts

Understanding the architectural distinction between internal Workspace users, external shared entries, and personal address books is fundamental for directory governance. The table below outlines how these contact layers interact within Google Workspace:

Contact Tier	Administrative Authority	Visibility Scope	Management Mechanism
Workspace Users (Internal GAL)	Google Workspace Administrator	Universal; autocompletes across the entire domain.	Admin Console (Users), Google Cloud Directory Sync (GCDS), Admin SDK.
Domain Shared Contacts	Google Workspace Administrator	Universal; visible to all domain users under Directory.	People API / Domain Shared Contacts API, GAM, third-party sync connectors.
Delegated Contacts	Individual Mailbox Owner	Shared strictly with designated delegate accounts.	Google Contacts Delegation settings (e.g., Executive Assistants).
Personal Contacts	End User exclusively	Private to the authenticated individual user.	Google Contacts Web / Mobile UI, CardDAV sync.

Enabling and Customising Directory Sharing in Admin Console

By default, Google Workspace enables the Directory, but administrators can fine-tune contact visibility and hide sensitive personnel (such as executive protection details or stealth project teams).

1. Accessing Directory Settings

1. Log in to the Google Admin Console (admin.google.com) using Super Administrator credentials.
2. Navigate to Directory > Directory settings.
3. Click on Sharing settings.
4. Ensure Enable contact sharing is checked. When active, all user profiles (names, work emails, departments, titles) are indexed in Gmail autocomplete.

2. Restricting Directory Visibility via Custom Directories

In conglomerate structures or multi-brand environments, you may wish to prevent subsidiary A from viewing users in subsidiary B:

1. Under Sharing settings, select Custom directory.
2. Click New directory.
3. Select an Organizational Unit (OU) or specific security group.
4. Define which user groups are visible to that OU. This enforces partitioned Global Address Lists, ensuring users only see colleagues within their operational business unit.

Managing External Domain Shared Contacts with GAM

Enterprise organizations frequently need to expose external partners—such as outsourced IT helpdesks, legal counsel, and catering vendors—in the company-wide autocomplete directory without purchasing Workspace licenses for them. Google accomplishes this via Domain Shared Contacts.

Because the Google Admin Console lacks a native GUI button to manually create external shared contacts, administrators leverage the command-line tool GAM (Google Apps Manager) interfacing with the Directory API.

1. Creating an External Domain Shared Contact

To inject an external vendor directly into the corporate-wide Directory, execute:

gam create contact name "Dr. Alistair Finch" email "[email protected]" organization "Legal Council LLP" title "External Senior Counsel" workphone "+442079460912"

Upon execution:

• The contact is written to the domain’s shared contact database.
• Within minutes, all company employees typing “Alistair” or “Legal Council” in Gmail or Calendar see the verified contact card emerge in autocomplete.

2. Bulk Importing Contacts via CSV

To provision hundreds of external directory records from an HR payroll export:

gam csv /opt/exports/contractors.csv gam create contact name "~FullName" email "~WorkEmail" organization "~CompanyName" title "~Role"

3. Auditing and Deleting Shared Contacts

To list all external Domain Shared Contacts currently active in your tenant:

gam print contacts id name email organization title > /opt/reports/shared_contacts.csv

To delete a contact that has concluded their contract:

gam delete contact id "c1a2b3c4d5e6f7"

Synchronizing On-Premises Active Directory via GCDS

In hybrid enterprise architectures, user identities originate inside on-premises Microsoft Active Directory (AD) or LDAP servers. Google Cloud Directory Sync (GCDS) automates one-way synchronization to Google Workspace.

1. Mapping Schema Attributes in Configuration Manager

1. Open the GCDS Configuration Manager on your synchronization host.
2. Navigate to the User Accounts tab.
3. Map Active Directory LDAP attributes to Google Workspace profile fields:
   • mail → Primary Email Address.
   • givenName → First Name.
   • sn → Last Name.
   • title → Job Title.
   • department → Department.
   • telephoneNumber → Work Phone.
   • manager → Manager Email (constructs the visual organization chart in Google Contacts).
4. Navigate to the Shared Contacts tab to synchronize Active Directory “Contact” objects into Google Domain Shared Contacts automatically.
5. Run a Simulated Sync to verify mutations before committing changes to production.

Managing Delegated Contacts for Executive Assistants

Senior executives often require assistants to manage, categorize, and update their personal client networks without sharing full Gmail inbox delegation.

1. Open Google Contacts (contacts.google.com) under the executive’s account.
2. Click the Settings (cogwheel) icon in the top toolbar and select Delegate access.
3. Click Invite delegate.
4. Enter the assistant’s email address and select Send.
5. Once accepted, the assistant can view, author, edit, and delete the executive’s personal contacts directly from their own Google Contacts interface by switching to the delegated view.

Troubleshooting Common Directory Synchronization Issues

When operating enterprise directories, administrators frequently encounter specific indexing anomalies:

• Autocomplete Delays for Newly Created Users: Newly created Workspace accounts or GAM shared contacts can take up to 24 hours to propagate across global indexing caches. To accelerate discovery, users can search the full Directory tab in contacts.google.com directly rather than relying on cached Gmail client autocomplete.
• Duplicate Contacts Appearing in Gmail: Occurs when an employee has saved a colleague’s details into their Personal Contacts while the user simultaneously exists in the Directory. Encourage users to leverage the Merge & fix utility in Google Contacts to deduplicate personal entries against directory records.
• Hidden Users Appearing in Google Calendar: If a user account is hidden from the Directory via Admin Console, they are omitted from contact lists, but their calendar may still be bookable if calendar sharing is set to domain-wide. Adjust calendar permissions independently under Apps > Google Workspace > Calendar > General settings.