Stay organized with collections
Save and categorize content based on your preferences.
Dynamic groups overview
A dynamic group is a
Google Group whose memberships are automatically managed using a membership
query or a query on employee attributes, such as job role or building location.
For example, a membership query might be "all users whose job role is Technical
Writer in my organization."
As part of the group's definition, you supply the query and Google systems
ensure that all matching users in your organization are members of the group.
Membership queries are written using
Common Expression Language (CEL)
which is the standard language used to write expressions for Google Cloud
APIs.
Though dynamic groups are created and maintained differently than Google Groups,
they are used for the same purposes. Namely, dynamic groups are used as email
groups (to send email to a specific set of people) and for managing
Identity and Access Management (IAM) and Google Workspace policies.
For further information on IAM policies, see
IAM.
For further information on Google Workspace policies, see
Customize access to Google Workspace services using access groups
and Customize service settings with configuration groups.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[[["\u003cp\u003eDynamic groups are Google Groups with memberships automatically managed by a query based on employee attributes, such as job role.\u003c/p\u003e\n"],["\u003cp\u003eThese groups use Common Expression Language (CEL) for membership queries and are used for email distribution and managing Identity and Access Management (IAM) and Google Workspace policies.\u003c/p\u003e\n"],["\u003cp\u003eDynamic groups are available only to certain Google Workspace and Cloud Identity premium accounts, with a default limit of 500 groups per customer.\u003c/p\u003e\n"],["\u003cp\u003eDynamic groups can be managed via REST API or client libraries but cannot be added as members of a regular Google Group.\u003c/p\u003e\n"],["\u003cp\u003eUsers can formulate and test membership queries and create dynamic groups as next steps.\u003c/p\u003e\n"]]],[],null,["# Dynamic groups overview\n=======================\n\nA *dynamic group* is a\nGoogle Group whose memberships are automatically managed using a membership\nquery or a query on employee attributes, such as job role or building location.\nFor example, a membership query might be \"all users whose job role is Technical\nWriter in my organization.\"\n| **Note:** Dynamic groups are only available to Google Workspace Enterprise Standard, Enterprise Plus, Enterprise for Education, and Cloud Identity premium accounts. You can create up to 500 dynamic groups per customer. This limit can be increased on a case-by-case basis---contact [Google Workspace Support](https://support.google.com/a/answer/1047213) with your specific use case to request an increase.\n\nAs part of the group's definition, you supply the query and Google systems\nensure that all matching users in your organization are members of the group.\nMembership queries are written using\n[*Common Expression Language (CEL)*](https://opensource.google.com/projects/cel)\nwhich is the standard language used to write expressions for Google Cloud\nAPIs.\n\nThough dynamic groups are created and maintained differently than Google Groups,\nthey are used for the same purposes. Namely, dynamic groups are used as email\ngroups (to send email to a specific set of people) and for managing\nIdentity and Access Management (IAM) and Google Workspace policies.\nFor further information on IAM policies, see\n[IAM](/iam).\nFor further information on Google Workspace policies, see\n[Customize access to Google Workspace services using access groups](https://support.google.com/a/answer/9050643)\nand [Customize service settings with configuration groups](https://support.google.com/a/answer/9224126).\n\nFor introductory information on policies, refer to\n[Understanding policies](/iam/docs/policies).\n| **Note:** You cannot add a dynamic group as a member of a regular Google Group.\n\nTechnologies used to create a dynamic group\n-------------------------------------------\n\nYou can create and manage dynamic groups using the REST API or client libraries.\n\nWhat's next\n-----------\n\nHere are a few next steps you might take:\n\n- [Formulate and test a membership query](/identity/docs/how-to/test-query-dynamic-groups).\n- [Create a dynamic group](/identity/docs/how-to/create-dynamic-groups)."]]
